x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac0000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:20 executing program 5 (fault-call:3 fault-nth:27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1070.963276] FAULT_INJECTION: forcing a failure. [ 1070.963276] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.980496] CPU: 1 PID: 6114 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1070.987554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.996920] Call Trace: [ 1070.999522] dump_stack+0x138/0x197 [ 1071.003165] should_fail.cold+0x10f/0x159 [ 1071.007323] should_failslab+0xdb/0x130 [ 1071.011308] kmem_cache_alloc_node_trace+0x280/0x770 [ 1071.016417] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1071.021878] __kmalloc_node_track_caller+0x3d/0x80 [ 1071.026821] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1071.031497] __alloc_skb+0xcf/0x500 [ 1071.035126] ? skb_scrub_packet+0x4b0/0x4b0 [ 1071.039446] ? netlink_has_listeners+0x20a/0x330 [ 1071.044207] kobject_uevent_env+0x781/0xc23 [ 1071.048536] kobject_uevent+0x20/0x26 [ 1071.052340] kobject_put.cold+0x168/0x2f9 [ 1071.056493] net_rx_queue_update_kobjects+0x2f7/0x400 [ 1071.061703] netdev_unregister_kobject+0x13b/0x1d0 [ 1071.066632] rollback_registered_many+0x694/0xb60 [ 1071.071489] ? tun_detach_all+0x730/0x730 [ 1071.075636] ? netdev_info+0xf0/0xf0 [ 1071.079350] ? queue_delayed_work_on+0xc3/0x1e0 [ 1071.084039] ? trace_hardirqs_on_caller+0x400/0x590 [ 1071.089145] rollback_registered+0xdd/0x180 [ 1071.093482] ? rollback_registered_many+0xb60/0xb60 [ 1071.098513] ? linkwatch_schedule_work+0xf8/0x130 [ 1071.103368] unregister_netdevice_queue+0x1ae/0x230 [ 1071.108391] __tun_detach+0xa86/0xce0 [ 1071.112728] ? locks_remove_file+0x2d0/0x420 [ 1071.117146] ? __tun_detach+0xce0/0xce0 [ 1071.121210] tun_chr_close+0x46/0x60 [ 1071.124931] __fput+0x275/0x7a0 [ 1071.128248] ____fput+0x16/0x20 [ 1071.131542] task_work_run+0x114/0x190 [ 1071.135447] exit_to_usermode_loop+0x1da/0x220 [ 1071.140032] do_syscall_64+0x4bc/0x640 [ 1071.143918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1071.148776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1071.153965] RIP: 0033:0x459879 07:10:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xffff) close(r0) [ 1071.157160] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1071.164869] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1071.172145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1071.179410] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1071.186679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1071.193983] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:21 executing program 5 (fault-call:3 fault-nth:28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1071.301433] FAULT_INJECTION: forcing a failure. [ 1071.301433] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.318102] CPU: 1 PID: 6121 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1071.325157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.334512] Call Trace: [ 1071.337107] dump_stack+0x138/0x197 [ 1071.340740] should_fail.cold+0x10f/0x159 [ 1071.344894] should_failslab+0xdb/0x130 [ 1071.348874] kmem_cache_alloc_node+0x287/0x780 [ 1071.353469] __alloc_skb+0x9c/0x500 [ 1071.357093] ? skb_scrub_packet+0x4b0/0x4b0 [ 1071.361414] ? netlink_has_listeners+0x20a/0x330 [ 1071.366174] kobject_uevent_env+0x781/0xc23 [ 1071.370511] kobject_uevent+0x20/0x26 [ 1071.374310] kobject_put.cold+0x168/0x2f9 [ 1071.378467] net_rx_queue_update_kobjects+0x2f7/0x400 [ 1071.383758] netdev_unregister_kobject+0x13b/0x1d0 [ 1071.388691] rollback_registered_many+0x694/0xb60 [ 1071.393534] ? tun_detach_all+0x730/0x730 [ 1071.397682] ? netdev_info+0xf0/0xf0 [ 1071.401410] ? queue_delayed_work_on+0xc3/0x1e0 [ 1071.406078] ? trace_hardirqs_on_caller+0x400/0x590 [ 1071.411111] rollback_registered+0xdd/0x180 [ 1071.415433] ? rollback_registered_many+0xb60/0xb60 [ 1071.420455] ? linkwatch_schedule_work+0xf8/0x130 [ 1071.425300] unregister_netdevice_queue+0x1ae/0x230 [ 1071.430333] __tun_detach+0xa86/0xce0 [ 1071.434133] ? locks_remove_file+0x2d0/0x420 [ 1071.438545] ? __tun_detach+0xce0/0xce0 [ 1071.442523] tun_chr_close+0x46/0x60 [ 1071.446235] __fput+0x275/0x7a0 [ 1071.449519] ____fput+0x16/0x20 [ 1071.452796] task_work_run+0x114/0x190 [ 1071.456689] exit_to_usermode_loop+0x1da/0x220 [ 1071.461282] do_syscall_64+0x4bc/0x640 [ 1071.465171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1071.470047] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1071.475240] RIP: 0033:0x459879 [ 1071.478430] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1071.486141] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1071.493412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1071.500680] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1071.507952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1071.515405] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:21 executing program 5 (fault-call:3 fault-nth:29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xec, "85afcd823014a1a12b4e50c2834c47e91634705165ba6e230cb2fdfbe46fe7f09752d826197ae87e69f2bbafb10362f6bf594ec41d9d87b430a2946b3d29d71e1d91e422c51ff806ee90b9b2d7bd416831def13df66e93086d01173569585de9c4f85fe43e07b974a2dfb3ab7388ca1f09ccf9bc7fc79559dc025c8cd4dbcec26fd8d969ae1be7236b341ab43920b3834112be58971ec859f4d98527ebd30fe1e62462d4d267e41291b7bb646bafba1d3cf79e4da6b34c1add6edb967bc7b99ada9756bd11653b00b90e7df890d519806a9be4043def75af50601b4c1dc052a5c46c749e1eabb73612d5c68f"}, &(0x7f00000001c0)=0xf4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x5, 0x81, 0x6}, &(0x7f0000000240)=0x10) 07:10:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1071.671902] FAULT_INJECTION: forcing a failure. [ 1071.671902] name failslab, interval 1, probability 0, space 0, times 0 07:10:21 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1138], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac0000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1071.742414] CPU: 0 PID: 6126 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1071.749500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.759300] Call Trace: [ 1071.761908] dump_stack+0x138/0x197 [ 1071.765560] should_fail.cold+0x10f/0x159 [ 1071.769729] should_failslab+0xdb/0x130 [ 1071.773718] kmem_cache_alloc_node_trace+0x280/0x770 [ 1071.778839] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1071.784350] __kmalloc_node_track_caller+0x3d/0x80 [ 1071.789292] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1071.793994] __alloc_skb+0xcf/0x500 [ 1071.794006] ? skb_scrub_packet+0x4b0/0x4b0 [ 1071.794019] ? netlink_has_listeners+0x20a/0x330 [ 1071.794037] kobject_uevent_env+0x781/0xc23 [ 1071.794058] kobject_uevent+0x20/0x26 [ 1071.794069] kobject_put.cold+0x168/0x2f9 [ 1071.794084] net_rx_queue_update_kobjects+0x2f7/0x400 [ 1071.794104] netdev_unregister_kobject+0x13b/0x1d0 [ 1071.794117] rollback_registered_many+0x694/0xb60 [ 1071.794133] ? tun_detach_all+0x730/0x730 [ 1071.838319] ? netdev_info+0xf0/0xf0 [ 1071.842224] ? queue_delayed_work_on+0xc3/0x1e0 [ 1071.846898] ? trace_hardirqs_on_caller+0x400/0x590 [ 1071.851928] rollback_registered+0xdd/0x180 [ 1071.856235] ? rollback_registered_many+0xb60/0xb60 [ 1071.861243] ? linkwatch_schedule_work+0xf8/0x130 [ 1071.866351] unregister_netdevice_queue+0x1ae/0x230 [ 1071.871444] __tun_detach+0xa86/0xce0 [ 1071.875235] ? locks_remove_file+0x2d0/0x420 [ 1071.879645] ? __tun_detach+0xce0/0xce0 [ 1071.883604] tun_chr_close+0x46/0x60 [ 1071.887310] __fput+0x275/0x7a0 [ 1071.890593] ____fput+0x16/0x20 [ 1071.893954] task_work_run+0x114/0x190 [ 1071.897921] exit_to_usermode_loop+0x1da/0x220 [ 1071.902494] do_syscall_64+0x4bc/0x640 [ 1071.906378] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1071.911209] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1071.916385] RIP: 0033:0x459879 [ 1071.919561] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1071.927254] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1071.934508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1071.941766] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1071.949024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1071.956375] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:21 executing program 5 (fault-call:3 fault-nth:30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1072.128218] FAULT_INJECTION: forcing a failure. [ 1072.128218] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.146683] CPU: 0 PID: 6151 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1072.153743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.163118] Call Trace: [ 1072.165736] dump_stack+0x138/0x197 [ 1072.169376] should_fail.cold+0x10f/0x159 [ 1072.173537] should_failslab+0xdb/0x130 [ 1072.177517] kmem_cache_alloc_node+0x287/0x780 [ 1072.182116] __alloc_skb+0x9c/0x500 [ 1072.185741] ? skb_scrub_packet+0x4b0/0x4b0 [ 1072.190063] ? netlink_has_listeners+0x20a/0x330 [ 1072.194831] kobject_uevent_env+0x781/0xc23 [ 1072.199161] kobject_uevent+0x20/0x26 [ 1072.202960] kobject_put.cold+0x168/0x2f9 [ 1072.207110] net_rx_queue_update_kobjects+0x2f7/0x400 [ 1072.212315] netdev_unregister_kobject+0x13b/0x1d0 [ 1072.217282] rollback_registered_many+0x694/0xb60 [ 1072.222145] ? tun_detach_all+0x730/0x730 [ 1072.226285] ? netdev_info+0xf0/0xf0 [ 1072.229985] ? queue_delayed_work_on+0xc3/0x1e0 [ 1072.234649] ? trace_hardirqs_on_caller+0x400/0x590 [ 1072.239672] rollback_registered+0xdd/0x180 [ 1072.243988] ? rollback_registered_many+0xb60/0xb60 [ 1072.248989] ? linkwatch_schedule_work+0xf8/0x130 [ 1072.253820] unregister_netdevice_queue+0x1ae/0x230 [ 1072.258824] __tun_detach+0xa86/0xce0 [ 1072.262622] ? locks_remove_file+0x2d0/0x420 [ 1072.267019] ? __tun_detach+0xce0/0xce0 [ 1072.270976] tun_chr_close+0x46/0x60 [ 1072.274686] __fput+0x275/0x7a0 [ 1072.277965] ____fput+0x16/0x20 [ 1072.281230] task_work_run+0x114/0x190 [ 1072.285105] exit_to_usermode_loop+0x1da/0x220 [ 1072.289673] do_syscall_64+0x4bc/0x640 [ 1072.293546] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1072.298381] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1072.303556] RIP: 0033:0x459879 [ 1072.306727] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1072.314431] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1072.321687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:10:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1072.328949] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1072.336204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1072.343458] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:22 executing program 5 (fault-call:3 fault-nth:31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1072.493318] FAULT_INJECTION: forcing a failure. [ 1072.493318] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.504902] CPU: 0 PID: 6159 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1072.511938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.521407] Call Trace: [ 1072.524086] dump_stack+0x138/0x197 [ 1072.527977] should_fail.cold+0x10f/0x159 [ 1072.532123] should_failslab+0xdb/0x130 [ 1072.536176] kmem_cache_alloc_node_trace+0x280/0x770 07:10:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) [ 1072.541561] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1072.547016] __kmalloc_node_track_caller+0x3d/0x80 [ 1072.551951] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1072.556628] __alloc_skb+0xcf/0x500 [ 1072.560340] ? skb_scrub_packet+0x4b0/0x4b0 [ 1072.564652] ? netlink_has_listeners+0x20a/0x330 [ 1072.569414] kobject_uevent_env+0x781/0xc23 [ 1072.573737] kobject_uevent+0x20/0x26 [ 1072.577550] kobject_put.cold+0x168/0x2f9 [ 1072.581716] net_rx_queue_update_kobjects+0x2f7/0x400 [ 1072.586926] netdev_unregister_kobject+0x13b/0x1d0 07:10:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x2) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1072.591889] rollback_registered_many+0x694/0xb60 [ 1072.596748] ? tun_detach_all+0x730/0x730 [ 1072.600930] ? netdev_info+0xf0/0xf0 [ 1072.604672] ? queue_delayed_work_on+0xc3/0x1e0 [ 1072.609367] ? trace_hardirqs_on_caller+0x400/0x590 [ 1072.614431] rollback_registered+0xdd/0x180 [ 1072.614441] ? rollback_registered_many+0xb60/0xb60 [ 1072.614452] ? linkwatch_schedule_work+0xf8/0x130 [ 1072.614465] unregister_netdevice_queue+0x1ae/0x230 [ 1072.614475] __tun_detach+0xa86/0xce0 [ 1072.614487] ? locks_remove_file+0x2d0/0x420 [ 1072.614505] ? __tun_detach+0xce0/0xce0 [ 1072.614512] tun_chr_close+0x46/0x60 [ 1072.614524] __fput+0x275/0x7a0 [ 1072.614539] ____fput+0x16/0x20 [ 1072.614550] task_work_run+0x114/0x190 [ 1072.614571] exit_to_usermode_loop+0x1da/0x220 [ 1072.614584] do_syscall_64+0x4bc/0x640 [ 1072.614593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1072.614610] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1072.614618] RIP: 0033:0x459879 07:10:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33f) close(r0) [ 1072.614628] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1072.614639] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1072.614644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1072.614650] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1072.614656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1072.614662] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:22 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1138], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:22 executing program 5 (fault-call:3 fault-nth:32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x824) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x9, 0x10, 0x3, 0x4, 0x0, 0x9, 0xa200, 0x8, 0x9fa6, 0x7fffffff, 0x200, 0x7f, 0x1, 0x9, 0x3, 0x4, 0x1000, 0x6, 0x8, 0xf3c, 0x1000, 0x2, 0x5, 0xa6, 0x5, 0x100, 0x10001, 0xffffffff, 0x1f, 0x1, 0x6, 0x3, 0xfffffffffffffff8, 0x4, 0x9, 0x6d0, 0x0, 0x100000001, 0x1, @perf_config_ext={0x8374, 0x7}, 0x0, 0x7, 0x2, 0x5, 0x4, 0x1, 0x100000001}, r3, 0x3, r2, 0xb) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x9, 0x6, 0x4, 0x100, {0x77359400}, {0x1, 0x1, 0xb9, 0xffffffffffffff7f, 0x9, 0x1f, "1983e31f"}, 0x9, 0x1, @planes=&(0x7f0000000080)={0x7, 0x8000, @userptr=0x3, 0x7ff}, 0x4}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x1f4, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbd11}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x42ca}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffffff}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1f, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b6d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8da}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb31}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7553}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) socket$pppoe(0x18, 0x1, 0x0) close(r1) [ 1072.932606] FAULT_INJECTION: forcing a failure. [ 1072.932606] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.965307] CPU: 0 PID: 6178 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1072.972377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.981738] Call Trace: [ 1072.984338] dump_stack+0x138/0x197 [ 1072.987973] should_fail.cold+0x10f/0x159 [ 1072.992132] should_failslab+0xdb/0x130 [ 1072.996108] kmem_cache_alloc_node_trace+0x280/0x770 [ 1073.001217] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1073.006700] __kmalloc_node_track_caller+0x3d/0x80 [ 1073.011628] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1073.016299] __alloc_skb+0xcf/0x500 [ 1073.019926] ? skb_scrub_packet+0x4b0/0x4b0 [ 1073.024245] ? netlink_has_listeners+0x20a/0x330 [ 1073.029119] kobject_uevent_env+0x781/0xc23 [ 1073.039445] kobject_uevent+0x20/0x26 [ 1073.043246] kobject_put.cold+0x168/0x2f9 [ 1073.047407] net_rx_queue_update_kobjects+0x2f7/0x400 [ 1073.052628] netdev_unregister_kobject+0x13b/0x1d0 [ 1073.057586] rollback_registered_many+0x694/0xb60 [ 1073.062462] ? tun_detach_all+0x730/0x730 [ 1073.066613] ? netdev_info+0xf0/0xf0 [ 1073.070336] ? queue_delayed_work_on+0xc3/0x1e0 [ 1073.075097] ? trace_hardirqs_on_caller+0x400/0x590 [ 1073.080128] rollback_registered+0xdd/0x180 [ 1073.084451] ? rollback_registered_many+0xb60/0xb60 [ 1073.089470] ? linkwatch_schedule_work+0xf8/0x130 [ 1073.094340] unregister_netdevice_queue+0x1ae/0x230 [ 1073.099380] __tun_detach+0xa86/0xce0 [ 1073.103182] ? locks_remove_file+0x2d0/0x420 [ 1073.107595] ? __tun_detach+0xce0/0xce0 [ 1073.111581] tun_chr_close+0x46/0x60 [ 1073.115297] __fput+0x275/0x7a0 [ 1073.118579] ____fput+0x16/0x20 [ 1073.121859] task_work_run+0x114/0x190 [ 1073.125757] exit_to_usermode_loop+0x1da/0x220 [ 1073.130342] do_syscall_64+0x4bc/0x640 [ 1073.134223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1073.139072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1073.144258] RIP: 0033:0x459879 [ 1073.147444] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1073.155159] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1073.162456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1073.169958] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1073.177302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1073.184567] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:23 executing program 5 (fault-call:3 fault-nth:33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:23 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x6001}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40800) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x6, 0xf6, 0x20, 'queue0\x00', 0xa53}) close(0xffffffffffffffff) [ 1073.358518] FAULT_INJECTION: forcing a failure. [ 1073.358518] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.374111] CPU: 0 PID: 6188 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1073.381180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.390640] Call Trace: [ 1073.393246] dump_stack+0x138/0x197 [ 1073.396897] should_fail.cold+0x10f/0x159 [ 1073.401101] should_failslab+0xdb/0x130 07:10:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x16, 0x30, 0xa, 0x0, 0x1, 0x4, 0x5, 0xe3, 0x1}) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x4, 0x2, 0x9}) close(r0) [ 1073.405095] kmem_cache_alloc_node+0x287/0x780 [ 1073.409715] __alloc_skb+0x9c/0x500 [ 1073.413376] ? skb_scrub_packet+0x4b0/0x4b0 [ 1073.417713] ? netlink_has_listeners+0x20a/0x330 [ 1073.422583] kobject_uevent_env+0x781/0xc23 [ 1073.426903] kobject_uevent+0x20/0x26 [ 1073.430690] kobject_put.cold+0x168/0x2f9 [ 1073.435006] net_rx_queue_update_kobjects+0x2f7/0x400 [ 1073.440312] netdev_unregister_kobject+0x13b/0x1d0 [ 1073.445526] rollback_registered_many+0x694/0xb60 [ 1073.450361] ? tun_detach_all+0x730/0x730 [ 1073.454530] ? netdev_info+0xf0/0xf0 [ 1073.458512] ? queue_delayed_work_on+0xc3/0x1e0 [ 1073.463301] ? trace_hardirqs_on_caller+0x400/0x590 [ 1073.468315] rollback_registered+0xdd/0x180 [ 1073.472724] ? rollback_registered_many+0xb60/0xb60 [ 1073.477794] ? linkwatch_schedule_work+0xf8/0x130 [ 1073.482742] unregister_netdevice_queue+0x1ae/0x230 [ 1073.487758] __tun_detach+0xa86/0xce0 [ 1073.491637] ? locks_remove_file+0x2d0/0x420 [ 1073.496152] ? __tun_detach+0xce0/0xce0 [ 1073.500193] tun_chr_close+0x46/0x60 [ 1073.503927] __fput+0x275/0x7a0 [ 1073.507207] ____fput+0x16/0x20 [ 1073.510480] task_work_run+0x114/0x190 [ 1073.514385] exit_to_usermode_loop+0x1da/0x220 [ 1073.518969] do_syscall_64+0x4bc/0x640 [ 1073.522869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1073.527712] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1073.532937] RIP: 0033:0x459879 [ 1073.536203] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1073.543926] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1073.551277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:10:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0) shutdown(r0, 0x1) 07:10:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x2) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1073.558558] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1073.565823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1073.573109] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:23 executing program 5 (fault-call:3 fault-nth:34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1073.665674] IPVS: ftp: loaded support on port[0] = 21 07:10:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x0) 07:10:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1073.750141] net_ratelimit: 22 callbacks suppressed [ 1073.750145] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.760269] protocol 88fb is buggy, dev hsr_slave_1 [ 1073.765416] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.770610] protocol 88fb is buggy, dev hsr_slave_1 [ 1073.780780] FAULT_INJECTION: forcing a failure. [ 1073.780780] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.799547] CPU: 1 PID: 6204 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1073.806807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.816184] Call Trace: [ 1073.818792] dump_stack+0x138/0x197 [ 1073.822438] should_fail.cold+0x10f/0x159 [ 1073.826602] should_failslab+0xdb/0x130 [ 1073.830598] __kmalloc+0x2f0/0x7a0 [ 1073.834150] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1073.839632] ? kobject_uevent_env+0x378/0xc23 [ 1073.844144] ? rcu_read_lock_sched_held+0x110/0x130 [ 1073.849279] ? kobject_get_path+0xbb/0x1a0 [ 1073.853516] kobject_get_path+0xbb/0x1a0 [ 1073.857577] kobject_uevent_env+0x39c/0xc23 [ 1073.861909] ? show_regs_print_info+0x63/0x63 [ 1073.866438] kobject_uevent+0x20/0x26 [ 1073.866454] kobject_put.cold+0x168/0x2f9 [ 1073.874403] netdev_queue_update_kobjects+0x1fa/0x360 [ 1073.879617] netdev_unregister_kobject+0x148/0x1d0 [ 1073.884653] rollback_registered_many+0x694/0xb60 [ 1073.889496] ? tun_detach_all+0x730/0x730 [ 1073.893688] ? netdev_info+0xf0/0xf0 [ 1073.897407] ? queue_delayed_work_on+0xc3/0x1e0 [ 1073.902186] ? trace_hardirqs_on_caller+0x400/0x590 [ 1073.907280] rollback_registered+0xdd/0x180 [ 1073.911596] ? rollback_registered_many+0xb60/0xb60 [ 1073.916720] ? linkwatch_schedule_work+0xf8/0x130 [ 1073.921784] unregister_netdevice_queue+0x1ae/0x230 [ 1073.926825] __tun_detach+0xa86/0xce0 [ 1073.930728] ? locks_remove_file+0x2d0/0x420 [ 1073.935136] ? __tun_detach+0xce0/0xce0 [ 1073.939107] tun_chr_close+0x46/0x60 [ 1073.942821] __fput+0x275/0x7a0 [ 1073.946099] ____fput+0x16/0x20 [ 1073.949469] task_work_run+0x114/0x190 [ 1073.953369] exit_to_usermode_loop+0x1da/0x220 [ 1073.957958] do_syscall_64+0x4bc/0x640 [ 1073.961853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1073.966800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1073.972000] RIP: 0033:0x459879 [ 1073.975190] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1073.982920] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1073.990179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1073.997438] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1074.004706] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1074.011975] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:23 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYBLOB="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"/1139], 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:23 executing program 5 (fault-call:3 fault-nth:35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1074.074127] IPVS: ftp: loaded support on port[0] = 21 [ 1074.203087] FAULT_INJECTION: forcing a failure. [ 1074.203087] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.215609] CPU: 1 PID: 6221 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1074.222664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.232047] Call Trace: [ 1074.234865] dump_stack+0x138/0x197 [ 1074.238520] should_fail.cold+0x10f/0x159 [ 1074.242785] should_failslab+0xdb/0x130 [ 1074.246757] kmem_cache_alloc_node+0x287/0x780 [ 1074.251366] __alloc_skb+0x9c/0x500 [ 1074.255025] ? skb_scrub_packet+0x4b0/0x4b0 [ 1074.259337] ? netlink_has_listeners+0x20a/0x330 [ 1074.264086] kobject_uevent_env+0x781/0xc23 [ 1074.268398] kobject_uevent+0x20/0x26 [ 1074.272457] kobject_put.cold+0x168/0x2f9 [ 1074.276603] netdev_queue_update_kobjects+0x1fa/0x360 [ 1074.281856] netdev_unregister_kobject+0x148/0x1d0 [ 1074.286825] rollback_registered_many+0x694/0xb60 [ 1074.291689] ? tun_detach_all+0x730/0x730 [ 1074.295864] ? netdev_info+0xf0/0xf0 [ 1074.299586] ? queue_delayed_work_on+0xc3/0x1e0 [ 1074.304266] ? trace_hardirqs_on_caller+0x400/0x590 [ 1074.309290] rollback_registered+0xdd/0x180 [ 1074.313618] ? rollback_registered_many+0xb60/0xb60 [ 1074.318634] ? linkwatch_schedule_work+0xf8/0x130 [ 1074.323487] unregister_netdevice_queue+0x1ae/0x230 [ 1074.328520] __tun_detach+0xa86/0xce0 [ 1074.332329] ? locks_remove_file+0x2d0/0x420 [ 1074.336731] ? __tun_detach+0xce0/0xce0 [ 1074.340688] tun_chr_close+0x46/0x60 [ 1074.344515] __fput+0x275/0x7a0 [ 1074.347806] ____fput+0x16/0x20 [ 1074.351112] task_work_run+0x114/0x190 [ 1074.354992] exit_to_usermode_loop+0x1da/0x220 [ 1074.359577] do_syscall_64+0x4bc/0x640 [ 1074.363462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1074.368304] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1074.373495] RIP: 0033:0x459879 [ 1074.376671] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1074.384366] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1074.391621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:10:24 executing program 3: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) fcntl$getflags(r0, 0x401) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x8000) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080)=0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) close(r2) [ 1074.398973] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1074.406421] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1074.413689] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x2) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:24 executing program 5 (fault-call:3 fault-nth:36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0) shutdown(r0, 0x1) 07:10:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x338) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) [ 1074.578063] FAULT_INJECTION: forcing a failure. [ 1074.578063] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.596401] CPU: 0 PID: 6229 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1074.603554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.612920] Call Trace: [ 1074.615645] dump_stack+0x138/0x197 [ 1074.619287] should_fail.cold+0x10f/0x159 [ 1074.623431] should_failslab+0xdb/0x130 [ 1074.627416] __kmalloc+0x2f0/0x7a0 [ 1074.630968] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1074.636416] ? kobject_uevent_env+0x378/0xc23 [ 1074.640910] ? rcu_read_lock_sched_held+0x110/0x130 [ 1074.645920] ? kobject_get_path+0xbb/0x1a0 [ 1074.650141] kobject_get_path+0xbb/0x1a0 [ 1074.654192] kobject_uevent_env+0x39c/0xc23 [ 1074.658516] ? show_regs_print_info+0x63/0x63 [ 1074.663004] kobject_uevent+0x20/0x26 [ 1074.666985] kobject_put.cold+0x168/0x2f9 [ 1074.671122] netdev_queue_update_kobjects+0x1fa/0x360 [ 1074.676302] netdev_unregister_kobject+0x148/0x1d0 [ 1074.681228] rollback_registered_many+0x694/0xb60 [ 1074.686093] ? tun_detach_all+0x730/0x730 [ 1074.690247] ? netdev_info+0xf0/0xf0 [ 1074.694071] ? queue_delayed_work_on+0xc3/0x1e0 [ 1074.698738] ? trace_hardirqs_on_caller+0x400/0x590 [ 1074.703754] rollback_registered+0xdd/0x180 [ 1074.708071] ? rollback_registered_many+0xb60/0xb60 [ 1074.713074] ? linkwatch_schedule_work+0xf8/0x130 [ 1074.717905] unregister_netdevice_queue+0x1ae/0x230 [ 1074.723009] __tun_detach+0xa86/0xce0 [ 1074.726973] ? locks_remove_file+0x2d0/0x420 [ 1074.731370] ? __tun_detach+0xce0/0xce0 [ 1074.735327] tun_chr_close+0x46/0x60 [ 1074.739029] __fput+0x275/0x7a0 [ 1074.742297] ____fput+0x16/0x20 [ 1074.745567] task_work_run+0x114/0x190 [ 1074.749452] exit_to_usermode_loop+0x1da/0x220 [ 1074.754021] do_syscall_64+0x4bc/0x640 [ 1074.757894] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1074.762840] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1074.768029] RIP: 0033:0x459879 [ 1074.771216] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1074.779222] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1074.786502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1074.793759] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1074.801022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1074.808284] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 [ 1074.817710] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.822951] protocol 88fb is buggy, dev hsr_slave_1 07:10:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x0) 07:10:24 executing program 5 (fault-call:3 fault-nth:37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1074.870288] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.875418] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.880710] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.885803] protocol 88fb is buggy, dev hsr_slave_1 07:10:24 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYBLOB="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"/1139], 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'ifb0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1075.029250] FAULT_INJECTION: forcing a failure. [ 1075.029250] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.045431] CPU: 1 PID: 6244 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1075.052497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.061885] Call Trace: [ 1075.064491] dump_stack+0x138/0x197 [ 1075.068156] should_fail.cold+0x10f/0x159 [ 1075.072304] should_failslab+0xdb/0x130 [ 1075.076277] kmem_cache_alloc_node+0x287/0x780 [ 1075.080855] __alloc_skb+0x9c/0x500 [ 1075.084474] ? skb_scrub_packet+0x4b0/0x4b0 [ 1075.088877] ? netlink_has_listeners+0x20a/0x330 [ 1075.093707] kobject_uevent_env+0x781/0xc23 [ 1075.098031] kobject_uevent+0x20/0x26 [ 1075.101856] kobject_put.cold+0x168/0x2f9 [ 1075.105990] netdev_queue_update_kobjects+0x1fa/0x360 [ 1075.111168] netdev_unregister_kobject+0x148/0x1d0 [ 1075.116193] rollback_registered_many+0x694/0xb60 [ 1075.121030] ? tun_detach_all+0x730/0x730 [ 1075.125161] ? netdev_info+0xf0/0xf0 [ 1075.128949] ? queue_delayed_work_on+0xc3/0x1e0 [ 1075.133606] ? trace_hardirqs_on_caller+0x400/0x590 [ 1075.138627] rollback_registered+0xdd/0x180 [ 1075.142945] ? rollback_registered_many+0xb60/0xb60 [ 1075.147993] ? linkwatch_schedule_work+0xf8/0x130 [ 1075.152839] unregister_netdevice_queue+0x1ae/0x230 [ 1075.157853] __tun_detach+0xa86/0xce0 [ 1075.161655] ? locks_remove_file+0x2d0/0x420 [ 1075.166065] ? __tun_detach+0xce0/0xce0 [ 1075.170027] tun_chr_close+0x46/0x60 [ 1075.173733] __fput+0x275/0x7a0 [ 1075.177020] ____fput+0x16/0x20 [ 1075.180283] task_work_run+0x114/0x190 [ 1075.184158] exit_to_usermode_loop+0x1da/0x220 [ 1075.188728] do_syscall_64+0x4bc/0x640 [ 1075.192607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1075.197436] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1075.202617] RIP: 0033:0x459879 [ 1075.205788] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1075.213479] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1075.220734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1075.227988] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1075.235259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1075.242535] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:25 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x101000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000200)={0x1a, 0x7, 0x1, {{0xd, '/dev/net/tun\x00'}, 0x7}}, 0x1a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8000, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000080)={0x0, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @rand_addr=0xffffffffffff7ae6}}}, 0x108) close(r2) 07:10:25 executing program 5 (fault-call:3 fault-nth:38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1075.373987] FAULT_INJECTION: forcing a failure. [ 1075.373987] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.395043] CPU: 0 PID: 6259 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1075.402110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.411580] Call Trace: [ 1075.414171] dump_stack+0x138/0x197 [ 1075.417912] should_fail.cold+0x10f/0x159 [ 1075.422066] should_failslab+0xdb/0x130 [ 1075.426135] kmem_cache_alloc_node_trace+0x280/0x770 [ 1075.431243] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1075.436723] __kmalloc_node_track_caller+0x3d/0x80 [ 1075.441670] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1075.446348] __alloc_skb+0xcf/0x500 [ 1075.449966] ? skb_scrub_packet+0x4b0/0x4b0 [ 1075.454276] ? netlink_has_listeners+0x20a/0x330 [ 1075.459808] kobject_uevent_env+0x781/0xc23 [ 1075.464127] kobject_uevent+0x20/0x26 [ 1075.467914] kobject_put.cold+0x168/0x2f9 [ 1075.472135] netdev_queue_update_kobjects+0x1fa/0x360 [ 1075.477328] netdev_unregister_kobject+0x148/0x1d0 [ 1075.482270] rollback_registered_many+0x694/0xb60 [ 1075.487105] ? tun_detach_all+0x730/0x730 [ 1075.491259] ? netdev_info+0xf0/0xf0 [ 1075.494977] ? queue_delayed_work_on+0xc3/0x1e0 [ 1075.499651] ? trace_hardirqs_on_caller+0x400/0x590 [ 1075.504666] rollback_registered+0xdd/0x180 [ 1075.508996] ? rollback_registered_many+0xb60/0xb60 [ 1075.514015] ? linkwatch_schedule_work+0xf8/0x130 [ 1075.518864] unregister_netdevice_queue+0x1ae/0x230 [ 1075.523884] __tun_detach+0xa86/0xce0 [ 1075.527680] ? locks_remove_file+0x2d0/0x420 [ 1075.532089] ? __tun_detach+0xce0/0xce0 [ 1075.536067] tun_chr_close+0x46/0x60 [ 1075.539767] __fput+0x275/0x7a0 [ 1075.543035] ____fput+0x16/0x20 [ 1075.546298] task_work_run+0x114/0x190 [ 1075.550184] exit_to_usermode_loop+0x1da/0x220 [ 1075.554789] do_syscall_64+0x4bc/0x640 [ 1075.558776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1075.563618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1075.568816] RIP: 0033:0x459879 07:10:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x888000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x174, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x34}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7e}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe37}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff0001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x4000094) [ 1075.572041] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1075.579751] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1075.587123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1075.594477] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1075.601836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1075.609107] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0) shutdown(r0, 0x1) 07:10:25 executing program 5 (fault-call:3 fault-nth:39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1075.731286] FAULT_INJECTION: forcing a failure. [ 1075.731286] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.742936] CPU: 1 PID: 6272 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1075.750119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.759502] Call Trace: [ 1075.762210] dump_stack+0x138/0x197 [ 1075.765947] should_fail.cold+0x10f/0x159 [ 1075.770225] should_failslab+0xdb/0x130 [ 1075.774371] kmem_cache_alloc_node+0x287/0x780 [ 1075.779151] __alloc_skb+0x9c/0x500 [ 1075.782918] ? skb_scrub_packet+0x4b0/0x4b0 [ 1075.787427] ? netlink_has_listeners+0x20a/0x330 [ 1075.792279] kobject_uevent_env+0x781/0xc23 [ 1075.798302] kobject_uevent+0x20/0x26 [ 1075.802128] kobject_put.cold+0x168/0x2f9 [ 1075.806291] netdev_queue_update_kobjects+0x1fa/0x360 [ 1075.811668] netdev_unregister_kobject+0x148/0x1d0 [ 1075.816619] rollback_registered_many+0x694/0xb60 [ 1075.821833] ? tun_detach_all+0x730/0x730 [ 1075.825990] ? netdev_info+0xf0/0xf0 [ 1075.829717] ? queue_delayed_work_on+0xc3/0x1e0 [ 1075.834403] ? trace_hardirqs_on_caller+0x400/0x590 [ 1075.839432] rollback_registered+0xdd/0x180 [ 1075.839442] ? rollback_registered_many+0xb60/0xb60 [ 1075.839454] ? linkwatch_schedule_work+0xf8/0x130 [ 1075.854072] unregister_netdevice_queue+0x1ae/0x230 [ 1075.859111] __tun_detach+0xa86/0xce0 [ 1075.859125] ? locks_remove_file+0x2d0/0x420 [ 1075.867378] ? __tun_detach+0xce0/0xce0 [ 1075.871383] tun_chr_close+0x46/0x60 [ 1075.875130] __fput+0x275/0x7a0 [ 1075.878425] ____fput+0x16/0x20 07:10:25 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYBLOB="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"/1139], 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x0) [ 1075.881735] task_work_run+0x114/0x190 [ 1075.885643] exit_to_usermode_loop+0x1da/0x220 [ 1075.890238] do_syscall_64+0x4bc/0x640 [ 1075.894307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1075.899165] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1075.904558] RIP: 0033:0x459879 [ 1075.907816] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1075.915617] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1075.922888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1075.930291] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1075.937570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1075.944866] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:25 executing program 5 (fault-call:3 fault-nth:40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1076.044306] FAULT_INJECTION: forcing a failure. [ 1076.044306] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.056686] CPU: 1 PID: 6284 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1076.063764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.073131] Call Trace: [ 1076.075738] dump_stack+0x138/0x197 [ 1076.079364] should_fail.cold+0x10f/0x159 [ 1076.083507] should_failslab+0xdb/0x130 [ 1076.087488] kmem_cache_alloc_node_trace+0x280/0x770 [ 1076.092602] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1076.098060] __kmalloc_node_track_caller+0x3d/0x80 [ 1076.102998] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1076.107715] __alloc_skb+0xcf/0x500 [ 1076.112207] ? skb_scrub_packet+0x4b0/0x4b0 [ 1076.116532] ? netlink_has_listeners+0x20a/0x330 [ 1076.121293] kobject_uevent_env+0x781/0xc23 [ 1076.125622] kobject_uevent+0x20/0x26 [ 1076.129425] kobject_put.cold+0x168/0x2f9 [ 1076.133567] netdev_queue_update_kobjects+0x1fa/0x360 [ 1076.138777] netdev_unregister_kobject+0x148/0x1d0 [ 1076.143726] rollback_registered_many+0x694/0xb60 [ 1076.148562] ? tun_detach_all+0x730/0x730 [ 1076.152704] ? netdev_info+0xf0/0xf0 [ 1076.156414] ? queue_delayed_work_on+0xc3/0x1e0 [ 1076.161083] ? trace_hardirqs_on_caller+0x400/0x590 [ 1076.166185] rollback_registered+0xdd/0x180 [ 1076.170499] ? rollback_registered_many+0xb60/0xb60 [ 1076.175506] ? linkwatch_schedule_work+0xf8/0x130 [ 1076.180351] unregister_netdevice_queue+0x1ae/0x230 [ 1076.185386] __tun_detach+0xa86/0xce0 [ 1076.189193] ? locks_remove_file+0x2d0/0x420 [ 1076.193785] ? __tun_detach+0xce0/0xce0 [ 1076.197768] tun_chr_close+0x46/0x60 [ 1076.201483] __fput+0x275/0x7a0 [ 1076.204756] ____fput+0x16/0x20 [ 1076.208034] task_work_run+0x114/0x190 [ 1076.211943] exit_to_usermode_loop+0x1da/0x220 [ 1076.216526] do_syscall_64+0x4bc/0x640 [ 1076.220399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1076.225244] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1076.230432] RIP: 0033:0x459879 [ 1076.233610] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:10:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x6, 0xfff, 0xffffffffffffdfe7, 0x2, 0xff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = dup3(r0, r0, 0x6b9f1f398e746c44) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c496df620093969bbb0779e9a4bfd3fd56d35129a40030000000000e7ffffffff3f04631eb552d6f0fe591da90c400000000002630440010400"], 0x49, 0x0, &(0x7f0000000080)="88aafe519858ff5dce8f2a735c5f406dbe6094e811bb956380dec7fda0eed8a3506ff523d0d4617e3fd9874dddff91dd85858992322b8274cb78acfafba40f371140d0d517d31e1df0"}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/165) close(r0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x1c86}, 0x2) 07:10:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1076.241326] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1076.248596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1076.255860] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1076.263122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1076.270387] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:26 executing program 5 (fault-call:3 fault-nth:41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1076.407514] FAULT_INJECTION: forcing a failure. [ 1076.407514] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.423388] CPU: 1 PID: 6295 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1076.430591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.440102] Call Trace: [ 1076.442711] dump_stack+0x138/0x197 [ 1076.446345] should_fail.cold+0x10f/0x159 [ 1076.450858] should_failslab+0xdb/0x130 [ 1076.455183] kmem_cache_alloc_node+0x287/0x780 [ 1076.459828] __alloc_skb+0x9c/0x500 [ 1076.463599] ? skb_scrub_packet+0x4b0/0x4b0 [ 1076.468020] ? netlink_has_listeners+0x20a/0x330 [ 1076.472887] kobject_uevent_env+0x781/0xc23 [ 1076.477289] kobject_uevent+0x20/0x26 [ 1076.481092] kobject_put.cold+0x168/0x2f9 [ 1076.485378] netdev_queue_update_kobjects+0x1fa/0x360 [ 1076.490577] netdev_unregister_kobject+0x148/0x1d0 [ 1076.495650] rollback_registered_many+0x694/0xb60 [ 1076.500680] ? tun_detach_all+0x730/0x730 [ 1076.504843] ? netdev_info+0xf0/0xf0 [ 1076.508556] ? queue_delayed_work_on+0xc3/0x1e0 [ 1076.513230] ? trace_hardirqs_on_caller+0x400/0x590 [ 1076.518246] rollback_registered+0xdd/0x180 [ 1076.522553] ? rollback_registered_many+0xb60/0xb60 [ 1076.527553] ? linkwatch_schedule_work+0xf8/0x130 [ 1076.532386] unregister_netdevice_queue+0x1ae/0x230 [ 1076.537403] __tun_detach+0xa86/0xce0 [ 1076.541194] ? locks_remove_file+0x2d0/0x420 [ 1076.545589] ? __tun_detach+0xce0/0xce0 [ 1076.549555] tun_chr_close+0x46/0x60 [ 1076.553267] __fput+0x275/0x7a0 [ 1076.556547] ____fput+0x16/0x20 [ 1076.559836] task_work_run+0x114/0x190 [ 1076.563727] exit_to_usermode_loop+0x1da/0x220 [ 1076.568313] do_syscall_64+0x4bc/0x640 [ 1076.572188] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1076.577025] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1076.582201] RIP: 0033:0x459879 [ 1076.585373] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1076.593112] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1076.600375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:10:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xd0000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x220200, 0x0) close(r0) [ 1076.607817] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1076.615337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1076.623905] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:26 executing program 5 (fault-call:3 fault-nth:42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x400000) close(r0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x3, 0x1135, [], &(0x7f0000000080)=0x90}) close(r0) 07:10:26 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR, @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1076.828256] FAULT_INJECTION: forcing a failure. [ 1076.828256] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.846028] CPU: 1 PID: 6308 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1076.853264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.862617] Call Trace: [ 1076.865327] dump_stack+0x138/0x197 [ 1076.869032] should_fail.cold+0x10f/0x159 [ 1076.873291] should_failslab+0xdb/0x130 [ 1076.877284] kmem_cache_alloc_node_trace+0x280/0x770 [ 1076.882409] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1076.888002] __kmalloc_node_track_caller+0x3d/0x80 [ 1076.893061] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1076.897737] __alloc_skb+0xcf/0x500 [ 1076.901371] ? skb_scrub_packet+0x4b0/0x4b0 [ 1076.905735] ? netlink_has_listeners+0x20a/0x330 [ 1076.910489] kobject_uevent_env+0x781/0xc23 [ 1076.914829] kobject_uevent+0x20/0x26 [ 1076.918638] kobject_put.cold+0x168/0x2f9 [ 1076.922782] netdev_queue_update_kobjects+0x1fa/0x360 [ 1076.927991] netdev_unregister_kobject+0x148/0x1d0 [ 1076.932927] rollback_registered_many+0x694/0xb60 [ 1076.937763] ? tun_detach_all+0x730/0x730 [ 1076.941908] ? netdev_info+0xf0/0xf0 [ 1076.945697] ? queue_delayed_work_on+0xc3/0x1e0 [ 1076.950454] ? trace_hardirqs_on_caller+0x400/0x590 [ 1076.955487] rollback_registered+0xdd/0x180 [ 1076.959811] ? rollback_registered_many+0xb60/0xb60 [ 1076.964917] ? linkwatch_schedule_work+0xf8/0x130 [ 1076.970042] unregister_netdevice_queue+0x1ae/0x230 [ 1076.975180] __tun_detach+0xa86/0xce0 [ 1076.978979] ? locks_remove_file+0x2d0/0x420 [ 1076.983400] ? __tun_detach+0xce0/0xce0 [ 1076.987368] tun_chr_close+0x46/0x60 [ 1076.991075] __fput+0x275/0x7a0 [ 1076.994359] ____fput+0x16/0x20 [ 1076.997648] task_work_run+0x114/0x190 [ 1077.001627] exit_to_usermode_loop+0x1da/0x220 [ 1077.006218] do_syscall_64+0x4bc/0x640 [ 1077.010116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1077.015072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1077.020261] RIP: 0033:0x459879 [ 1077.023449] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1077.031148] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1077.038419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1077.045780] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1077.053161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1077.060454] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:26 executing program 5 (fault-call:3 fault-nth:43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:26 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0xa45d5f01eab55b94) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) 07:10:26 executing program 0 (fault-call:16 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1077.209193] FAULT_INJECTION: forcing a failure. [ 1077.209193] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.220960] CPU: 0 PID: 6323 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1077.228027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.237393] Call Trace: [ 1077.240065] dump_stack+0x138/0x197 [ 1077.240086] should_fail.cold+0x10f/0x159 [ 1077.240104] should_failslab+0xdb/0x130 [ 1077.240117] kmem_cache_alloc_node_trace+0x280/0x770 [ 1077.240132] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1077.240147] __kmalloc_node_track_caller+0x3d/0x80 [ 1077.267611] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1077.272346] __alloc_skb+0xcf/0x500 [ 1077.275977] ? skb_scrub_packet+0x4b0/0x4b0 [ 1077.280396] ? netlink_has_listeners+0x20a/0x330 [ 1077.285330] kobject_uevent_env+0x781/0xc23 [ 1077.289678] kobject_uevent+0x20/0x26 [ 1077.293495] kobject_put.cold+0x168/0x2f9 [ 1077.297662] netdev_queue_update_kobjects+0x1fa/0x360 [ 1077.302887] netdev_unregister_kobject+0x148/0x1d0 [ 1077.302902] rollback_registered_many+0x694/0xb60 [ 1077.302913] ? tun_detach_all+0x730/0x730 [ 1077.302921] ? netdev_info+0xf0/0xf0 [ 1077.302938] ? queue_delayed_work_on+0xc3/0x1e0 [ 1077.311958] FAULT_INJECTION: forcing a failure. [ 1077.311958] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.312707] ? trace_hardirqs_on_caller+0x400/0x590 [ 1077.312723] rollback_registered+0xdd/0x180 [ 1077.312735] ? rollback_registered_many+0xb60/0xb60 [ 1077.351078] ? linkwatch_schedule_work+0xf8/0x130 [ 1077.355945] unregister_netdevice_queue+0x1ae/0x230 [ 1077.360970] __tun_detach+0xa86/0xce0 [ 1077.364800] ? locks_remove_file+0x2d0/0x420 [ 1077.369317] ? __tun_detach+0xce0/0xce0 [ 1077.373298] tun_chr_close+0x46/0x60 [ 1077.377014] __fput+0x275/0x7a0 [ 1077.380402] ____fput+0x16/0x20 [ 1077.383681] task_work_run+0x114/0x190 [ 1077.387578] exit_to_usermode_loop+0x1da/0x220 [ 1077.392171] do_syscall_64+0x4bc/0x640 [ 1077.396056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1077.400910] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1077.406099] RIP: 0033:0x459879 [ 1077.409377] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1077.417114] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1077.424388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1077.431767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1077.439061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1077.446336] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 [ 1077.453982] CPU: 1 PID: 6329 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 1077.461018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.461024] Call Trace: [ 1077.461046] dump_stack+0x138/0x197 [ 1077.461063] should_fail.cold+0x10f/0x159 [ 1077.461079] should_failslab+0xdb/0x130 [ 1077.461091] kmem_cache_alloc+0x2d7/0x780 [ 1077.461105] ? create_new_namespaces+0x23/0x720 [ 1077.461117] create_new_namespaces+0x34/0x720 [ 1077.461127] ? ns_capable_common+0x12c/0x160 [ 1077.461140] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1077.461147] ? free_nsproxy+0x200/0x200 [ 1077.461164] SyS_unshare+0x2f3/0x7e0 [ 1077.461175] ? walk_process_tree+0x2b0/0x2b0 [ 1077.461188] ? do_syscall_64+0x53/0x640 [ 1077.461199] ? walk_process_tree+0x2b0/0x2b0 [ 1077.461208] do_syscall_64+0x1e8/0x640 [ 1077.461215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1077.461231] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1077.461239] RIP: 0033:0x459879 [ 1077.461244] RSP: 002b:00007f6413536c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 07:10:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:27 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR, @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1077.461255] RAX: ffffffffffffffda RBX: 00007f6413536c90 RCX: 0000000000459879 [ 1077.461261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1077.461267] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1077.461272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64135376d4 [ 1077.461278] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 07:10:27 executing program 5 (fault-call:3 fault-nth:44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1077.695170] FAULT_INJECTION: forcing a failure. [ 1077.695170] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.707538] CPU: 1 PID: 6343 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1077.714571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.724272] Call Trace: [ 1077.726881] dump_stack+0x138/0x197 [ 1077.730516] should_fail.cold+0x10f/0x159 [ 1077.734679] should_failslab+0xdb/0x130 [ 1077.738677] kmem_cache_alloc_node+0x287/0x780 [ 1077.743276] __alloc_skb+0x9c/0x500 [ 1077.746905] ? skb_scrub_packet+0x4b0/0x4b0 [ 1077.751219] ? netlink_has_listeners+0x20a/0x330 [ 1077.756156] kobject_uevent_env+0x781/0xc23 [ 1077.760495] kobject_uevent+0x20/0x26 [ 1077.764306] kobject_put.cold+0x168/0x2f9 [ 1077.768468] netdev_queue_update_kobjects+0x1fa/0x360 [ 1077.773752] netdev_unregister_kobject+0x148/0x1d0 [ 1077.778679] rollback_registered_many+0x694/0xb60 [ 1077.783525] ? tun_detach_all+0x730/0x730 [ 1077.787701] ? netdev_info+0xf0/0xf0 [ 1077.791423] ? queue_delayed_work_on+0xc3/0x1e0 [ 1077.796342] ? trace_hardirqs_on_caller+0x400/0x590 [ 1077.801377] rollback_registered+0xdd/0x180 [ 1077.805712] ? rollback_registered_many+0xb60/0xb60 [ 1077.810733] ? linkwatch_schedule_work+0xf8/0x130 [ 1077.815686] unregister_netdevice_queue+0x1ae/0x230 [ 1077.820726] __tun_detach+0xa86/0xce0 [ 1077.824721] ? locks_remove_file+0x2d0/0x420 [ 1077.829150] ? __tun_detach+0xce0/0xce0 [ 1077.833133] tun_chr_close+0x46/0x60 [ 1077.836887] __fput+0x275/0x7a0 [ 1077.840362] ____fput+0x16/0x20 [ 1077.843670] task_work_run+0x114/0x190 [ 1077.847692] exit_to_usermode_loop+0x1da/0x220 [ 1077.852307] do_syscall_64+0x4bc/0x640 [ 1077.856204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1077.861074] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1077.866268] RIP: 0033:0x459879 [ 1077.869516] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1077.877228] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1077.884519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1077.891874] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1077.899154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1077.906483] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a546162", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x400}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x80) ioctl$VT_WAITACTIVE(r1, 0x5607) pipe2(&(0x7f0000000080), 0x84000) ioctl$VT_WAITACTIVE(r1, 0x5607) 07:10:27 executing program 5 (fault-call:3 fault-nth:45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x2, 0x4, 0x6, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={r2, 0x32, "1726a79604c0652849dc03b914f7d3dc4586e4ad19c8dd9784166a5057a6cb89ac84bb3d07fcc7ce21d340e5051aeba5168c"}, &(0x7f0000000340)=0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x40) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$sock(r3, &(0x7f00000006c0)={&(0x7f0000000380)=@nfc_llcp={0x27, 0x1, 0x2, 0x5, 0x8, 0x8, "226a036ba3e016d554e9989c2b33d674694d9c5fe0919961bcee03eb69a3db0e857376f6d139f629df292582267a22ca5919cbfdb52b2b29c4c1a4c49d9ccb", 0x33}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="c2d36162394766def2a5a3b11fe0d09aa1dca5c2a96fc2707c74730093f31e82572dbd83c451d222f4a50646bdad", 0x2e}, {&(0x7f0000000480)="dd1b1389757b8fab95031397d4f0ee729d110c7717902e2d3402d91a4487a6fe7cd4819a8146c5cbbeb42674f4f421bc5fe602283242ede2362c24df1158b64436aff9eade3e91913b33ad0d45a3f5fb8e76fe15581ddedfb73ff1387d8030a6378b11153d183acc3d6d7d2fbe8583184379d16a3982777091baaf", 0x7b}, {&(0x7f0000000500)="ae2d6117ba1b191726751e232a162400d4e83a57465e7fe766830b4cb7cdb6ebaad6589fdf4b3485ddb76393729998d85c9d724ea1e4eb59366fcab7b6e0e14ffe27cdec72391e424146d48a181e2c07f967134919b61b4c64ab7a1aeaf00ec46d053c2ddca21ffec3a93ec6850947f6185408c881fadca9b13d2a69ec7ca3505ff0266d1534248b", 0x88}], 0x3, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x93}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x2e3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x174}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xc0}, 0x4040005) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0x400}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x1ff, 0x11db, 0x9ece}, 0x10) 07:10:27 executing program 0 (fault-call:16 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1078.036794] FAULT_INJECTION: forcing a failure. [ 1078.036794] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.058948] CPU: 1 PID: 6351 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1078.066018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.075464] Call Trace: [ 1078.075483] dump_stack+0x138/0x197 [ 1078.075504] should_fail.cold+0x10f/0x159 [ 1078.075524] should_failslab+0xdb/0x130 [ 1078.075540] kmem_cache_alloc_node_trace+0x280/0x770 [ 1078.075553] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1078.081773] __kmalloc_node_track_caller+0x3d/0x80 [ 1078.081788] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1078.081801] __alloc_skb+0xcf/0x500 [ 1078.081812] ? skb_scrub_packet+0x4b0/0x4b0 [ 1078.081826] ? netlink_has_listeners+0x20a/0x330 [ 1078.081842] kobject_uevent_env+0x781/0xc23 [ 1078.081859] kobject_uevent+0x20/0x26 [ 1078.131671] kobject_put.cold+0x168/0x2f9 [ 1078.136017] netdev_queue_update_kobjects+0x1fa/0x360 [ 1078.141432] netdev_unregister_kobject+0x148/0x1d0 [ 1078.146380] rollback_registered_many+0x694/0xb60 [ 1078.151239] ? tun_detach_all+0x730/0x730 [ 1078.155568] ? netdev_info+0xf0/0xf0 [ 1078.159272] ? queue_delayed_work_on+0xc3/0x1e0 [ 1078.164044] ? trace_hardirqs_on_caller+0x400/0x590 [ 1078.169185] rollback_registered+0xdd/0x180 [ 1078.169197] ? rollback_registered_many+0xb60/0xb60 [ 1078.169210] ? linkwatch_schedule_work+0xf8/0x130 [ 1078.169224] unregister_netdevice_queue+0x1ae/0x230 [ 1078.169237] __tun_detach+0xa86/0xce0 [ 1078.169250] ? locks_remove_file+0x2d0/0x420 [ 1078.169265] ? __tun_detach+0xce0/0xce0 [ 1078.169273] tun_chr_close+0x46/0x60 [ 1078.169286] __fput+0x275/0x7a0 [ 1078.169304] ____fput+0x16/0x20 [ 1078.169316] task_work_run+0x114/0x190 [ 1078.169339] exit_to_usermode_loop+0x1da/0x220 [ 1078.178467] FAULT_INJECTION: forcing a failure. [ 1078.178467] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.178785] do_syscall_64+0x4bc/0x640 [ 1078.178795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1078.178822] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1078.245568] RIP: 0033:0x459879 [ 1078.248769] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1078.256534] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1078.263807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1078.271105] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1078.278378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1078.285654] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 [ 1078.292987] CPU: 0 PID: 6360 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 1078.300096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.300103] Call Trace: [ 1078.300119] dump_stack+0x138/0x197 [ 1078.300135] should_fail.cold+0x10f/0x159 [ 1078.300148] should_failslab+0xdb/0x130 [ 1078.300162] __kmalloc+0x2f0/0x7a0 [ 1078.312092] ? inc_ucount+0x34c/0x710 [ 1078.312102] ? refcount_inc_not_zero+0x6c/0xe0 [ 1078.312116] ? net_alloc_generic+0x23/0x70 [ 1078.312130] net_alloc_generic+0x23/0x70 [ 1078.319881] copy_net_ns+0xd8/0x440 [ 1078.327377] create_new_namespaces+0x37b/0x720 [ 1078.327399] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1078.335739] ? unshare_userns+0x26/0xe0 [ 1078.335753] SyS_unshare+0x2f3/0x7e0 [ 1078.335765] ? walk_process_tree+0x2b0/0x2b0 [ 1078.344127] ? do_syscall_64+0x53/0x640 [ 1078.344137] ? walk_process_tree+0x2b0/0x2b0 [ 1078.344149] do_syscall_64+0x1e8/0x640 [ 1078.352448] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1078.352467] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1078.352476] RIP: 0033:0x459879 [ 1078.352483] RSP: 002b:00007f6413536c78 EFLAGS: 00000246 [ 1078.361433] ORIG_RAX: 0000000000000110 [ 1078.361440] RAX: ffffffffffffffda RBX: 00007f6413536c90 RCX: 0000000000459879 [ 1078.361445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1078.361450] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1078.361456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64135376d4 07:10:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:28 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR, @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1078.361461] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 07:10:28 executing program 5 (fault-call:3 fault-nth:46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1078.555760] FAULT_INJECTION: forcing a failure. [ 1078.555760] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.568236] CPU: 0 PID: 6373 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1078.575282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.584817] Call Trace: [ 1078.587437] dump_stack+0x138/0x197 [ 1078.591062] should_fail.cold+0x10f/0x159 [ 1078.595473] should_failslab+0xdb/0x130 [ 1078.599532] kmem_cache_alloc_node+0x287/0x780 [ 1078.604132] __alloc_skb+0x9c/0x500 [ 1078.607760] ? skb_scrub_packet+0x4b0/0x4b0 [ 1078.612129] ? netlink_has_listeners+0x20a/0x330 [ 1078.616891] kobject_uevent_env+0x781/0xc23 [ 1078.621328] kobject_uevent+0x20/0x26 [ 1078.625126] kobject_put.cold+0x168/0x2f9 [ 1078.629455] netdev_queue_update_kobjects+0x1fa/0x360 [ 1078.634659] netdev_unregister_kobject+0x148/0x1d0 [ 1078.639740] rollback_registered_many+0x694/0xb60 [ 1078.644581] ? tun_detach_all+0x730/0x730 [ 1078.648734] ? netdev_info+0xf0/0xf0 [ 1078.652457] ? queue_delayed_work_on+0xc3/0x1e0 [ 1078.657127] ? trace_hardirqs_on_caller+0x400/0x590 [ 1078.662162] rollback_registered+0xdd/0x180 [ 1078.666490] ? rollback_registered_many+0xb60/0xb60 [ 1078.671612] ? linkwatch_schedule_work+0xf8/0x130 [ 1078.676466] unregister_netdevice_queue+0x1ae/0x230 [ 1078.681599] __tun_detach+0xa86/0xce0 [ 1078.685409] ? locks_remove_file+0x2d0/0x420 [ 1078.689818] ? __tun_detach+0xce0/0xce0 [ 1078.693783] tun_chr_close+0x46/0x60 [ 1078.697494] __fput+0x275/0x7a0 [ 1078.700818] ____fput+0x16/0x20 [ 1078.704098] task_work_run+0x114/0x190 [ 1078.707978] exit_to_usermode_loop+0x1da/0x220 [ 1078.712552] do_syscall_64+0x4bc/0x640 [ 1078.716427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1078.721268] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1078.726450] RIP: 0033:0x459879 [ 1078.729645] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1078.737346] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1078.744615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1078.751908] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1078.759187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1078.766451] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a546162", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:28 executing program 5 (fault-call:3 fault-nth:47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:28 executing program 3: r0 = dup(0xffffffffffffffff) bind$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0xfffffffffffffe49) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) timerfd_create(0x8, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x40000, 0x0) r3 = geteuid() r4 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="6f0000007d010000005700800002390000200200000001000000000000000000001481ffffff070000ef050000000000000009006970365f767469300009006950365f367469300009006970365f767469300009006970365f767469300003025c7b2d766949ab83aacbfa200be3a631d61562d06d2620a966a4328f748407a8e8011d833a1156e4b55d94db067255db5b67c372d09cb1eceaf7a35e83e90889ca5c375a4a3c9410cc8dc706acaa5f816e307f7e22f83dc510a0bd0d8a4b68bb20da7a51ceee369bf6c1a11656828ee7a9fae1a4a3641531e40b7a8e41bd09619ef3c86c32fc08bbf12869e90c5e0df0afda0b", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5], 0x6f) r6 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x2) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000180)={0x11c6}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) shmget(0x2, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) r8 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x80000, 0x400, @dev={0xfe, 0x80, [], 0x22}}, 0x1c) connect$l2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r8, &(0x7f0000005fc0), 0x800000000000059, 0xffffffff00000000) r9 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000001c0)) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000440)={0x7, 0x8, 0x5, 0x3, 0x10001, 0xfff, 0x56}) close(r1) 07:10:28 executing program 0 (fault-call:16 fault-nth:2): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1078.952773] net_ratelimit: 18 callbacks suppressed [ 1078.952809] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.965103] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.020951] FAULT_INJECTION: forcing a failure. [ 1079.020951] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.068312] CPU: 1 PID: 6381 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1079.075394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.084784] Call Trace: [ 1079.087388] dump_stack+0x138/0x197 [ 1079.091031] should_fail.cold+0x10f/0x159 [ 1079.095198] should_failslab+0xdb/0x130 [ 1079.099180] kmem_cache_alloc_node+0x287/0x780 [ 1079.103864] __alloc_skb+0x9c/0x500 [ 1079.107492] ? skb_scrub_packet+0x4b0/0x4b0 [ 1079.111911] ? netlink_has_listeners+0x20a/0x330 [ 1079.116678] kobject_uevent_env+0x781/0xc23 [ 1079.121015] kobject_uevent+0x20/0x26 [ 1079.124860] kobject_put.cold+0x168/0x2f9 [ 1079.129102] netdev_queue_update_kobjects+0x1fa/0x360 [ 1079.134393] netdev_unregister_kobject+0x148/0x1d0 [ 1079.139340] rollback_registered_many+0x694/0xb60 [ 1079.144217] ? tun_detach_all+0x730/0x730 [ 1079.144229] ? netdev_info+0xf0/0xf0 [ 1079.144244] ? queue_delayed_work_on+0xc3/0x1e0 [ 1079.144258] ? trace_hardirqs_on_caller+0x400/0x590 [ 1079.144270] rollback_registered+0xdd/0x180 [ 1079.144281] ? rollback_registered_many+0xb60/0xb60 [ 1079.144293] ? linkwatch_schedule_work+0xf8/0x130 [ 1079.144306] unregister_netdevice_queue+0x1ae/0x230 [ 1079.144318] __tun_detach+0xa86/0xce0 [ 1079.144337] ? locks_remove_file+0x2d0/0x420 [ 1079.144352] ? __tun_detach+0xce0/0xce0 [ 1079.144360] tun_chr_close+0x46/0x60 [ 1079.144373] __fput+0x275/0x7a0 [ 1079.144390] ____fput+0x16/0x20 [ 1079.144402] task_work_run+0x114/0x190 [ 1079.144420] exit_to_usermode_loop+0x1da/0x220 [ 1079.144434] do_syscall_64+0x4bc/0x640 [ 1079.144443] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1079.144460] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1079.144468] RIP: 0033:0x459879 [ 1079.144474] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1079.144485] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1079.144491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1079.144497] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1079.144502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1079.144508] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 [ 1079.144860] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.144915] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.145011] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.145064] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.200534] FAULT_INJECTION: forcing a failure. [ 1079.200534] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.200548] CPU: 1 PID: 6388 Comm: syz-executor.0 Not tainted 4.14.141 #37 07:10:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x0) [ 1079.200562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.200566] Call Trace: [ 1079.200581] dump_stack+0x138/0x197 [ 1079.200599] should_fail.cold+0x10f/0x159 [ 1079.200615] should_failslab+0xdb/0x130 [ 1079.200627] kmem_cache_alloc+0x2d7/0x780 [ 1079.200642] ? net_alloc_generic+0x23/0x70 [ 1079.200661] copy_net_ns+0xfa/0x440 [ 1079.200683] create_new_namespaces+0x37b/0x720 [ 1079.200706] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1079.200718] ? unshare_userns+0x26/0xe0 [ 1079.200733] SyS_unshare+0x2f3/0x7e0 07:10:29 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1079.200745] ? walk_process_tree+0x2b0/0x2b0 [ 1079.200762] ? do_syscall_64+0x53/0x640 [ 1079.200775] ? walk_process_tree+0x2b0/0x2b0 [ 1079.200787] do_syscall_64+0x1e8/0x640 [ 1079.200800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1079.200818] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1079.200826] RIP: 0033:0x459879 [ 1079.200832] RSP: 002b:00007f6413515c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1079.200844] RAX: ffffffffffffffda RBX: 00007f6413515c90 RCX: 0000000000459879 [ 1079.200849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1079.200855] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1079.200878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64135166d4 [ 1079.200885] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 [ 1079.520158] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.541565] protocol 88fb is buggy, dev hsr_slave_1 07:10:29 executing program 5 (fault-call:3 fault-nth:48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a546162", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffffca, 0x80800) r2 = getpid() r3 = getuid() fstat(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000003280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f00000032c0)=0x5, 0x4) r6 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000001500)=0xc) lstat(&(0x7f0000003300)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001780)=0x0) getresuid(&(0x7f00000017c0), &(0x7f0000001800)=0x0, &(0x7f0000001840)) getgroups(0x7, &(0x7f0000001880)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000018c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000019c0)=0xe8) getgroups(0x5, &(0x7f0000001a00)=[0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) sendmmsg$unix(r1, &(0x7f0000003200)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="cba5c9d2866b48386f4def89e3b78e56c158ceec97d0472e7ff8899edd9a664d15d336ba8a14a3ed11c0c38a7f8ed314adb55587b967ed94c051d58f082134eba94448377237b32d87d56fc4ca16c30656e4af8946a1a6215ff4f5c6b0e1a02062e316fb855449eadb161798e01e8128331ba3ff61a4234bfba34fc3fd01e664938978227b6edbd1d45e351f72b88d43a84d59", 0x93}, {&(0x7f0000000480)="ef298e7dc316a3b2c9f7f27a90dbcc52e3167e850f9f84ab8f2f6e4d89aaef09c14d2fc1c5ab6da38c0eba835550f2f4800275a4da18b8192520e9bbcd95534a6bc5a54e887f5d4d38d8e5e8131831f41c6afd2487a2c354435ea52a847cb939195ed5cace73c037ac70c01a55e854cf99c8c360a3c26a3a2d01741ba4f09f72dd8156b28f365d6dd0ad83c95135ffe1eafd49cb5c3519f785565bda413bf6b7f1450d10846cc84514dd5ba4cda99082e8e7706a0312ba710db18ff9a4395ee04de8511303fb28f71359307edee305a76407fd59850708846159275a99ca3c3a1ea3ce73f003bad6eb66e219f9652a4df6b3b00e37fcf755b70d2a73cef252e4a4de1ea483459cbb615f0cb6b7df6e03616890a998a1a32c40bc1e7b62d3173e1669ffe9312c47919a242c70325a4ca0841dd72700126c5c422165209fdd299b969b49b2e066801db01ac381f1958b92faaaf72ab6069b47fa0e73c525effd331a849bbef0f340bb4610b7aae3032bf22bc2eab4fa04829f33aa43f8c9d096eb0bbb2b6a8701386e705f20dc0dd7a048fe15e360f1b9431f2db7ecb3c1ee0b0b5f261e698363c1aae6c430023bda750a583635c96d28a69f6d56d5a6864ea27459ef55c30a8689db05d95758cb2ba4a618bc35409ce6b3b64ed5b1ff6a75b34cd5e3ff86f762a26ed1762c5e1423dfdf272f6392fe6f928eea991c37a1b3cd18e1b704859e401e2c41615173ab412906112bb48d694d5c5fc2b843bc40fe811525c05d866f4983434ca39f3576e8276128f2801782114bc9b9ce40d06f94ff70ec80c127eafd1353c1d6aadd421a4b056c6afa7fd2521e0d6159671c5e5e0d7abb8828ba405ab8653fed8903a0f242e04a9809ab5d759ecfebb45e4154d30ced405b83b05f67a70eaeee2e9948bcc516ee815f0682401b5d8e591bed7261220c0da4636be04f067bf7129f00cbf3e327765d4aa50b47b804098ceeb57ef5148e682d01033d2e5f53102d712a8eda1e3b3d1c4ff98675c0b6dd79f5fb496b9d81286e6fc576f9548364d19e03346a569d491faf5bbc105927c52d516e990bdad0243540e7fec6b5a66b463de9e13135b6005221089858b22cded05af6ac092176ee633eb889914570b9f337219f45a5e51c221ae38d78cde59d74fd3900b2224504f765711a3ce737309ce839369ae1f5239c8ef923e252ca60eb4979cf95ffefe38b0f7dc46e0e806c6d101efccc626fe34c32c15ce386f9215e68ebd6b831584a4a823bd8a50739f31725919ba174910b188383c2cbc4e930130ece7672575cb23833406c035dcb7752db0d82fef31cb704ce1a717b97008a6ad8c5efc826feab111b3b984b02fe15c036d2b8aae8405053e1fb08bfce93fe54253afb25c62af66887d7fbbee33016fd5603d2e9b39c960bcf617eba18823a50845ff24076b6c4678833bf7ebb40ebf62f8c480f1532065afead0fa56622fd41edc33883a68fa555162b8e2134b7053528262150b0393324a3db9e3c4893456bf2a19753917ac81ca912452fe69f5ccad2125ddf924a75678a63e1accbd2d04cd489ec03b3c3ac27212d39420f932bb15ef5bbf89c101b981878cb21cdd138b02a501d7de1873041d2a20adf26d39cc193dfd3fd19594bcb61044c236ec10833e794259b116011cc3f6d81d51e85c0dbf151e8c277c4c6adb705928a10be25df6e396b9079afa5dfbf0e742ae1d6ee136d78b832a97097b5bd79b1371bedb373028aa5c598289bd4034163afce7c822ded6ef7c03cb4ab566e0a17161b718a31ebc864f4f6c140fa76afb084351095da515052d567ec140f0d947a7783c4ccdaacae825c9d7e60075e3cdc6ff977506e6b7c9e57bfe3abf44f9ca04ed71230fb307191bfd2d9a8a2ea1ad4f3bfad64e36e270ceef1da9a777865229f57acccad386c1d37afb67fb54f882a965337190d36b6bb21b9b315ce30b985ec6eed6486a80bfedc6f8b735a50a10a109186c46fd1c995c263fea94a245f1ad8c4c3479afb9392f6431e51b03c7c41345a9e5df06c1d2f079134fca0c56350d4a07e710a54c1e7e8b25b4fd62b7b73a10b7d2c35fe6b06cdff5cfbd8a11cf1fb24023556ff4331e98af4bb19f0951eb8700f05d8049e2c1a57a3411e58c50c2799fe9091fb64e04e1cefecdf96db0d75e293c3653f6dc75711adc60f15e82b4885c07a6da0411879d412fe2f4ba5e07d76988503ac65586a9ceed1410366fcaa03f8cb75a966a16481b64c33cc4a5a847fed1087fe025b455b68e4770368d4ed75fafde943606782a4b64222ab38e3dedf42a2fc39807b326ab6117d635e2e91b9507806d16e3a61b15e092cfabedabaa374228dacc95baf16a2b01735eedd53a3d6f1b611691d263d2b1b525c6a8f0177208d1aac58732440b985db141d280c072beb327a5921e2cb3e5c1ecdffa55f67cc30d0ff10ba83f8cdf3684ef69d4172442e56851be8e8552f9ecd7aacfc18cec1c4c936d3414b43d6bf1c1e3cb88d797943ed6d2a393d7a686f818cd99a2bad59d981e2e4265813e39ca3e529661e330772329fabfd4006b68d861d8a130c1f74d4e8e55873c2ea6bc7bba9fcddfb6b290c878e522bf09338c3d4836616ca278525b8e4a127de182d0cba3de36076f5091ffb5062f752069c635b27b4ed0afe0ad54f399636cf6fb8c64fb625b066a2ac1c4faabbdd19b0cbbd70ba40ce280809bfe3826fc5f9445d5358c89b0db2ccd46f53fe3e882d88be449a320ae29d0008ba5fde1e570f01d7a393b77f09e6ad44cec586c99022dbbf6fd5643fb47b43203821e8357bda96e10c8cd853ec144dcc52d8dbfeec290f6c28430959072ec736b3ff201bdd4ce7fe79c32d9484c1db165bbf5cc8c985699586fc985f71132cd769b00b9c32ca71770835e4dcad3ba91f632e42caccd9b462b9c81f59cb719b603d719ea679fc9d018e2fa30e85380f54cbd32c1742feb6a585b750c8b44e0b70011025ba6c8294d4571b998f8eafc9b716211dc4ef44cd040ca3964a584309b96f5e6917b908ffcdab784453fc73cb7877759052100ae16de811f596a326ff27b0c9b403267a08810cc1d7b6ebd120d37f694a24d347b090901fa2221f8c9fdd5c6e565a83e4966d36480206f85797fef2fdc046a1fcc544f94ecb9b5de9285040074601fcfad9ec3dd33493d06eccbc270a9023972c399f0d064ab30d8f897059ffa237ad03cbbf845d32e7adab04b9edc5683e421a770250d62dbc96fce269300818d0ec093fef709b1ac16c793e1709e3092c7ffd09cd96d6358a3c1507daef633efc4ec5a7a7cb08bebc9a3eb5c9b7c38c878ece2c3bcf09db9f2754f9d41d01a76e6385d476c2a3f408552dc74e5e6e3b5ff7e7ea0355e3f434ba3c08a339f905441d02276aa8f1cdfc698c4a7cec0e096657c0bf8d53c903585f1ce79f615dce0315fa76a928920ed2920f4f0baf3e1bdff3b9b3cb568f27ed811256458c630a7102ec74bd4bce0303991595bed8acd04dac8981fac95efcf011f6626c4e2b94f61510b48b93b0747b020096459feac3241badc5975df71302bbd9788ba0aa79561cdb898df8d5a25765da64f9c3583e2b6535c21059b6681484aeb4bf19cce3c04d44f11b95085637a34341b02fb6d1a8f3c7c9aec5d5dace3db0997639f219840716de155a6e29219f89e15ab3cb612b265d31cfebd561c6eb627569c9d8de69d375cca6fefc9e6060026b54947ac971f3cd1a5b725b03661b820530fe690b6d2a695ff3393ac0a26f645b6cd27cc3d21dd165e032c84a996d04ed88ed8ab48363f5c24ebcf6d888906f71b2738d751002cc9ffb61785ac2219d80511cd5f88861878e0ae6ef1fb59c4aca6d66a928fab5d0f18160e1185c46a3cf051d41c38a56ac572d730db1f963dc6fd9e2de7ea401f77e9d9c894718a20128460e53ede99e232fd25834aefed3dbadf8f5eace4d9ecc6c1aad9bf8c1e405b7c06719b2c110fba3f9585cbd616c1cada6bcd91284bc1288eb6a61a4b421cc9481b875b8cea3ccb40681f968ab3d0a6cc081ca15b0b041b6ec1ca42236b128fa3a5a55020f2ff21cb52d1dbc0f71ef1b632e321621844a771d7d2cb9345d436c9b5cac4ab67b33bd8bf68d1c70df599a0e1408968b6b3337f6c96fc5fcb7773f4bd011791197c47830e9f084e4d722cea44b7a114351903091579796ffdd89448eb31afbd896d642619e5681b0f0e8ecdec05734f0704c8be4eddb23daf1a5ee04666cee46fddd3a99722edd81e99120bb1427a81b4a153aaaf6766611154b7cd137b1e2939e77a1a630ab5cd927f10cd7852a33e1a351ee85627f222f112a21395bff5cd1391289b7e8b19e91d779c4906d37675f4b91f66c57554dce58ce89fbd151cf2895719e1c9bdfdda6b4b811336c7b9ad47b696312fe95fb2384b5950c6afa20328c3acfaec2befc87111621bd9298806745f102766b953241bd26af342f12f2636576660d26d3645c789ef39b522e553d7e44e18260d15b5a2179d0d4002e8c9da249499164f290648699d1f216313d9f6ec99364054bb76f474c8c987c29e4e4b81d362f8ef6f8f70248ddd8097d8befa6b131b5bda2bd9d33f519eb47cbc55f59d03fc51ead7e933f4d12c080293e0b1762be6c61bdc74b86d6190d46c9aa0c100d64f6a1cffff68186fdef5eacc1e45f3e72031f8a6d7d77a74229ac7db39469315bd5748235bf7adc9787e384fa12a12a93ea99000ee535a67fe1d230c2bd0ca2bf6979084eb0abc8a86bd950f5d01f130e3ba6e2f77fa7dcff2087596538f7aa3cbb46ac94cfff32ad8bf73947befef8547c49ba80e08cc8d789d7455a9063e8ea5ad329f79e5e6acc6b0e4297ae76ed61d06eca8785290c20ac110bfcf80a334a637bc97c99648e3a529e16de3ddf583665358629428c80d42c4718416c918b7fc081c25a295f62afbbca934b682f303bb35c472a553a6ee43a8553340622633c2842d9129df7cd042df3de57309290c60834e3aa360a7e98e2d1f93ad6d09093a75de6a19f6e557a6488580cfb9d419fbc8e37cedc7fc515b10a5a8558bba2a01159a03b5e6564860381e06e24e0f51549b0985d276468e0fdf4d1caf7efdcc406197782f777556293087b4b0dd3464db6dfdf1a64fc2799df1cbce49448c0b93fe602bc1f71b4b4844bba3b088ae62f9f3b68dca5fa206b098b530b80d188b03c2ee84c585a515844c13fa5a522595441b020f74f6de7669ebcdd6a2c1f140afdb04c703c3e3a408c28abdf78626d4549f977ed014efa9ba54cbf486a78ae06f824320e3a58ae3e67c5c87f865d9302eb56b404184f0e97decdbdf7b0de963d6187c0a4a2f32e093668da91b24b04e69df99e343416c8a1055b807cf97adc212bfac54830cfdc70af140e99a9a063f499f21456e8ebfaedf78e6c3dc519d3702db2862ed0255d9d1e2f95492b09ec575db4173e6e547e4fcecf4640c7f51fba33f72f2b9c757729602633dde15aad4825c3e1c309cd9063a95cb3875c1a383dee85dfd69bebf917f78bdea143d2bac3d9c9547f34c7b4dd6002ff4fa439e6bca4217128568191a84f8d8566adab65734a3d3cce81fed9322a7483fcb247e2c2ce4afed1a317155340eeb2ae8a3f2e50b0dfa8cb18193d5bc8e68de4d7229e298bf58d46ec33fc8592de947e4662cc2b50b2a5129b022f3716ad1f58e36e48eed5144e5362821b7aa521646c6d9e4067ac2c0f46cdaf13da1a4265d39ce596686166763798c2501a3f1b3abd5b52b04157", 0x1000}, {&(0x7f0000000240)="d4b1a309b7c755", 0x7}, {&(0x7f0000000280)="1f24765c4c3eb64b9bb5b88adad56df55487cd75dcdc693f0a982372639c6c8e45149a37c7b4353c58ac42ac2676d257bc28ef17a1", 0x35}, {&(0x7f00000002c0)="0d59fb5a6109ad72ee54a50c6580315f48f5eb0169ae259db9f4", 0x1a}, {&(0x7f0000000300)="bb566001ab215210365ce673cc1d7a05b2e5984db75f417024309a4e306d3c7f988cbf628f9c21587c55896f6b8cc1c03345d7616c3ba5c090d0f99598a2ae6463cdcab1f470fcd246f74af96d36b29cc73cccce", 0x54}], 0x6, &(0x7f0000001a40)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0xe0, 0x4000000}, {&(0x7f0000001b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001bc0)="493ed08035b8740664e71b86a5813719505582279c681b0d04e8c3b6cfff3ad703d1952e6e85ca01d63a0ac9ee2d1daa0836831e8184ff4fc7e2a97f4e9d16", 0x3f}, {&(0x7f0000001c00)="d2378a32d08ef0aa2ec4a7d2c6d0", 0xe}, {&(0x7f0000001c40)="60d51c28b5d2b5ef94964c97c0b5425d47950781fc451f85e87c52040c5dff91d49dc8afb5d59d29a8e93215d1bad2581cbfc4b565c264b88690aaf900d533b7d4ef1f40ab8219efd5fb7daa070334a95b0c9b5c608fbb06b8edd82a4a20ad0d1ec97dc4e7a93f889be8e2ee28f36ae0e21dd4e72ee472638366d1a0fc7dd8d64a847004bd1c171d7842808372a1f0d09a47bc3483d81c4384c3841e3fc935dde494f8199907e105c95e2cac241c80db5c832ebd64ec4c21923e5307ca855dd80847e9edb05e1029c7ac1c548fd678449ac8019e361b5ee31d17d9acacc55877a194eeb62949cb250b329d52ba64fc02a9723ddb5f50", 0xf6}, {&(0x7f0000001d40)="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", 0xfb}, {&(0x7f0000001e40)="507d4a60654bc94ba355fe981f8f5e704dba96cbc5433a5dff6105b1437c50f72eaff26ce553b6a1ad839afb7caed0da17211026eaa6f2c54f3da4d1ca2292687b4959c5b82a34251423c438505d5c0f495cc39049db6f9d60933e8a15f12d6249b20e6ff76f3148736dc9ced732023a1dc12356d181bc785323eadc064e6841eb30ae10beb2669e7e", 0x89}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="031db70445453952f4014c087bc0462f5407989404c580ed498babce5b35be1c0a2f36743b3b84fe608366a7179ab24f53863306d92123ede0b35106f592dbdf006b5f8e3bf9b5a886c8a947b57110cb787de2", 0x53}, {&(0x7f0000002f80)="b622bb0efc569035c0ae7bed0393e343314e7a335043972a18ba43f3e57da51345be82f17ba08cfe6401714742d5a77782c4ec76ee4bd4aebd50f78afad9c3dc6398c0fefaf979ed4d25786764b3a65a726deb0f8c34bc693a4b3801695ab9ebccc8edff41e704f08762db7594a28742683b6946d73afb57bec5f526d777f17e6a00752ba44742295686af9c6defcf85bada094fdcd5a79a69209409ec9019b351ef0087d178", 0xa6}, {&(0x7f0000003040)="594fa700967bd0c9caf0fcf56f535c4ee315b78c4975ee3c76bf9bea31961b63ec387a9000a6b9", 0x27}, {&(0x7f0000003080)="5f4fa291f8393f2119a6cc775e606254a2ae42993f987407ef868134d31e852ddfef1aafb158407f8d649de2f015109d3061edddfd6dada55421f54d43c365c06a554e3abd7a6987c4c24a4eddb94b25ff443514ccd663e3bfbc1411f7f6981dd4875f483dd9700452091c5b70f25930a2a7f5610b133be2ca7807d686a26a7a609e7fb0da3e5169585328aaf79c4037bbfd0c12", 0x94}], 0xa, 0x0, 0x0, 0x40000}], 0x2, 0x800) ioctl$void(r1, 0x5451) close(r0) [ 1079.803382] FAULT_INJECTION: forcing a failure. [ 1079.803382] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.815346] CPU: 1 PID: 6404 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1079.822389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.831761] Call Trace: [ 1079.834364] dump_stack+0x138/0x197 [ 1079.838013] should_fail.cold+0x10f/0x159 [ 1079.842176] should_failslab+0xdb/0x130 [ 1079.846167] kmem_cache_alloc_node_trace+0x280/0x770 [ 1079.851291] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1079.856762] __kmalloc_node_track_caller+0x3d/0x80 [ 1079.861712] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1079.866394] __alloc_skb+0xcf/0x500 [ 1079.870020] ? skb_scrub_packet+0x4b0/0x4b0 [ 1079.874346] ? netlink_has_listeners+0x20a/0x330 [ 1079.879108] kobject_uevent_env+0x781/0xc23 [ 1079.883447] kobject_uevent+0x20/0x26 [ 1079.887427] kobject_put.cold+0x168/0x2f9 [ 1079.891593] netdev_queue_update_kobjects+0x1fa/0x360 [ 1079.896800] netdev_unregister_kobject+0x148/0x1d0 [ 1079.901745] rollback_registered_many+0x694/0xb60 [ 1079.906593] ? tun_detach_all+0x730/0x730 [ 1079.910742] ? netdev_info+0xf0/0xf0 [ 1079.914475] ? queue_delayed_work_on+0xc3/0x1e0 [ 1079.919152] ? trace_hardirqs_on_caller+0x400/0x590 [ 1079.924176] rollback_registered+0xdd/0x180 [ 1079.928501] ? rollback_registered_many+0xb60/0xb60 [ 1079.933522] ? linkwatch_schedule_work+0xf8/0x130 [ 1079.938379] unregister_netdevice_queue+0x1ae/0x230 [ 1079.943402] __tun_detach+0xa86/0xce0 [ 1079.947219] ? locks_remove_file+0x2d0/0x420 [ 1079.951646] ? __tun_detach+0xce0/0xce0 [ 1079.955632] tun_chr_close+0x46/0x60 [ 1079.959354] __fput+0x275/0x7a0 [ 1079.962648] ____fput+0x16/0x20 [ 1079.965926] task_work_run+0x114/0x190 [ 1079.969824] exit_to_usermode_loop+0x1da/0x220 [ 1079.974424] do_syscall_64+0x4bc/0x640 [ 1079.978333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1079.983197] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1079.988394] RIP: 0033:0x459879 [ 1079.991585] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:10:29 executing program 0 (fault-call:16 fault-nth:3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1079.999301] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1080.006581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1080.013857] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1080.021131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1080.028500] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:29 executing program 5 (fault-call:3 fault-nth:49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1080.070154] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.075280] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.178341] FAULT_INJECTION: forcing a failure. [ 1080.178341] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.190729] CPU: 1 PID: 6419 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1080.197769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.207133] Call Trace: [ 1080.209735] dump_stack+0x138/0x197 [ 1080.213375] should_fail.cold+0x10f/0x159 [ 1080.217559] should_failslab+0xdb/0x130 [ 1080.221539] kmem_cache_alloc_node+0x287/0x780 [ 1080.226742] __alloc_skb+0x9c/0x500 [ 1080.230375] ? skb_scrub_packet+0x4b0/0x4b0 [ 1080.234700] ? netlink_has_listeners+0x20a/0x330 [ 1080.239464] kobject_uevent_env+0x781/0xc23 [ 1080.243797] kobject_uevent+0x20/0x26 [ 1080.247598] kobject_put.cold+0x168/0x2f9 [ 1080.251753] netdev_queue_update_kobjects+0x1fa/0x360 [ 1080.256957] netdev_unregister_kobject+0x148/0x1d0 [ 1080.261914] rollback_registered_many+0x694/0xb60 [ 1080.266757] ? tun_detach_all+0x730/0x730 [ 1080.270907] ? netdev_info+0xf0/0xf0 [ 1080.274642] ? queue_delayed_work_on+0xc3/0x1e0 [ 1080.279312] ? trace_hardirqs_on_caller+0x400/0x590 [ 1080.284329] rollback_registered+0xdd/0x180 [ 1080.288653] ? rollback_registered_many+0xb60/0xb60 [ 1080.293677] ? linkwatch_schedule_work+0xf8/0x130 [ 1080.298525] unregister_netdevice_queue+0x1ae/0x230 [ 1080.303545] __tun_detach+0xa86/0xce0 [ 1080.307345] ? locks_remove_file+0x2d0/0x420 [ 1080.311760] ? __tun_detach+0xce0/0xce0 [ 1080.315732] tun_chr_close+0x46/0x60 [ 1080.319451] __fput+0x275/0x7a0 [ 1080.322737] ____fput+0x16/0x20 [ 1080.326014] task_work_run+0x114/0x190 [ 1080.329908] exit_to_usermode_loop+0x1da/0x220 [ 1080.334492] do_syscall_64+0x4bc/0x640 [ 1080.338375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1080.343225] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1080.348410] RIP: 0033:0x459879 [ 1080.351599] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1080.359309] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1080.366576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:10:30 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x0) [ 1080.373845] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1080.381114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1080.388382] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:30 executing program 3: prctl$PR_GET_THP_DISABLE(0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4001, 0x90) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000080)) close(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0x4}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xf}, 0x7}}}, 0x84) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x0) 07:10:30 executing program 5 (fault-call:3 fault-nth:50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r0) 07:10:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86e", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1080.563439] FAULT_INJECTION: forcing a failure. [ 1080.563439] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.600965] CPU: 1 PID: 6436 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1080.608024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.617497] Call Trace: [ 1080.620204] dump_stack+0x138/0x197 [ 1080.623931] should_fail.cold+0x10f/0x159 [ 1080.628105] should_failslab+0xdb/0x130 [ 1080.632082] kmem_cache_alloc_node_trace+0x280/0x770 [ 1080.637182] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1080.642631] __kmalloc_node_track_caller+0x3d/0x80 [ 1080.648785] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1080.653447] __alloc_skb+0xcf/0x500 [ 1080.657061] ? skb_scrub_packet+0x4b0/0x4b0 [ 1080.661369] ? netlink_has_listeners+0x20a/0x330 [ 1080.666131] kobject_uevent_env+0x781/0xc23 [ 1080.670447] kobject_uevent+0x20/0x26 [ 1080.674231] kobject_put.cold+0x168/0x2f9 [ 1080.678366] netdev_queue_update_kobjects+0x1fa/0x360 [ 1080.683549] netdev_unregister_kobject+0x148/0x1d0 [ 1080.688464] rollback_registered_many+0x694/0xb60 [ 1080.693293] ? tun_detach_all+0x730/0x730 [ 1080.697425] ? netdev_info+0xf0/0xf0 [ 1080.701138] ? queue_delayed_work_on+0xc3/0x1e0 [ 1080.705798] ? trace_hardirqs_on_caller+0x400/0x590 [ 1080.710807] rollback_registered+0xdd/0x180 [ 1080.715116] ? rollback_registered_many+0xb60/0xb60 [ 1080.720125] ? linkwatch_schedule_work+0xf8/0x130 [ 1080.724957] unregister_netdevice_queue+0x1ae/0x230 [ 1080.729961] __tun_detach+0xa86/0xce0 [ 1080.733766] ? locks_remove_file+0x2d0/0x420 [ 1080.738166] ? __tun_detach+0xce0/0xce0 [ 1080.742122] tun_chr_close+0x46/0x60 [ 1080.745825] __fput+0x275/0x7a0 [ 1080.749097] ____fput+0x16/0x20 [ 1080.752395] task_work_run+0x114/0x190 [ 1080.756273] exit_to_usermode_loop+0x1da/0x220 [ 1080.760869] do_syscall_64+0x4bc/0x640 [ 1080.764742] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1080.769574] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1080.774747] RIP: 0033:0x459879 [ 1080.777919] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1080.785617] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1080.792872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1080.800141] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1080.807396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 07:10:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) fsync(r0) [ 1080.814653] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:30 executing program 5 (fault-call:3 fault-nth:51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0xb97, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/145) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d8000008", @ANYRES16=r4, @ANYBLOB="000128bd7000fddbdf250300000008000400030000005400020008fab9756d00060001000000140001000000000000000000000014000100ac1414bb000000000000000000000000080005000100000008000e004e24000008000b00020000001400020008000e004e22000008000900010000001800030014000200766574683100000000000000000000000800040001bb00003400020008000300030000985e000e004e24000008000b000a00000008000e004e21000008000d0001000000080002004e230000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000000c0)={r3, 0x5}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x200}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040) close(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000580)=0x800, r6, 0x0, 0x0, 0x1}}, 0x20) recvfrom$ax25(r2, &(0x7f0000000300)=""/125, 0x7d, 0x2000, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 1080.892046] FAULT_INJECTION: forcing a failure. [ 1080.892046] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1080.938098] CPU: 0 PID: 6417 Comm: syz-executor.0 Not tainted 4.14.141 #37 [ 1080.945165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.954529] Call Trace: [ 1080.957120] dump_stack+0x138/0x197 [ 1080.960754] should_fail.cold+0x10f/0x159 [ 1080.964896] ? check_preemption_disabled+0x3c/0x250 [ 1080.969920] get_futex_key+0xa4e/0x1040 [ 1080.973920] ? futex_lock_pi_atomic+0x210/0x210 [ 1080.978596] ? hrtimer_try_to_cancel+0x14f/0x530 [ 1080.984307] futex_wake+0xd9/0x430 [ 1080.987868] ? get_futex_key+0x1040/0x1040 [ 1080.992108] do_futex+0x290/0x19e0 [ 1080.995817] ? __lock_acquire+0x5f7/0x4620 [ 1081.000057] ? __lock_acquire+0x5f7/0x4620 [ 1081.004316] ? exit_robust_list+0x230/0x230 [ 1081.008632] ? debug_smp_processor_id+0x1c/0x20 [ 1081.013302] ? perf_trace_lock+0x109/0x500 [ 1081.017535] ? check_preemption_disabled+0x3c/0x250 [ 1081.022551] ? debug_smp_processor_id+0x1c/0x20 [ 1081.027216] ? perf_trace_lock+0x109/0x500 [ 1081.031448] ? save_trace+0x290/0x290 [ 1081.035273] ? SOFTIRQ_verbose+0x10/0x10 [ 1081.039359] ? __might_fault+0x110/0x1d0 [ 1081.043423] ? find_held_lock+0x35/0x130 [ 1081.047570] SyS_futex+0x215/0x302 [ 1081.051112] ? do_futex+0x19e0/0x19e0 [ 1081.055190] mm_release+0x30e/0x450 [ 1081.058819] do_exit+0x3ad/0x2c10 [ 1081.062272] ? SOFTIRQ_verbose+0x10/0x10 [ 1081.066333] ? find_held_lock+0x35/0x130 [ 1081.070389] ? mm_update_next_owner+0x5d0/0x5d0 [ 1081.075055] do_group_exit+0x111/0x330 [ 1081.078948] get_signal+0x381/0x1cd0 [ 1081.082690] do_signal+0x86/0x19a0 [ 1081.086246] ? create_new_namespaces+0x3e9/0x720 [ 1081.091110] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1081.096653] ? create_new_namespaces+0x3e9/0x720 [ 1081.101400] ? setup_sigcontext+0x7d0/0x7d0 [ 1081.105714] ? kmem_cache_free+0x244/0x2b0 [ 1081.109934] ? create_new_namespaces+0x3b1/0x720 [ 1081.114680] ? unshare_nsproxy_namespaces+0xdd/0x1e0 [ 1081.119770] ? SyS_unshare+0x5a0/0x7e0 [ 1081.123644] ? exit_to_usermode_loop+0x3d/0x220 [ 1081.128317] exit_to_usermode_loop+0x15c/0x220 [ 1081.132898] do_syscall_64+0x4bc/0x640 [ 1081.136771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1081.141698] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1081.146882] RIP: 0033:0x459879 [ 1081.150058] RSP: 002b:00007f6413536c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1081.157752] RAX: fffffffffffffffc RBX: 00007f6413536c90 RCX: 0000000000459879 [ 1081.165027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1081.172305] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1081.179574] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64135376d4 [ 1081.186852] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 07:10:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f6517b60698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb3b8751731e70ac"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) close(r0) 07:10:31 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x0) [ 1081.254415] FAULT_INJECTION: forcing a failure. [ 1081.254415] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.316550] CPU: 1 PID: 6452 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1081.323644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.323650] Call Trace: [ 1081.323671] dump_stack+0x138/0x197 [ 1081.323697] should_fail.cold+0x10f/0x159 [ 1081.323716] should_failslab+0xdb/0x130 [ 1081.323732] kmem_cache_alloc_node+0x287/0x780 [ 1081.323754] __alloc_skb+0x9c/0x500 [ 1081.323765] ? skb_scrub_packet+0x4b0/0x4b0 [ 1081.323779] ? netlink_has_listeners+0x20a/0x330 [ 1081.323795] kobject_uevent_env+0x781/0xc23 [ 1081.323817] kobject_uevent+0x20/0x26 [ 1081.323829] kobject_put.cold+0x168/0x2f9 [ 1081.323843] netdev_queue_update_kobjects+0x1fa/0x360 [ 1081.323863] netdev_unregister_kobject+0x148/0x1d0 [ 1081.323878] rollback_registered_many+0x694/0xb60 [ 1081.323890] ? tun_detach_all+0x730/0x730 [ 1081.323901] ? netdev_info+0xf0/0xf0 [ 1081.323914] ? queue_delayed_work_on+0xc3/0x1e0 [ 1081.323929] ? trace_hardirqs_on_caller+0x400/0x590 [ 1081.323943] rollback_registered+0xdd/0x180 07:10:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86e", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1081.323955] ? rollback_registered_many+0xb60/0xb60 [ 1081.323967] ? linkwatch_schedule_work+0xf8/0x130 [ 1081.323982] unregister_netdevice_queue+0x1ae/0x230 [ 1081.323995] __tun_detach+0xa86/0xce0 [ 1081.324008] ? locks_remove_file+0x2d0/0x420 [ 1081.324025] ? __tun_detach+0xce0/0xce0 [ 1081.324034] tun_chr_close+0x46/0x60 [ 1081.324046] __fput+0x275/0x7a0 [ 1081.324066] ____fput+0x16/0x20 [ 1081.324078] task_work_run+0x114/0x190 [ 1081.324097] exit_to_usermode_loop+0x1da/0x220 [ 1081.324112] do_syscall_64+0x4bc/0x640 [ 1081.324122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1081.324141] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1081.324149] RIP: 0033:0x459879 [ 1081.324155] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1081.324168] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1081.324174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1081.324181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1081.324187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 07:10:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x1ff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x5}) close(r0) write$P9_RREAD(r1, &(0x7f0000000100)={0x102, 0x75, 0x1, {0xf7, "b676b177d8678c74e31f38b08ffbc9a53493632d0e6537755c5b68e4605a0b93297ff85fc39aa77c9090753cf5bc2369328bd3c46bd9146799d657b6bde4bdac4b0a32a2a7cb1545eff9582fd98c29c56a1f5aac4b562f44ec2c1a2f46bdba332ef82662580a8a63ea120e6534949d9dd649d4d19f2aed0030ea2c9aa705fd8faff4b645aaf171220ad56d32469cfafab5fa7b07fbb78aec7c25da1470e7b11bbda99e7f635ae5865958c8296f77784c1caa11d6438c955b4eb9ab50018404707ada30bab15985feeed119fb58de1a59b1ec21e3cc290424c252b15b665c244220fa74c5fdaef513a251e8dd58ac0aede2c3114ef61ff5"}}, 0x102) [ 1081.324193] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:31 executing program 5 (fault-call:3 fault-nth:52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0xf0ffff00000002}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0xa915bd44df49d9c8, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x8548, 0x9, 0x3}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="010005000180c20000010180c2000002aaaaaaaaaabbaaaaaaaaf7f298bd00000000"]) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000100), 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1081.638178] IPVS: ftp: loaded support on port[0] = 21 [ 1081.663830] FAULT_INJECTION: forcing a failure. [ 1081.663830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1081.675716] CPU: 1 PID: 6483 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1081.682859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.692376] Call Trace: [ 1081.695084] dump_stack+0x138/0x197 [ 1081.698710] should_fail.cold+0x10f/0x159 [ 1081.702860] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1081.707531] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1081.712544] cache_grow_begin+0x80/0x400 [ 1081.716614] kmem_cache_alloc_trace+0x6b2/0x790 [ 1081.721294] ? mutex_trylock+0x1c0/0x1c0 [ 1081.725356] ? devm_device_remove_groups+0x50/0x50 [ 1081.730285] kobject_uevent_env+0x378/0xc23 [ 1081.734607] ? wait_for_completion+0x420/0x420 [ 1081.739176] kobject_uevent+0x20/0x26 [ 1081.742961] device_del+0x65c/0xaa0 [ 1081.746575] ? __device_links_no_driver+0x220/0x220 [ 1081.751591] ? mutex_unlock+0xd/0x10 [ 1081.755303] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1081.760581] netdev_unregister_kobject+0x184/0x1d0 [ 1081.765514] rollback_registered_many+0x694/0xb60 [ 1081.770364] ? tun_detach_all+0x730/0x730 [ 1081.774504] ? netdev_info+0xf0/0xf0 [ 1081.778209] ? queue_delayed_work_on+0xc3/0x1e0 [ 1081.782898] ? trace_hardirqs_on_caller+0x400/0x590 [ 1081.787907] rollback_registered+0xdd/0x180 [ 1081.792244] ? rollback_registered_many+0xb60/0xb60 [ 1081.797255] ? linkwatch_schedule_work+0xf8/0x130 [ 1081.802085] unregister_netdevice_queue+0x1ae/0x230 [ 1081.807094] __tun_detach+0xa86/0xce0 [ 1081.810919] ? locks_remove_file+0x2d0/0x420 [ 1081.815319] ? __tun_detach+0xce0/0xce0 [ 1081.819279] tun_chr_close+0x46/0x60 [ 1081.822977] __fput+0x275/0x7a0 [ 1081.826245] ____fput+0x16/0x20 [ 1081.829513] task_work_run+0x114/0x190 [ 1081.833407] exit_to_usermode_loop+0x1da/0x220 [ 1081.837983] do_syscall_64+0x4bc/0x640 [ 1081.841861] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1081.846694] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1081.852933] RIP: 0033:0x459879 [ 1081.856137] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1081.863838] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1081.871099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1081.878469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:10:31 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) [ 1081.885923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1081.893210] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:31 executing program 5 (fault-call:3 fault-nth:53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xe4694e8dc595d46a, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) process_vm_writev(r3, &(0x7f0000000280)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000840)=""/197, 0xc5}], 0x3, &(0x7f0000000cc0)=[{&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000680)}, {&(0x7f0000000ac0)=""/228, 0xe4}, {&(0x7f0000000bc0)=""/238, 0xee}, {&(0x7f0000000740)=""/126, 0x7e}], 0x6, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb000000000000000000000000000000003f33f576a64da300000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e154d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a30000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1146], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1, {0x0, 0x989680}, 0x8}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1082.088675] FAULT_INJECTION: forcing a failure. [ 1082.088675] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.129919] CPU: 0 PID: 6493 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1082.136995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.146364] Call Trace: [ 1082.148969] dump_stack+0x138/0x197 [ 1082.152610] should_fail.cold+0x10f/0x159 [ 1082.156767] should_failslab+0xdb/0x130 [ 1082.160742] kmem_cache_alloc_trace+0x2e9/0x790 [ 1082.165554] ? lock_downgrade+0x6e0/0x6e0 [ 1082.169988] ? mutex_trylock+0x1c0/0x1c0 [ 1082.174050] ? devm_device_remove_groups+0x50/0x50 [ 1082.178972] kobject_uevent_env+0x378/0xc23 [ 1082.183287] ? wait_for_completion+0x420/0x420 [ 1082.187869] kobject_uevent+0x20/0x26 [ 1082.191657] device_del+0x65c/0xaa0 [ 1082.195281] ? __device_links_no_driver+0x220/0x220 [ 1082.200301] ? mutex_unlock+0xd/0x10 [ 1082.204028] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1082.204045] netdev_unregister_kobject+0x184/0x1d0 [ 1082.204059] rollback_registered_many+0x694/0xb60 [ 1082.219078] ? tun_detach_all+0x730/0x730 [ 1082.223220] ? netdev_info+0xf0/0xf0 [ 1082.226925] ? queue_delayed_work_on+0xc3/0x1e0 [ 1082.231589] ? trace_hardirqs_on_caller+0x400/0x590 [ 1082.236608] rollback_registered+0xdd/0x180 [ 1082.240915] ? rollback_registered_many+0xb60/0xb60 [ 1082.245924] ? linkwatch_schedule_work+0xf8/0x130 [ 1082.250758] unregister_netdevice_queue+0x1ae/0x230 [ 1082.255778] __tun_detach+0xa86/0xce0 [ 1082.259684] ? locks_remove_file+0x2d0/0x420 [ 1082.264119] ? __tun_detach+0xce0/0xce0 [ 1082.268101] tun_chr_close+0x46/0x60 [ 1082.271819] __fput+0x275/0x7a0 [ 1082.275114] ____fput+0x16/0x20 [ 1082.278398] task_work_run+0x114/0x190 [ 1082.282316] exit_to_usermode_loop+0x1da/0x220 [ 1082.286899] do_syscall_64+0x4bc/0x640 [ 1082.290781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1082.295620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1082.300799] RIP: 0033:0x459879 [ 1082.303994] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1082.311711] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1082.318978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:10:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86e", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1082.326246] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1082.333858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1082.341119] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:32 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mkdir(&(0x7f00000012c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="11dca50d0104cfe47bf070") mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:32 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:32 executing program 5 (fault-call:3 fault-nth:54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1082.515814] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1082.534122] overlayfs: filesystem on './file0' not supported as upperdir [ 1082.547276] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1082.563658] FAULT_INJECTION: forcing a failure. [ 1082.563658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1082.575519] CPU: 0 PID: 6518 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1082.582545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.592264] Call Trace: [ 1082.594890] dump_stack+0x138/0x197 [ 1082.598543] should_fail.cold+0x10f/0x159 [ 1082.602864] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1082.607572] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1082.612615] cache_grow_begin+0x80/0x400 [ 1082.616724] kmem_cache_alloc_trace+0x6b2/0x790 [ 1082.621427] ? mutex_trylock+0x1c0/0x1c0 [ 1082.625513] ? devm_device_remove_groups+0x50/0x50 [ 1082.630457] kobject_uevent_env+0x378/0xc23 [ 1082.634792] ? wait_for_completion+0x420/0x420 [ 1082.639395] kobject_uevent+0x20/0x26 [ 1082.643212] device_del+0x65c/0xaa0 [ 1082.646853] ? __device_links_no_driver+0x220/0x220 [ 1082.651859] ? mutex_unlock+0xd/0x10 [ 1082.655556] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1082.660820] netdev_unregister_kobject+0x184/0x1d0 [ 1082.665736] rollback_registered_many+0x694/0xb60 [ 1082.670579] ? tun_detach_all+0x730/0x730 [ 1082.674713] ? netdev_info+0xf0/0xf0 [ 1082.678413] ? queue_delayed_work_on+0xc3/0x1e0 [ 1082.683070] ? trace_hardirqs_on_caller+0x400/0x590 [ 1082.688072] rollback_registered+0xdd/0x180 [ 1082.692553] ? rollback_registered_many+0xb60/0xb60 [ 1082.697557] ? linkwatch_schedule_work+0xf8/0x130 [ 1082.702386] unregister_netdevice_queue+0x1ae/0x230 [ 1082.707393] __tun_detach+0xa86/0xce0 [ 1082.711184] ? locks_remove_file+0x2d0/0x420 [ 1082.715595] ? __tun_detach+0xce0/0xce0 [ 1082.719658] tun_chr_close+0x46/0x60 [ 1082.723359] __fput+0x275/0x7a0 [ 1082.726637] ____fput+0x16/0x20 [ 1082.729903] task_work_run+0x114/0x190 [ 1082.733779] exit_to_usermode_loop+0x1da/0x220 [ 1082.738349] do_syscall_64+0x4bc/0x640 [ 1082.742221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1082.747071] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1082.752248] RIP: 0033:0x459879 [ 1082.755423] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:10:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000480)="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", 0x1000) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) [ 1082.763119] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1082.770377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1082.777648] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1082.784905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1082.792254] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000702000b006e7230010000000000480002000000aeaf8b01251e9427421dbb5b74222a5e809bf2e2228990316b694faf5b52233159d4cd233116980bc63bf8b06656bc6dc8d43832d9a6efd7549c7d8524792c9d99df00a58a638f7d4261050bfaf5ff67afe9010ba4ce1029c60270d1923fde58a08e8200c9305ff5fbe0069aa99b5a59fbf45e2d97c6d30b12867b7134f91000f1"], 0x18) 07:10:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) 07:10:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/175) 07:10:32 executing program 5 (fault-call:3 fault-nth:55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000180)='syz0\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xd267, 0x400001) accept4$tipc(r0, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10, 0x80000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='dctcp-reno\x00', 0xb) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={r4, 0x7, 0xe0000000000, r2}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1083.008593] FAULT_INJECTION: forcing a failure. [ 1083.008593] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.020981] CPU: 1 PID: 6539 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1083.028018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.037380] Call Trace: [ 1083.039993] dump_stack+0x138/0x197 [ 1083.043623] should_fail.cold+0x10f/0x159 [ 1083.048119] should_failslab+0xdb/0x130 [ 1083.052116] kmem_cache_alloc_node+0x287/0x780 [ 1083.059072] __alloc_skb+0x9c/0x500 [ 1083.062709] ? skb_scrub_packet+0x4b0/0x4b0 [ 1083.067204] ? netlink_has_listeners+0x20a/0x330 [ 1083.071965] kobject_uevent_env+0x781/0xc23 [ 1083.076285] ? wait_for_completion+0x420/0x420 [ 1083.080874] kobject_uevent+0x20/0x26 [ 1083.084681] device_del+0x65c/0xaa0 [ 1083.088330] ? __device_links_no_driver+0x220/0x220 [ 1083.093351] ? mutex_unlock+0xd/0x10 [ 1083.097089] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1083.102390] netdev_unregister_kobject+0x184/0x1d0 [ 1083.107330] rollback_registered_many+0x694/0xb60 [ 1083.112177] ? tun_detach_all+0x730/0x730 [ 1083.116348] ? netdev_info+0xf0/0xf0 [ 1083.116362] ? queue_delayed_work_on+0xc3/0x1e0 [ 1083.116376] ? trace_hardirqs_on_caller+0x400/0x590 [ 1083.116393] rollback_registered+0xdd/0x180 [ 1083.134083] ? rollback_registered_many+0xb60/0xb60 [ 1083.139098] ? linkwatch_schedule_work+0xf8/0x130 [ 1083.143936] unregister_netdevice_queue+0x1ae/0x230 [ 1083.148958] __tun_detach+0xa86/0xce0 [ 1083.152771] ? locks_remove_file+0x2d0/0x420 [ 1083.157183] ? __tun_detach+0xce0/0xce0 [ 1083.161154] tun_chr_close+0x46/0x60 [ 1083.164891] __fput+0x275/0x7a0 [ 1083.168180] ____fput+0x16/0x20 [ 1083.171467] task_work_run+0x114/0x190 [ 1083.175514] exit_to_usermode_loop+0x1da/0x220 [ 1083.180104] do_syscall_64+0x4bc/0x640 [ 1083.183989] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1083.188831] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1083.194020] RIP: 0033:0x459879 [ 1083.197194] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:10:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b489", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:33 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="e6d54fc5f4a399af565987afd89cc711643b0a3fba5c62", 0x17}, {&(0x7f0000000140)="2b41ac97148b736acacfd0216499811a5341acbeb2b2400c742922d0c2d810415382133bb5201efe373a72f679384a9c593d13ebb1782b0683b90f271242f4e076e25d79299ee6a88733bde704b86ef01573d2005bbea1049d08ff43180e377c24eb0f777504a8e515832498631459672cba6aa19491a4ad6e4bbb47a6ec1308ea7ef592bdb460dd3c7cc678b73a", 0x8e}], 0x2, 0x0) close(r0) accept(r1, 0x0, &(0x7f0000000240)) [ 1083.204893] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1083.212176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1083.219469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1083.226750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1083.234031] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r0) 07:10:33 executing program 5 (fault-call:3 fault-nth:56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = dup(r0) fgetxattr(r1, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f00000001c0)=""/39, 0x27) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x40, 0x7}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000080)={0x40000000001, 0x8, 0x2e, "e982b27d1872ec2599a782d071f5534658663e7c1d483abc7469ec818280e498576482a2ca5749bb46f917d30b34033fd008c6564831cb568ef78e80", 0xb, "ec0e096073e46846c115bb4678a55252730c9f184772b33f5ef05b49b4d75ea19b6c3f8b1d4c326ba85baf2e9842a88f69a5dc4628949cc08a97e8b8", 0x80}) [ 1083.399078] FAULT_INJECTION: forcing a failure. [ 1083.399078] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.411120] CPU: 1 PID: 6562 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1083.418167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.427520] Call Trace: [ 1083.430124] dump_stack+0x138/0x197 [ 1083.433750] should_fail.cold+0x10f/0x159 [ 1083.437892] should_failslab+0xdb/0x130 [ 1083.441857] kmem_cache_alloc_node_trace+0x280/0x770 [ 1083.446969] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1083.452423] __kmalloc_node_track_caller+0x3d/0x80 [ 1083.457348] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1083.462006] __alloc_skb+0xcf/0x500 [ 1083.465619] ? skb_scrub_packet+0x4b0/0x4b0 [ 1083.469932] ? netlink_has_listeners+0x20a/0x330 [ 1083.474676] kobject_uevent_env+0x781/0xc23 [ 1083.478982] ? wait_for_completion+0x420/0x420 [ 1083.483560] kobject_uevent+0x20/0x26 [ 1083.487344] device_del+0x65c/0xaa0 [ 1083.490958] ? __device_links_no_driver+0x220/0x220 [ 1083.495956] ? mutex_unlock+0xd/0x10 [ 1083.499652] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1083.504915] netdev_unregister_kobject+0x184/0x1d0 [ 1083.509852] rollback_registered_many+0x694/0xb60 [ 1083.514682] ? tun_detach_all+0x730/0x730 [ 1083.518813] ? netdev_info+0xf0/0xf0 [ 1083.522518] ? queue_delayed_work_on+0xc3/0x1e0 [ 1083.527175] ? trace_hardirqs_on_caller+0x400/0x590 [ 1083.532190] rollback_registered+0xdd/0x180 [ 1083.536500] ? rollback_registered_many+0xb60/0xb60 [ 1083.541501] ? linkwatch_schedule_work+0xf8/0x130 [ 1083.546329] unregister_netdevice_queue+0x1ae/0x230 [ 1083.551348] __tun_detach+0xa86/0xce0 [ 1083.555150] ? locks_remove_file+0x2d0/0x420 [ 1083.559567] ? __tun_detach+0xce0/0xce0 [ 1083.563539] tun_chr_close+0x46/0x60 [ 1083.567245] __fput+0x275/0x7a0 [ 1083.570518] ____fput+0x16/0x20 [ 1083.573783] task_work_run+0x114/0x190 [ 1083.577661] exit_to_usermode_loop+0x1da/0x220 [ 1083.582248] do_syscall_64+0x4bc/0x640 [ 1083.586144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1083.590974] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1083.596148] RIP: 0033:0x459879 07:10:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syz_tun\x00', 0x1}) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000180)="7d5cf6a725e7fb5c10daa0bb7fd20089da574af4539638584f0f9cd142f39e0bc97f5d76b79ad67d46fcc7f2113d1f42d152983252bdcb9d2be390ccbc7f7fec4414deff96511dcd92bf855fc68d44675ee1c964adb6b4eecaadcd5f0ba82f55f48e1f41ae7d4ccbc7146d916e830d3f8b9c821b4c"}, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x200000) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)={0x7fffffff, {{0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, [], 0x24}, 0x80000001}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x6, @rand_addr="42200b91c0bca389d793d25a6e2fd33b", 0xfffffffffffffffa}}, {{0xa, 0x4e23, 0x40, @remote}}, {{0xa, 0x4e21, 0x2aa826fc, @rand_addr="5803c9e177287e34d795f5d8b58f1fbc", 0x4}}, {{0xa, 0x4e21, 0x10000, @rand_addr="994c4dbd14b36a2616b566f9a07fc147", 0xffffffffffffff74}}]}, 0x290) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000080)=""/131, &(0x7f0000000140)=0x83) close(r2) [ 1083.599471] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1083.607212] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1083.615381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1083.622640] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1083.630034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1083.637298] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:33 executing program 4 (fault-call:16 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:33 executing program 5 (fault-call:3 fault-nth:57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1083.707190] FAULT_INJECTION: forcing a failure. [ 1083.707190] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.737413] CPU: 1 PID: 6572 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 1083.744490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.753861] Call Trace: [ 1083.756458] dump_stack+0x138/0x197 [ 1083.760094] should_fail.cold+0x10f/0x159 [ 1083.760115] should_failslab+0xdb/0x130 [ 1083.760131] kmem_cache_alloc+0x2d7/0x780 [ 1083.760144] ? selinux_capable+0x36/0x40 [ 1083.760158] create_new_namespaces+0x34/0x720 [ 1083.760168] ? ns_capable_common+0x12c/0x160 [ 1083.760181] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1083.760190] ? unshare_userns+0x26/0xe0 [ 1083.760203] SyS_unshare+0x2f3/0x7e0 [ 1083.760215] ? walk_process_tree+0x2b0/0x2b0 [ 1083.760230] ? do_syscall_64+0x53/0x640 07:10:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x8040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1083.760241] ? walk_process_tree+0x2b0/0x2b0 [ 1083.760252] do_syscall_64+0x1e8/0x640 [ 1083.760260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1083.760277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1083.772532] RIP: 0033:0x459879 [ 1083.772539] RSP: 002b:00007f8da2570c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1083.772550] RAX: ffffffffffffffda RBX: 00007f8da2570c90 RCX: 0000000000459879 [ 1083.772557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 07:10:33 executing program 4 (fault-call:16 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) [ 1083.772562] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1083.772570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8da25716d4 [ 1083.781109] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 [ 1083.902065] FAULT_INJECTION: forcing a failure. [ 1083.902065] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.925684] FAULT_INJECTION: forcing a failure. [ 1083.925684] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.934293] CPU: 1 PID: 6588 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 1083.943981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.953628] Call Trace: [ 1083.956227] dump_stack+0x138/0x197 [ 1083.959867] should_fail.cold+0x10f/0x159 [ 1083.964020] should_failslab+0xdb/0x130 [ 1083.968003] __kmalloc+0x2f0/0x7a0 [ 1083.971549] ? inc_ucount+0x34c/0x710 [ 1083.975569] ? check_preemption_disabled+0x3c/0x250 [ 1083.980810] ? net_alloc_generic+0x23/0x70 [ 1083.985056] net_alloc_generic+0x23/0x70 [ 1083.989138] copy_net_ns+0xd8/0x440 [ 1083.992770] create_new_namespaces+0x37b/0x720 [ 1083.997356] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1084.002334] ? unshare_userns+0x26/0xe0 [ 1084.006333] SyS_unshare+0x2f3/0x7e0 [ 1084.010062] ? walk_process_tree+0x2b0/0x2b0 [ 1084.014482] ? do_syscall_64+0x53/0x640 [ 1084.018488] ? walk_process_tree+0x2b0/0x2b0 [ 1084.022900] do_syscall_64+0x1e8/0x640 [ 1084.026784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1084.031634] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1084.036825] RIP: 0033:0x459879 [ 1084.040029] RSP: 002b:00007f8da2570c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1084.047751] RAX: ffffffffffffffda RBX: 00007f8da2570c90 RCX: 0000000000459879 [ 1084.055023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1084.062294] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1084.069561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8da25716d4 [ 1084.076840] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 [ 1084.084229] CPU: 0 PID: 6580 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1084.091288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:10:33 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1084.100650] Call Trace: [ 1084.103241] dump_stack+0x138/0x197 [ 1084.106914] should_fail.cold+0x10f/0x159 [ 1084.111076] should_failslab+0xdb/0x130 [ 1084.115065] kmem_cache_alloc_node_trace+0x280/0x770 [ 1084.120189] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1084.125650] __kmalloc_node_track_caller+0x3d/0x80 [ 1084.125664] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1084.125677] __alloc_skb+0xcf/0x500 [ 1084.125687] ? skb_scrub_packet+0x4b0/0x4b0 [ 1084.125697] ? netlink_has_listeners+0x20a/0x330 [ 1084.125712] kobject_uevent_env+0x781/0xc23 [ 1084.138965] ? wait_for_completion+0x420/0x420 [ 1084.138990] kobject_uevent+0x20/0x26 [ 1084.139001] device_del+0x65c/0xaa0 [ 1084.139014] ? __device_links_no_driver+0x220/0x220 [ 1084.169439] ? mutex_unlock+0xd/0x10 [ 1084.169450] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1084.169465] netdev_unregister_kobject+0x184/0x1d0 [ 1084.169478] rollback_registered_many+0x694/0xb60 [ 1084.169488] ? tun_detach_all+0x730/0x730 [ 1084.169498] ? netdev_info+0xf0/0xf0 [ 1084.169517] ? queue_delayed_work_on+0xc3/0x1e0 [ 1084.201059] ? trace_hardirqs_on_caller+0x400/0x590 [ 1084.206152] rollback_registered+0xdd/0x180 [ 1084.210485] ? rollback_registered_many+0xb60/0xb60 [ 1084.215510] ? linkwatch_schedule_work+0xf8/0x130 [ 1084.220363] unregister_netdevice_queue+0x1ae/0x230 [ 1084.225596] __tun_detach+0xa86/0xce0 [ 1084.229400] ? locks_remove_file+0x2d0/0x420 [ 1084.233804] ? __tun_detach+0xce0/0xce0 [ 1084.237768] tun_chr_close+0x46/0x60 [ 1084.241472] __fput+0x275/0x7a0 [ 1084.244743] ____fput+0x16/0x20 [ 1084.248040] task_work_run+0x114/0x190 [ 1084.251919] exit_to_usermode_loop+0x1da/0x220 [ 1084.256501] do_syscall_64+0x4bc/0x640 [ 1084.260380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1084.265228] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1084.270409] RIP: 0033:0x459879 [ 1084.273585] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1084.281302] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1084.288566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1084.295840] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:10:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b489", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:34 executing program 4 (fault-call:16 fault-nth:2): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) [ 1084.303101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1084.310363] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 [ 1084.350590] FAULT_INJECTION: forcing a failure. [ 1084.350590] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.362363] CPU: 0 PID: 6599 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 1084.369431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.378898] Call Trace: [ 1084.381687] dump_stack+0x138/0x197 [ 1084.385342] should_fail.cold+0x10f/0x159 [ 1084.389520] should_failslab+0xdb/0x130 [ 1084.393539] kmem_cache_alloc+0x2d7/0x780 [ 1084.397702] ? net_alloc_generic+0x23/0x70 [ 1084.401961] copy_net_ns+0xfa/0x440 [ 1084.405603] create_new_namespaces+0x37b/0x720 [ 1084.410210] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1084.415148] ? unshare_userns+0x26/0xe0 [ 1084.419131] SyS_unshare+0x2f3/0x7e0 [ 1084.422868] ? walk_process_tree+0x2b0/0x2b0 [ 1084.427286] ? do_syscall_64+0x53/0x640 [ 1084.431274] ? walk_process_tree+0x2b0/0x2b0 [ 1084.435676] do_syscall_64+0x1e8/0x640 [ 1084.439554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1084.444388] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1084.449585] RIP: 0033:0x459879 [ 1084.452759] RSP: 002b:00007f8da2570c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1084.460483] RAX: ffffffffffffffda RBX: 00007f8da2570c90 RCX: 0000000000459879 [ 1084.467742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1084.474999] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1084.482257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8da25716d4 [ 1084.489515] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 07:10:34 executing program 4 (fault-call:16 fault-nth:3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\xe5\x19\x9f\x1e\xea\xee\xe3s\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1084.500204] net_ratelimit: 21 callbacks suppressed [ 1084.500210] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.510277] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.515422] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.520543] protocol 88fb is buggy, dev hsr_slave_1 07:10:34 executing program 5 (fault-call:3 fault-nth:58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1084.602479] FAULT_INJECTION: forcing a failure. [ 1084.602479] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.615310] CPU: 0 PID: 6612 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1084.622358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.631723] Call Trace: [ 1084.634308] dump_stack+0x138/0x197 [ 1084.637940] should_fail.cold+0x10f/0x159 [ 1084.642216] should_failslab+0xdb/0x130 [ 1084.646264] kmem_cache_alloc_node_trace+0x280/0x770 [ 1084.651353] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1084.656900] __kmalloc_node_track_caller+0x3d/0x80 [ 1084.661813] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1084.666478] __alloc_skb+0xcf/0x500 [ 1084.670441] ? skb_scrub_packet+0x4b0/0x4b0 [ 1084.674749] ? netlink_has_listeners+0x20a/0x330 [ 1084.679513] kobject_uevent_env+0x781/0xc23 [ 1084.683948] ? wait_for_completion+0x420/0x420 [ 1084.688542] kobject_uevent+0x20/0x26 [ 1084.692372] device_del+0x65c/0xaa0 [ 1084.696042] ? __device_links_no_driver+0x220/0x220 [ 1084.701050] ? mutex_unlock+0xd/0x10 [ 1084.704748] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1084.710010] netdev_unregister_kobject+0x184/0x1d0 [ 1084.714932] rollback_registered_many+0x694/0xb60 [ 1084.719759] ? tun_detach_all+0x730/0x730 [ 1084.723889] ? netdev_info+0xf0/0xf0 [ 1084.727589] ? queue_delayed_work_on+0xc3/0x1e0 [ 1084.732244] ? trace_hardirqs_on_caller+0x400/0x590 [ 1084.737504] rollback_registered+0xdd/0x180 [ 1084.741829] ? rollback_registered_many+0xb60/0xb60 [ 1084.746835] ? linkwatch_schedule_work+0xf8/0x130 [ 1084.751661] unregister_netdevice_queue+0x1ae/0x230 [ 1084.756663] __tun_detach+0xa86/0xce0 [ 1084.760448] ? locks_remove_file+0x2d0/0x420 [ 1084.764853] ? __tun_detach+0xce0/0xce0 [ 1084.768816] tun_chr_close+0x46/0x60 [ 1084.772512] __fput+0x275/0x7a0 [ 1084.775775] ____fput+0x16/0x20 [ 1084.779040] task_work_run+0x114/0x190 [ 1084.782915] exit_to_usermode_loop+0x1da/0x220 [ 1084.787635] do_syscall_64+0x4bc/0x640 [ 1084.791512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1084.796470] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1084.801649] RIP: 0033:0x459879 [ 1084.804957] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1084.812671] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1084.819944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1084.827199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1084.834458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1084.841724] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000480)) 07:10:34 executing program 5 (fault-call:3 fault-nth:59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33a) syz_init_net_socket$ax25(0x3, 0xfd11bf62911e1a83, 0x8) close(r0) 07:10:34 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1084.947430] FAULT_INJECTION: forcing a failure. [ 1084.947430] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.974370] CPU: 1 PID: 6620 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1084.981434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.981440] Call Trace: [ 1084.981462] dump_stack+0x138/0x197 [ 1084.981483] should_fail.cold+0x10f/0x159 [ 1084.981498] should_failslab+0xdb/0x130 [ 1084.981513] kmem_cache_alloc_node_trace+0x280/0x770 [ 1084.981529] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1084.981546] __kmalloc_node_track_caller+0x3d/0x80 [ 1084.981561] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1084.981574] __alloc_skb+0xcf/0x500 [ 1084.981586] ? skb_scrub_packet+0x4b0/0x4b0 [ 1085.005311] ? netlink_has_listeners+0x20a/0x330 [ 1085.005329] kobject_uevent_env+0x781/0xc23 [ 1085.005338] ? wait_for_completion+0x420/0x420 [ 1085.005359] kobject_uevent+0x20/0x26 [ 1085.005371] device_del+0x65c/0xaa0 [ 1085.005385] ? __device_links_no_driver+0x220/0x220 [ 1085.005393] ? mutex_unlock+0xd/0x10 [ 1085.005402] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1085.005416] netdev_unregister_kobject+0x184/0x1d0 [ 1085.073659] rollback_registered_many+0x694/0xb60 [ 1085.073672] ? tun_detach_all+0x730/0x730 [ 1085.073681] ? netdev_info+0xf0/0xf0 [ 1085.073695] ? queue_delayed_work_on+0xc3/0x1e0 [ 1085.073709] ? trace_hardirqs_on_caller+0x400/0x590 [ 1085.073721] rollback_registered+0xdd/0x180 [ 1085.100458] ? rollback_registered_many+0xb60/0xb60 [ 1085.100471] ? linkwatch_schedule_work+0xf8/0x130 [ 1085.100485] unregister_netdevice_queue+0x1ae/0x230 [ 1085.100498] __tun_detach+0xa86/0xce0 [ 1085.100513] ? locks_remove_file+0x2d0/0x420 [ 1085.123593] ? __tun_detach+0xce0/0xce0 [ 1085.127566] tun_chr_close+0x46/0x60 [ 1085.131280] __fput+0x275/0x7a0 [ 1085.134573] ____fput+0x16/0x20 [ 1085.137862] task_work_run+0x114/0x190 [ 1085.141766] exit_to_usermode_loop+0x1da/0x220 [ 1085.146349] do_syscall_64+0x4bc/0x640 [ 1085.150240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1085.155095] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1085.160289] RIP: 0033:0x459879 [ 1085.163505] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1085.171229] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1085.178505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1085.185774] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:10:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b489", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x101200, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) write$nbd(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="67446698010000469b4208ef68419bab5688f1ea053b0002000000030000003ef6e75b3f0f4a57457bf7c983404f84953695a1bd03d441b46a813e68760d35efd1061edf30164744966d45eccfd68794cb52b7889e9f16210cd6e077517fe6c300b7d10501fc02d04120cadf27d305d7303b40e5569d20afe98a5192b6389aadb179800ca47cfa5983b64b93bd02ea44ba8d79d0d9baa34826e12f686acf1df69fc48c92d71d21758b6e0a37f146a950d48dbc75a88a23101b3fb7e31de99e1bee1e928b54602cf6ac8219c54c2f03199b807cf3e27cabeecf4c6feafd9882bf87"], 0x1a) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6fa, 0x400000) [ 1085.193063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1085.200336] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x424100, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x33, "f508be56d311403405b011b73a546663bcc095e4d3f3b3dde7fe7572c566654f24602ad552606f4ab36bce59ea2a28f7bd7267ef"}, &(0x7f0000000080)=0x3c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0x6) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:35 executing program 5 (fault-call:3 fault-nth:60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1085.350129] protocol 88fb is buggy, dev hsr_slave_0 [ 1085.350168] protocol 88fb is buggy, dev hsr_slave_1 [ 1085.356111] protocol 88fb is buggy, dev hsr_slave_1 [ 1085.356200] protocol 88fb is buggy, dev hsr_slave_0 [ 1085.366310] protocol 88fb is buggy, dev hsr_slave_1 [ 1085.378992] FAULT_INJECTION: forcing a failure. [ 1085.378992] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.393656] CPU: 0 PID: 6610 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 1085.400713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.410162] Call Trace: [ 1085.412765] dump_stack+0x138/0x197 [ 1085.412782] should_fail.cold+0x10f/0x159 [ 1085.412796] should_failslab+0xdb/0x130 [ 1085.412808] kmem_cache_alloc+0x2d7/0x780 [ 1085.412825] taskstats_exit+0x619/0xbd0 [ 1085.412835] ? taskstats_user_cmd+0xd10/0xd10 [ 1085.412846] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1085.420970] ? acct_collect+0x637/0x800 [ 1085.420983] do_exit+0x368/0x2c10 [ 1085.420994] ? SOFTIRQ_verbose+0x10/0x10 [ 1085.421011] ? find_held_lock+0x35/0x130 [ 1085.421020] ? mm_update_next_owner+0x5d0/0x5d0 [ 1085.421038] do_group_exit+0x111/0x330 [ 1085.421050] get_signal+0x381/0x1cd0 [ 1085.421070] do_signal+0x86/0x19a0 [ 1085.421080] ? create_new_namespaces+0x3e9/0x720 [ 1085.429182] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1085.429191] ? create_new_namespaces+0x3e9/0x720 [ 1085.429201] ? setup_sigcontext+0x7d0/0x7d0 [ 1085.429212] ? kmem_cache_free+0x244/0x2b0 [ 1085.429223] ? create_new_namespaces+0x3b1/0x720 [ 1085.429236] ? unshare_nsproxy_namespaces+0xdd/0x1e0 [ 1085.429247] ? SyS_unshare+0x5a0/0x7e0 [ 1085.511077] ? exit_to_usermode_loop+0x3d/0x220 [ 1085.515754] exit_to_usermode_loop+0x15c/0x220 [ 1085.520443] do_syscall_64+0x4bc/0x640 [ 1085.524427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1085.529283] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1085.534474] RIP: 0033:0x459879 [ 1085.537649] RSP: 002b:00007f8da2570c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 07:10:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x10000019e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)=ANY=[@ANYBLOB="458242c70c0517e724af9441c9fc0e93b18c18ef5889db0a170a2a78c0bccb9f340bc9f8d983edbaacaafbe9d1e6775ab337ff76390c7f356fd79bb089d8f80e4996e1bd2497c91f2c8ff8800ab2994d1b016c71adda5774f8eb9bb8e132b7ff5ccec78ec7784e894620", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x3) 07:10:35 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2000, 0x0) kcmp(r0, r1, 0x7, r2, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9b3, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) close(r5) [ 1085.545349] RAX: fffffffffffffffc RBX: 00007f8da2570c90 RCX: 0000000000459879 [ 1085.552609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1085.559868] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1085.567136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8da25716d4 [ 1085.574465] R13: 00000000004c9041 R14: 00000000004e0210 R15: 0000000000000007 [ 1085.587686] FAULT_INJECTION: forcing a failure. [ 1085.587686] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.609994] CPU: 1 PID: 6649 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1085.617069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.626578] Call Trace: [ 1085.626601] dump_stack+0x138/0x197 [ 1085.626625] should_fail.cold+0x10f/0x159 [ 1085.626645] should_failslab+0xdb/0x130 [ 1085.626663] kmem_cache_alloc_node_trace+0x280/0x770 [ 1085.646177] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1085.651675] __kmalloc_node_track_caller+0x3d/0x80 [ 1085.656608] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1085.661285] __alloc_skb+0xcf/0x500 [ 1085.664972] ? skb_scrub_packet+0x4b0/0x4b0 [ 1085.669431] ? netlink_has_listeners+0x20a/0x330 [ 1085.674202] kobject_uevent_env+0x781/0xc23 [ 1085.678520] ? wait_for_completion+0x420/0x420 [ 1085.683302] kobject_uevent+0x20/0x26 [ 1085.687101] device_del+0x65c/0xaa0 [ 1085.690871] ? __device_links_no_driver+0x220/0x220 [ 1085.695901] ? mutex_unlock+0xd/0x10 [ 1085.699609] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1085.704888] netdev_unregister_kobject+0x184/0x1d0 [ 1085.709821] rollback_registered_many+0x694/0xb60 [ 1085.714683] ? tun_detach_all+0x730/0x730 [ 1085.718851] ? netdev_info+0xf0/0xf0 [ 1085.722870] ? queue_delayed_work_on+0xc3/0x1e0 [ 1085.727535] ? trace_hardirqs_on_caller+0x400/0x590 [ 1085.732549] rollback_registered+0xdd/0x180 [ 1085.736863] ? rollback_registered_many+0xb60/0xb60 [ 1085.741873] ? linkwatch_schedule_work+0xf8/0x130 [ 1085.746705] unregister_netdevice_queue+0x1ae/0x230 [ 1085.751710] __tun_detach+0xa86/0xce0 [ 1085.755509] ? locks_remove_file+0x2d0/0x420 [ 1085.759916] ? __tun_detach+0xce0/0xce0 [ 1085.763892] tun_chr_close+0x46/0x60 [ 1085.767605] __fput+0x275/0x7a0 [ 1085.770890] ____fput+0x16/0x20 [ 1085.774252] task_work_run+0x114/0x190 [ 1085.778148] exit_to_usermode_loop+0x1da/0x220 [ 1085.782751] do_syscall_64+0x4bc/0x640 [ 1085.786630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1085.791482] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1085.796672] RIP: 0033:0x459879 [ 1085.799850] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:10:35 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000200), &(0x7f0000000280)=0x10) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1085.807572] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1085.814853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1085.822142] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1085.829415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1085.836675] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 [ 1085.844317] protocol 88fb is buggy, dev hsr_slave_0 07:10:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x9, 0x200, 0x4, 0x5}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x3b}, 0x28, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101801, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) close(r2) 07:10:35 executing program 5 (fault-call:3 fault-nth:61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:35 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x1, {r1, r2/1000+10000}, {0x5, 0x3, 0x2, 0x2, 0x7, 0x5, "e7f4ec78"}, 0xc6c, 0x4, @planes=&(0x7f0000000080)={0x5, 0x1000, @fd=r0}, 0x4}) [ 1085.993354] FAULT_INJECTION: forcing a failure. [ 1085.993354] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.008569] CPU: 0 PID: 6670 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1086.015632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.025098] Call Trace: [ 1086.027697] dump_stack+0x138/0x197 [ 1086.031343] should_fail.cold+0x10f/0x159 [ 1086.035510] should_failslab+0xdb/0x130 [ 1086.039537] kmem_cache_alloc_node+0x287/0x780 [ 1086.044136] __alloc_skb+0x9c/0x500 [ 1086.047768] ? skb_scrub_packet+0x4b0/0x4b0 [ 1086.052229] ? netlink_has_listeners+0x20a/0x330 [ 1086.057000] kobject_uevent_env+0x781/0xc23 [ 1086.061332] ? wait_for_completion+0x420/0x420 [ 1086.066017] kobject_uevent+0x20/0x26 [ 1086.069836] device_del+0x65c/0xaa0 [ 1086.073455] ? __device_links_no_driver+0x220/0x220 [ 1086.078469] ? mutex_unlock+0xd/0x10 [ 1086.082176] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1086.087752] netdev_unregister_kobject+0x184/0x1d0 [ 1086.092802] rollback_registered_many+0x694/0xb60 [ 1086.097854] ? tun_detach_all+0x730/0x730 [ 1086.102165] ? netdev_info+0xf0/0xf0 [ 1086.105900] ? queue_delayed_work_on+0xc3/0x1e0 [ 1086.110592] ? trace_hardirqs_on_caller+0x400/0x590 [ 1086.115621] rollback_registered+0xdd/0x180 [ 1086.119942] ? rollback_registered_many+0xb60/0xb60 [ 1086.125588] ? linkwatch_schedule_work+0xf8/0x130 [ 1086.130440] unregister_netdevice_queue+0x1ae/0x230 [ 1086.135463] __tun_detach+0xa86/0xce0 [ 1086.139268] ? locks_remove_file+0x2d0/0x420 [ 1086.143829] ? __tun_detach+0xce0/0xce0 [ 1086.147798] tun_chr_close+0x46/0x60 [ 1086.151508] __fput+0x275/0x7a0 [ 1086.154796] ____fput+0x16/0x20 [ 1086.158085] task_work_run+0x114/0x190 [ 1086.161990] exit_to_usermode_loop+0x1da/0x220 [ 1086.166573] do_syscall_64+0x4bc/0x640 [ 1086.170450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1086.175315] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1086.180501] RIP: 0033:0x459879 [ 1086.183702] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:10:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb6", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) [ 1086.191488] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1086.198833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1086.206107] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1086.213382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1086.220674] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x181000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:36 executing program 5 (fault-call:3 fault-nth:62): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10003, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x8}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0xffffffffffffffff}, &(0x7f0000000140)=0x32a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x78, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="076304400100000007630440030000000b630000096310400300000000000000000000000000000000634040000000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/205], @ANYBLOB="cd0000000000000002000000000000001a000000000000008561646600000000030000000000000000000000000000002900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000480000009f820000"], @ANYBLOB="106308400000000000000000"], 0xa8, 0x0, &(0x7f0000000480)="a8101fa27e477488dfecbdfc566444bd99ffa817f0152c24938956bf149cd15142974510b100c7e95649e764cb6107571446354e2a574129e1a0fd648c85521c5f01e1f849d76669b5b7bc321fbc92abbde9fd8db63b91a0f01d5eaedbabf55728de5e6a315fc36e0f6a308c5c1393391501075a9ae8460c06e59a8b87d0ec968c004520473d671d0f68ed034387a2f0e46f357a5f038ed7936daed9b6e1501909a615a920ae9f0d"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) ioctl$KDMKTONE(r1, 0x4b30, 0x20f127a8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x5, 0x20}, 0xc) [ 1086.394764] FAULT_INJECTION: forcing a failure. [ 1086.394764] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.419977] CPU: 0 PID: 6690 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1086.427054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.436520] Call Trace: [ 1086.439117] dump_stack+0x138/0x197 [ 1086.442753] should_fail.cold+0x10f/0x159 [ 1086.446910] should_failslab+0xdb/0x130 [ 1086.450952] kmem_cache_alloc_node_trace+0x280/0x770 [ 1086.456077] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1086.461553] __kmalloc_node_track_caller+0x3d/0x80 [ 1086.466493] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1086.471187] __alloc_skb+0xcf/0x500 [ 1086.474920] ? skb_scrub_packet+0x4b0/0x4b0 [ 1086.479245] ? netlink_has_listeners+0x20a/0x330 [ 1086.484007] kobject_uevent_env+0x781/0xc23 [ 1086.488330] ? wait_for_completion+0x420/0x420 [ 1086.492925] kobject_uevent+0x20/0x26 [ 1086.496730] device_del+0x65c/0xaa0 [ 1086.500461] ? __device_links_no_driver+0x220/0x220 [ 1086.505507] ? mutex_unlock+0xd/0x10 [ 1086.509220] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1086.514504] netdev_unregister_kobject+0x184/0x1d0 [ 1086.519447] rollback_registered_many+0x694/0xb60 [ 1086.524292] ? tun_detach_all+0x730/0x730 [ 1086.528442] ? netdev_info+0xf0/0xf0 [ 1086.532170] ? queue_delayed_work_on+0xc3/0x1e0 [ 1086.536842] ? trace_hardirqs_on_caller+0x400/0x590 [ 1086.541952] rollback_registered+0xdd/0x180 [ 1086.546276] ? rollback_registered_many+0xb60/0xb60 [ 1086.551302] ? linkwatch_schedule_work+0xf8/0x130 [ 1086.556156] unregister_netdevice_queue+0x1ae/0x230 [ 1086.561180] __tun_detach+0xa86/0xce0 [ 1086.564987] ? locks_remove_file+0x2d0/0x420 [ 1086.569406] ? __tun_detach+0xce0/0xce0 [ 1086.573384] tun_chr_close+0x46/0x60 [ 1086.577802] __fput+0x275/0x7a0 [ 1086.581097] ____fput+0x16/0x20 [ 1086.584380] task_work_run+0x114/0x190 [ 1086.588281] exit_to_usermode_loop+0x1da/0x220 [ 1086.592872] do_syscall_64+0x4bc/0x640 [ 1086.596774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1086.601782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1086.607012] RIP: 0033:0x459879 [ 1086.610212] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1086.617927] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1086.625200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1086.632471] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:10:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:36 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8004, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) close(r0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000240)={r2, 0x1, &(0x7f0000000140)=[0x1ff], &(0x7f0000000180)=[0xffffffff7fffffff, 0x1], 0x40, 0x4, 0x7, &(0x7f00000001c0)=[0x6cd, 0x8001, 0x2, 0xfffffffffffffffa], &(0x7f0000000200)=[0x3, 0x0, 0x6]}) [ 1086.639744] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1086.647014] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:36 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0xfffffffffffffe0d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000200)={0x0, @speck128, 0x0, "6b963e6055c97207"}) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:36 executing program 5 (fault-call:3 fault-nth:63): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) write$char_usb(r1, &(0x7f0000000080)="c0210ece9ddd08619766addad1eacfc0c7b40f5d138ce0a76a681677e2356747574b49c03a51dc308e06bf1d921ca930486067abbd907d136f61a2a177e1f5f6fb2340894dd5839d90419d59b2396c1f6e", 0x51) [ 1086.839717] FAULT_INJECTION: forcing a failure. [ 1086.839717] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.851683] CPU: 0 PID: 6720 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1086.858729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.868098] Call Trace: [ 1086.870698] dump_stack+0x138/0x197 [ 1086.874341] should_fail.cold+0x10f/0x159 [ 1086.878502] should_failslab+0xdb/0x130 [ 1086.882709] kmem_cache_alloc_node_trace+0x280/0x770 [ 1086.887824] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1086.893533] __kmalloc_node_track_caller+0x3d/0x80 [ 1086.893549] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1086.893562] __alloc_skb+0xcf/0x500 [ 1086.893572] ? skb_scrub_packet+0x4b0/0x4b0 [ 1086.893585] ? netlink_has_listeners+0x20a/0x330 [ 1086.893601] kobject_uevent_env+0x781/0xc23 [ 1086.893610] ? wait_for_completion+0x420/0x420 [ 1086.893630] kobject_uevent+0x20/0x26 [ 1086.893641] device_del+0x65c/0xaa0 [ 1086.893656] ? __device_links_no_driver+0x220/0x220 [ 1086.893664] ? mutex_unlock+0xd/0x10 [ 1086.893674] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1086.893690] netdev_unregister_kobject+0x184/0x1d0 [ 1086.893704] rollback_registered_many+0x694/0xb60 [ 1086.893716] ? tun_detach_all+0x730/0x730 [ 1086.893726] ? netdev_info+0xf0/0xf0 [ 1086.893739] ? queue_delayed_work_on+0xc3/0x1e0 [ 1086.893753] ? trace_hardirqs_on_caller+0x400/0x590 [ 1086.893767] rollback_registered+0xdd/0x180 [ 1086.893777] ? rollback_registered_many+0xb60/0xb60 [ 1086.893788] ? linkwatch_schedule_work+0xf8/0x130 [ 1086.893801] unregister_netdevice_queue+0x1ae/0x230 [ 1086.893820] __tun_detach+0xa86/0xce0 [ 1086.996823] ? locks_remove_file+0x2d0/0x420 [ 1087.001243] ? __tun_detach+0xce0/0xce0 [ 1087.005218] tun_chr_close+0x46/0x60 [ 1087.008936] __fput+0x275/0x7a0 [ 1087.012225] ____fput+0x16/0x20 [ 1087.016032] task_work_run+0x114/0x190 [ 1087.019932] exit_to_usermode_loop+0x1da/0x220 [ 1087.024523] do_syscall_64+0x4bc/0x640 [ 1087.028417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1087.033274] entry_SYSCALL_64_after_hwframe+0x42/0xb7 07:10:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb6", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1087.038458] RIP: 0033:0x459879 [ 1087.042166] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1087.049878] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1087.057146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1087.064415] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1087.071683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1087.079063] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:36 executing program 5 (fault-call:3 fault-nth:64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x3, r2}) close(r0) 07:10:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x88100, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xfb, "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"}, &(0x7f00000001c0)=0x103) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x8, 0xffffffffffffc66c, 0x2, 0x8, 0x5973, 0xff, 0x10000000000000, {r3, @in={{0x2, 0x4e21, @empty}}, 0x64, 0x5, 0x6, 0x0, 0x3}}, &(0x7f0000000340)=0xb0) [ 1087.234401] FAULT_INJECTION: forcing a failure. [ 1087.234401] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.261732] CPU: 0 PID: 6757 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1087.268824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.278193] Call Trace: [ 1087.280798] dump_stack+0x138/0x197 [ 1087.284486] should_fail.cold+0x10f/0x159 [ 1087.288641] should_failslab+0xdb/0x130 [ 1087.292627] kmem_cache_alloc_node+0x287/0x780 [ 1087.297229] __alloc_skb+0x9c/0x500 [ 1087.300856] ? skb_scrub_packet+0x4b0/0x4b0 [ 1087.305178] ? netlink_has_listeners+0x20a/0x330 [ 1087.309950] kobject_uevent_env+0x781/0xc23 [ 1087.314280] ? wait_for_completion+0x420/0x420 [ 1087.318881] kobject_uevent+0x20/0x26 [ 1087.322686] device_del+0x65c/0xaa0 [ 1087.326317] ? __device_links_no_driver+0x220/0x220 [ 1087.331335] ? mutex_unlock+0xd/0x10 [ 1087.335048] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1087.340331] netdev_unregister_kobject+0x184/0x1d0 [ 1087.345268] rollback_registered_many+0x694/0xb60 [ 1087.350131] ? tun_detach_all+0x730/0x730 [ 1087.354296] ? netdev_info+0xf0/0xf0 [ 1087.358018] ? queue_delayed_work_on+0xc3/0x1e0 [ 1087.362712] ? trace_hardirqs_on_caller+0x400/0x590 [ 1087.367748] rollback_registered+0xdd/0x180 [ 1087.372082] ? rollback_registered_many+0xb60/0xb60 [ 1087.377199] ? linkwatch_schedule_work+0xf8/0x130 [ 1087.382051] unregister_netdevice_queue+0x1ae/0x230 [ 1087.387076] __tun_detach+0xa86/0xce0 [ 1087.390972] ? locks_remove_file+0x2d0/0x420 [ 1087.395389] ? __tun_detach+0xce0/0xce0 [ 1087.399367] tun_chr_close+0x46/0x60 [ 1087.403087] __fput+0x275/0x7a0 [ 1087.406379] ____fput+0x16/0x20 [ 1087.409668] task_work_run+0x114/0x190 [ 1087.413586] exit_to_usermode_loop+0x1da/0x220 [ 1087.418181] do_syscall_64+0x4bc/0x640 [ 1087.422083] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1087.426946] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1087.432145] RIP: 0033:0x459879 [ 1087.435336] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1087.443050] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1087.450326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1087.457601] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1087.464876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1087.472152] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x0) close(r0) [ 1087.486493] QAT: Invalid ioctl 07:10:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:37 executing program 5 (fault-call:3 fault-nth:65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1087.609243] FAULT_INJECTION: forcing a failure. [ 1087.609243] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.623943] CPU: 1 PID: 6775 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 1087.631010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.640377] Call Trace: [ 1087.642979] dump_stack+0x138/0x197 [ 1087.646623] should_fail.cold+0x10f/0x159 [ 1087.650782] should_failslab+0xdb/0x130 [ 1087.654761] kmem_cache_alloc_node+0x287/0x780 07:10:37 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1087.659351] __alloc_skb+0x9c/0x500 [ 1087.663015] ? skb_scrub_packet+0x4b0/0x4b0 [ 1087.667369] ? netlink_has_listeners+0x20a/0x330 [ 1087.672141] kobject_uevent_env+0x781/0xc23 [ 1087.676477] ? wait_for_completion+0x420/0x420 [ 1087.681105] kobject_uevent+0x20/0x26 [ 1087.681118] device_del+0x65c/0xaa0 07:10:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x30e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x41, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$netrom(r2, &(0x7f00000002c0)="a5e151c7df50531c4bd00facf7de50607900731cd5609619abed032d2369bd11a6c5f18bb3b86f37fd3d34f05774ff219e0cb73a82eed77d3b87e3235feb30c494626ebee42ecbb76f7e7890d2c4f890ca90e327fea9ee83be012e5d8a5d0309a8f223fed40d96e0720298dd42f0d00c239e9d8ef3ff2a8128", 0x79, 0x800, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000280)) unshare(0x40000000) bind$isdn_base(r3, &(0x7f0000000200)={0x22, 0x2, 0xffffffff, 0x6, 0x4}, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001440)=ANY=[@ANYBLOB="a513e3bf302ea0d1410af8d443309c1afdb205366dcf4da1afb0daf8d1e9050710f9c75f85a64518d5dd99c0cdd8d4959e83f96997127439c946486072b4c9fba27e13b95b793deddbb8b8212ca22d1ba9759e871bbd0f2670e63a8c2bcc434fea11cabaf570e9a5a6322b0c76471739f976e8d0c775abf1349e0051a4c740b2740e97e67865f7d444bf18f8e58131757df80eb96a3ac6fc89f00d0a", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r3, 0x1) 07:10:37 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x200, 0x20, 0x5, 0x9ed}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=0x0, &(0x7f00000002c0)=0x4) r3 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000001640)=""/152) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x1cbd1da9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1abd}}, 0x993b, 0x890, 0x4, 0x9, 0x10}, &(0x7f0000001480)=0x98) sendmsg$inet_sctp(r0, &(0x7f0000001600)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x4, @rand_addr="1828fc5793ff39d997417559140f201c", 0xfffffffffffff801}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="c6c71c9edc39f8a029c9ba1d6bc7e93a24fa0dd9a6641a9cbbd8974a22", 0x1d}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000140)="2ebed6d3e4b34e036213ea744a5718b3d1cad75c472a0d731612bdd2a6592d6cbcc0530052cf12e9c6b8751b8f8f6ea389dae837d48063557cf9724ebe2a290c15f0c2110921cd496c628b2e6fd466cde75c", 0x52}], 0x3, &(0x7f00000014c0)=[@init={0x18, 0x84, 0x0, {0x0, 0xffffffffffff517e, 0x7ff, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0xf592fa748796856b, 0x1, 0x100000000, 0x9f3, 0x5, 0x9, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8000, 0x81b, 0x5, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7fff}}, @sndinfo={0x20, 0x84, 0x2, {0xc6, 0x0, 0x8000, 0x3, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="c9d46fed169fdeed4affc17d5d0c3be8"}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x9, 0x0, 0xea, 0x6, 0x3, 0x2, 0x5, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x110, 0xf9838da3da29b8bd}, 0x2404c000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r7 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x27, 0x402) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x4}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x1}], 0x2c) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) close(r6) 07:10:37 executing program 5 (fault-call:3 fault-nth:66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1087.681132] ? __device_links_no_driver+0x220/0x220 [ 1087.681141] ? mutex_unlock+0xd/0x10 [ 1087.681151] ? pm_runtime_set_memalloc_noio+0xf9/0x160 [ 1087.681167] netdev_unregister_kobject+0x184/0x1d0 [ 1087.681182] rollback_registered_many+0x694/0xb60 [ 1087.681194] ? tun_detach_all+0x730/0x730 [ 1087.681204] ? netdev_info+0xf0/0xf0 [ 1087.681217] ? queue_delayed_work_on+0xc3/0x1e0 [ 1087.681231] ? trace_hardirqs_on_caller+0x400/0x590 [ 1087.681244] rollback_registered+0xdd/0x180 [ 1087.681255] ? rollback_registered_many+0xb60/0xb60 [ 1087.681266] ? linkwatch_schedule_work+0xf8/0x130 [ 1087.681281] unregister_netdevice_queue+0x1ae/0x230 [ 1087.681293] __tun_detach+0xa86/0xce0 [ 1087.681305] ? locks_remove_file+0x2d0/0x420 [ 1087.681321] ? __tun_detach+0xce0/0xce0 [ 1087.681329] tun_chr_close+0x46/0x60 [ 1087.681341] __fput+0x275/0x7a0 [ 1087.681359] ____fput+0x16/0x20 [ 1087.681370] task_work_run+0x114/0x190 [ 1087.681388] exit_to_usermode_loop+0x1da/0x220 [ 1087.681402] do_syscall_64+0x4bc/0x640 [ 1087.681416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1087.681433] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1087.681442] RIP: 0033:0x459879 [ 1087.681448] RSP: 002b:00007f2a977fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:10:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb6", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x8, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x3f, 0x10000, 0x9}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x771c7e0632ee6d64) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffbff, 0x20800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) [ 1087.681459] RAX: 0000000000000000 RBX: 00007f2a977fdc90 RCX: 0000000000459879 [ 1087.681465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1087.681471] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1087.681477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a977fe6d4 [ 1087.681482] R13: 00000000004f9012 R14: 00000000004d1b10 R15: 0000000000000004 07:10:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x7fffffff, 0x4) close(r0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 07:10:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0xee3e01107d8f4961, 0x800) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x64cf, 0x8000) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081ff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) 07:10:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x10002) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xcd01, 0x6, 0xfffffffffffffffe, 0xd662, 0xc00, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x363, 0x204000000000000, 0x1, 0x6, 0xfff}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1088.273160] IPVS: ftp: loaded support on port[0] = 21 07:10:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) 07:10:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff31, 0x200007fc, &(0x7f0000000200)={0x2, 0x0, @local}, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) [ 1088.420164] IPVS: ftp: loaded support on port[0] = 21 [ 1088.634697] IPVS: ftp: loaded support on port[0] = 21 07:10:38 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r1, &(0x7f0000000500)="c5296117f93c8c36920c0e32347932b30538e9ad20033e9c9dd90b"}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)=""/114, &(0x7f0000000200)=0x72) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(r0, 0x0, 0x8000, 0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) getsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000300), &(0x7f0000000480)=0x4) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000a07e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009197000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000000)={0x960}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x28a}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000640)={r7, 0x1f, "7a78070d4f833b5d2048d9d1acee645f732beaaa8a43ae17d615f0dc95c6a8"}, &(0x7f0000000680)=0x27) shutdown(0xffffffffffffffff, 0x1) 07:10:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000200)={0x20, 0xdd73b198b7ef5ac, 0x2, {0x81, 0x4, 0x6, 0x6}}, 0x20) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)=ANY=[@ANYBLOB='N0xffffffffffffffff}, 0x1, {0xa, 0x4e24, 0x6, @local, 0xffffffffffffffff}}}, 0x38) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18) [ 1088.791435] IPVS: ftp: loaded support on port[0] = 21 07:10:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x401, 0x1, 0x57a, 0x1}, {0xf1, 0x1000, 0x8001, 0x3}, {0x6, 0x2, 0xffff, 0x7fffffff}]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x40, 0x7, 0x2, 0xffffffff80000000}, {0x55aa, 0x8, 0x8000}]}) close(r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x7, 0x5, 0x80, 0x20, 0x6}) 07:10:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, [], [{0xffffffff7fffffff, 0x6, 0x4, 0x8, 0x3, 0x10001}, {0x9, 0x7, 0x80000000, 0x100000000, 0xcd, 0x10000}], [[]]}) close(r0) poll(&(0x7f0000000040)=[{r0, 0x400}, {r0, 0x200}, {r0, 0x4}, {r0, 0x2042}], 0x4, 0x3) 07:10:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x100) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'tunl0\x00', 0x100000000}) close(r0) 07:10:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x00', 0x1}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="260000003701000000000000000000780200000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x26) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7, 0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) close(r0) r4 = socket(0x1, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x80, 0x1ff, 0xfffffffffffffffb}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)={r5, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="0e00bf1765009eea9b5456f787378d30ca110b2c3e21fe00dee1f270ff2490813c2fe8fd9003d4730b6bf3cd26f9c2b489ce2ec43a608e0503a7605b6ce1eb7b116ed5d47d7f130e5724a13121fe8c747f0db0e4f4477af3a95d295898c9c514d5579f2518177c2af72964a403ac20"], &(0x7f0000000100)=0x16) 07:10:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r0) 07:10:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x73969fe10938b53c}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) fcntl$getown(r0, 0x9) 07:10:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) fcntl$addseals(r0, 0x409, 0x8) 07:10:39 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1089.510137] net_ratelimit: 17 callbacks suppressed [ 1089.510143] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.510180] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.515242] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.530469] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.535546] protocol 88fb is buggy, dev hsr_slave_1 07:10:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup2(r0, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0xfffffef4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:39 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000200)=[0x626, 0x3f]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xe0000000000, r3}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000840)=""/171) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) accept$packet(r1, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) fstat(r0, &(0x7f0000000540)) getuid() syz_mount_image$vfat(&(0x7f00000006c0)='vfat\x00', &(0x7f0000000280)='.\x00', 0x5, 0x1, &(0x7f0000000680)=[{&(0x7f0000000f00)="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", 0x2bf, 0x2}], 0x0, &(0x7f0000000740)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe2}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt='shortname=winnt'}, {@shortname_winnt='shortname=winnt'}, {@rodir='rodir'}]}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x40, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x77a9fc9e, 0x8140) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20001) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') unshare(0x4020000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1358647eb6eeb168, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'ip6gre0\x00', 0x4000}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000200)=0x4) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.u'}, 0x15) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) close(r0) 07:10:39 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1b, 0x40002) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x80000000, 0x2) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00\x06\xf7\x02\xb0\x00\x80\x00@\x00\x00\x00\xed\xff\xff\xff', 0x1000}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) close(0xffffffffffffffff) 07:10:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xf1, 0x100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xbf07}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1089.990119] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.995375] protocol 88fb is buggy, dev hsr_slave_1 07:10:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x01\x00\x00\x00\x00\x00H\x00\x00\xe3,\xe9\x8a', 0x200}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) close(r0) 07:10:40 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb3"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x100, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x7da, &(0x7f00000000c0)=0x4) close(r0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000100)=0x9) 07:10:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1127], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) writev(r0, &(0x7f0000000100), 0x0) close(r0) 07:10:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0)=0x40, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x9) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x0, 0x0, 0x1000, "c346cc3145e2148fd93410d81d9e2b46de5e2ea373bc09a8319447349c218b80f059828b3a9bcb804bfeb15306098a6ccad5cc163fa7ab965cc71581ff336b", 0x36}, 0x60) close(r0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 1090.790120] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.795285] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.800463] protocol 88fb is buggy, dev hsr_slave_0 07:10:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x10901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1090.945308] IPVS: ftp: loaded support on port[0] = 21 07:10:40 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb3"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1091.147406] IPVS: ftp: loaded support on port[0] = 21 [ 1091.338918] IPVS: ftp: loaded support on port[0] = 21 07:10:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="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"], @ANYBLOB="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"/1139], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1, {}, 0x5, 0x3}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000480)={0x0, @bt={0x8, 0x3ff, 0xc48d795fbf909b9b, 0x1, 0xe5e, 0x3, 0x0, 0x940, 0x0, 0x6d9, 0x5, 0x0, 0x9, 0x4, 0x10, 0x4}}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x960}) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6, 0x2, 0x5c}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x5, 0x80000000, 0x8, 0x0, 0xffffffff, 0x24, 0x321, 0x7e12, r6}, 0x20) shutdown(0xffffffffffffffff, 0x1) 07:10:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="01c4c0bf3ce0c46dd08ab300002bf0ffff0000fffffffff00000000000f7469e0188e8c100"/50]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x220000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1091.580602] IPVS: ftp: loaded support on port[0] = 21 07:10:41 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) faccessat(r1, &(0x7f00000004c0)='./file0\x00', 0x100000140, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) prctl$PR_GET_SECUREBITS(0x1b) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0xa0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000840)=ANY=[], 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x20000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200)=0x4, 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000440)) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0xd8) ioctl$TIOCCBRK(r1, 0x5428) 07:10:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000480)=0x4, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8860}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr="6e02c1a49267b15439e8d6bdf76b38e7", 0x4}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60cf729f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4501}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15b8ae98}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ef8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1268}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0xc14fcfec2aaa9f0}, 0x4000015) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x40000, 0x0) 07:10:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10681, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8, 0x12) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:41 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0xfffffffffffffffd, r1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x400, 0x2, 0x4db062d3}}) 07:10:41 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb3"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x953ef25c8c7c1d6}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:41 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x9b47a77c86ab6f51, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000380)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x420002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r2 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0x8, 0x1ff}, 0x1, 0x2, 0x8, {0x14000, 0x7}, 0x9, 0x9}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200201}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x8, 0x4, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf88}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x62}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) close(r1) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{0x0, 0x7530}, {r4, r5/1000+30000}}) 07:10:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) 07:10:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x400000000004) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x100) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) fchmod(r2, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00\x00\x00\x00\x008\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 07:10:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) close(r0) 07:10:42 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x10000, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x1c, "4fba5922631a80ac74efc86e6cd93d3034568ab4775294723b773765d2b5c785", 0x3, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080)) r3 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="942ccfee0766ed9973a27fa1c816d5e0d14a46ceed87566c3afb604c4e4587562c8415590c717d3cf77d3e1337b62735d1270423239133456fb2f5eff6842835b8b929269ea5cc84ec83c16fc01921934813b6bb111ee96ada5c20be111b0d373f38166c51bd920b26e2c30e81514784c04d49c58ef2a6ac42a1364840e07aa2f401612f68c0932a1c4214a34537ab7bec07ec", 0x93, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r3, r4) 07:10:42 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x1) socketpair(0xb, 0x80000, 0xff00000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@broadcast}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb0000000000000000000400000000001000000000000000000000000004000400170000001f0000da000700003f00000000000000030000000000120002000b00050000000108000000000000"], 0x88}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400000000000117, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/132, &(0x7f0000000180)=0x84) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x422400, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r6}) close(0xffffffffffffffff) 07:10:42 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000740)={'nat\x00', 0x0, 0x3, 0x70, [], 0x1, &(0x7f0000000580)=[{}], &(0x7f00000005c0)=""/112}, &(0x7f0000000640)=0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0xfffffffffffffe70) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) connect$vsock_stream(r0, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c633b00000000000029187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000b0f80d5de7c1530f1ce1ea29f124e50176d12b2b3ca5f9f4e1362d361210f8b153db76c2eb9896c2813457e1b0a265d8ac2e1a31dacfdc05ae5791ff107b2176aba94404e69b5a4f8ec68425357a2b"], @ANYBLOB="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"/1139], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000680)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)) shutdown(r1, 0x1) 07:10:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:42 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21e"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d2b00000000000000f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup(r0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000140)={0x4, 0x8, &(0x7f00000000c0)="4fafed972346df9e4e59b36afdcf9700ac589f8d91488f745d27d66250c14fb604e30707e8d161b11662956045adc3f59084888d7f4b739c9b1cdcc151ebc3780dc3d1a0153bfbca6dd06892274f8a918d212a5b1a596cfe04cfde160b4709486c017f8d8ef979469a02d1659208", {0x40, 0x5, 0x32314d4e, 0x8, 0x8000000, 0xfffffffffffffffe, 0x8, 0xffff}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x300}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x20010, r0, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000180)=0x1) r2 = msgget(0x1, 0xc0) msgrcv(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000100000000000000000000000000000000000000000000000000000000000000000000000280000000000"], 0x81, 0x3, 0x800) write$FUSE_OPEN(r1, &(0x7f00000002c0)={0x20, 0xfffffffffffffffe, 0x8, {0x0, 0x1}}, 0x20) close(r1) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4000000000, 0x1) 07:10:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1093.119969] audit: type=1400 audit(1567494642.843:385): avc: denied { map } for pid=7076 comm="syz-executor.3" path="/dev/net/tun" dev="devtmpfs" ino=963 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tun_tap_device_t:s0 tclass=chr_file permissive=1 07:10:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:43 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb3"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) close(r0) fstatfs(r0, &(0x7f0000000040)=""/207) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) 07:10:43 executing program 5: syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = semget$private(0x0, 0x1, 0x404) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000040)=""/80) close(r0) 07:10:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[], 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:43 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21e"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) get_thread_area(&(0x7f0000000080)={0x3, 0x20000800, 0xe06f844089c45e7c, 0x6, 0x3, 0x7, 0x3f, 0x2, 0x9}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) close(r0) 07:10:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x8202) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default]}, 0x48) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x301000, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000080)) 07:10:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x5, 0x88000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(0x0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:43 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb3"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x80000) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) 07:10:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCSBRK(r1, 0x5427) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 07:10:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1b) close(r0) inotify_init1(0x800) 07:10:44 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21e"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffff) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000240)={0x0, 0x80000000}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x3, 0x1, [0x7]}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x1e119987, @loopback}}, 0x1, 0x101, 0x7, 0x100000000, 0xffffffffffffff00}, &(0x7f0000000200)=0x98) 07:10:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x48100, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x800, 0x1000, 0x100, 0x7, 0x0, 0x9, 0x400, 0x4, 0x7ff, 0x3, 0x7, 0x200, 0x0, 0x1, 0x10001, 0x6, 0x65e, 0x5, 0x1, 0xffffffff80000001, 0x10000, 0xbed, 0xae, 0x0, 0x4, 0x4, 0x2, 0xd2, 0x2, 0x2, 0x9, 0x2, 0x1, 0x1f, 0x0, 0x8, 0x0, 0x0, 0x5, @perf_config_ext={0x84, 0x6}, 0x40, 0xffffffffffff814b, 0x9, 0x7, 0x3b81e3e4, 0x7ff, 0xc76e}, 0xffffffffffffffff, 0xf, r1, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) getpeername$packet(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000200)={0x100000000, 0x41495043, 0x200, 0x2, 0x2, @stepwise={{0x40, 0x3713}, {0x8, 0x521}, {0x8, 0x80000000}}}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43203f00f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289fdb77d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(0x0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1094.950114] net_ratelimit: 20 callbacks suppressed [ 1094.950120] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.960327] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.965443] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.970536] protocol 88fb is buggy, dev hsr_slave_1 07:10:44 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb3"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x23458cd31989fb77, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x17be864a7d7c28b2, r1) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000001c0)={0x9, 0x7}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x1, 0x101, 0x34, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r4, &(0x7f0000000140)=0x4) 07:10:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33d) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x61f, 0x5887, [], &(0x7f0000000080)=0x7ff}) close(r0) 07:10:45 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:45 executing program 4: r0 = socket$inet(0x2, 0x80800, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x3, @remote, 'ipddp0\x00'}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)=ANY=[@ANYBLOB="f8b98ef8ddcc55b53282409ca617ada437778a64bbdd2a772239e750d6d499ce87e1b4a67cbd4d65a0d2a3437a9b18f9cd71ad146f4649a3a24a7a5cddf11740fb623b505240bec6f587b0cc875a2e9d3902a7f1319907000014f0971b17f829971f38fd36cfcde7305b9cb996f87be223ee543771cbd4fe07b040a48bb958", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000002c0)={0xfffffff, 0x92, 0x1, [], &(0x7f0000000280)={0x0, 0x3, [], @string=&(0x7f0000000200)=0x100}}) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf250d000000d40001001c0002000800040009000000080001001500000008000200010000002c00020008000100180000000800c274f89581fc1e4c04000000000008000400400000000800020481ffffff0c0002000800040004000000380004001400010002004e207f0000010000000000000000200002000a004e21ffffffe1ff0100000000000000000000000000010900000044000400200001000a004e20000000600000000000000000000000000000000000000000200002000a004e230000010100000000000000000000000000000001cc000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) shutdown(r0, 0x1) 07:10:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) [ 1095.673638] IPVS: ftp: loaded support on port[0] = 21 07:10:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0xa3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x2}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x20080, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1095.750152] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.750193] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.755248] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.755348] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.755399] protocol 88fb is buggy, dev hsr_slave_1 07:10:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(0x0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) [ 1095.840876] IPVS: ftp: loaded support on port[0] = 21 07:10:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x8040800080804520, &(0x7f0000000080)) 07:10:45 executing program 3: 07:10:45 executing program 3: 07:10:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1095.983868] IPVS: ftp: loaded support on port[0] = 21 07:10:45 executing program 3: 07:10:45 executing program 3: 07:10:46 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) [ 1096.230323] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.249265] IPVS: ftp: loaded support on port[0] = 21 07:10:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x80, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x7) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:46 executing program 3: 07:10:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001480)=ANY=[@ANYBLOB="fddd4467052dbb8eee9b7d28db2266d57b12e320b62562cd151744555596e32c820199764e747d19e7a35797c68f359d86de6e4387abce5af1797c94225c77a90a36629dc54d88776d051ea246b046ac9d90366e3d67ef845bc73f15512a6ba3c5bf2b1c342ab9370e0fc955960f3c3d98472db35f4167683442b8154edec1cf2e17226eb2f483061d497ca0103b4bcfd73740f38ad222ee7405cc37b3fa49d7ce1e3aff8af3c3d109b81a7db342c3c82df49cfa6424b8747e451881dce3d5ecafbcc0050000002a8839733e6e", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x7, 0x1}]}, @enum={0x2, 0x8, 0x0, 0x6, 0x4, [{0x8, 0x80}, {0x0, 0x1}, {}, {0x3, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x4, 0x99bb}, {0x10, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x3ff}}, @volatile={0xd, 0x0, 0x0, 0x9, 0x6}]}, {0x0, [0x30, 0x30, 0x0, 0x2e, 0x0, 0x7f, 0x2e]}}, &(0x7f00000000c0)=""/110, 0xad, 0x6e}, 0x20) r3 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1000000000000082, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0xc54bc30b17d43bcc}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x6, 0x1000, 0x593f, 0x7ff, 0x2, 0x8, 0x1, 0x5fa3, 0xfffffffffffffedc, 0x5, 0x2, 0x5}) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8302, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x842400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 07:10:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:46 executing program 3: 07:10:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "81a177ef942b0281", "6b892860cf0c4d816ab49ced8f985e8d", "4380d23a", "552db54b90495929"}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vlan0\x00', @random="0f95fd0243bc"}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "0a8ab5271ad48dc6", "3856be9b9db79804bddad56adedc89a2", "993c76f1", "eaff998e97101ca3"}, 0x28) close(r0) 07:10:46 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 07:10:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) 07:10:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) 07:10:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) clone(0x80000000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 07:10:46 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:47 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f00000005c0)=0x1, 0x4) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) sync_file_range(r4, 0x6, 0xfff, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000480)={0x6, 0x118, 0xfa00, {{0x9, 0x80, "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", 0xdd, 0xc3ff, 0x162, 0x4e, 0x9, 0x80, 0x100000000, 0x1}, r5}}, 0x120) r6 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r6, 0xc0385720, &(0x7f0000000080)={0x1}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r5, 0x10000}}, 0x10) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:47 executing program 0: r0 = socket$inet(0x2, 0x800, 0x9) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x0, 0xe0000000000}) prctl$PR_GET_THP_DISABLE(0x2a) sendto$inet6(r2, &(0x7f0000000280)="f54cc079d230de616fb01757d0bb81e5fff41ff082bef1c32fb2716433628041a84cf17f338e17e4bf67bfbfec57bc017e16f6b7a63b7405ec85de51f1e2ff6cc72cebeb6194d3548bdeba0e4a9e4299de814e866e0e081d66ef47b85ebd21a0e1fa816ffa2c59d7742a11ded5c825ea04a06ab5627dcbfc9742b19bb0b8fc51cc50df917a97518657", 0x89, 0x400c040, &(0x7f0000000200)={0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, 0x1c) socket$inet(0x2, 0x6, 0x86) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000004c0)={0x1, 0x0, {0x80000001, 0x6, 0x0, 0x7, 0x1, 0x7, 0x3, 0x7}}) unshare(0x40000000) r4 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x0, 0x40000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)=ANY=[@ANYBLOB="5572b1960000a4610984c9ecdc4752bdd8a86457fb6449480083293ff6b6732976edfdb2a0d8c5b16a52664c49b2404fe2a1", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000ec0)=""/4096) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:47 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) fadvise64(r0, 0x0, 0xffffffffffffff7f, 0x0) 07:10:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x8) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc605e65bdbedba08}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) 07:10:47 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr="0094bd5d738c668fdcf74910b67e192c"}, 0x14) 07:10:47 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) shmctl$IPC_INFO(0x0, 0x3, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fwL-t\xfc\xaa\x12m\x03\xb9bM\xba\xf1\x02\xf9\xcc`rtA\xa6\x9d\x86\xfc\xd2\x8d\xb6L\xc7Nw\xf9UU#8\xa1\xb7\v\xa4yu\xbc\xb9FnRHm\xf7\xf62B\xf3\xc5\xdbi\x82\xe5\x13\xcd<=_\x88\t\x9c\xd5@\xb5\x8b\xdet\xd1\xa1\x040/eH\xba\xabL\x87Zvy\b4\tqT,[\x852\xc4Yf\xdc]\xcc\x18h\xf2\xbf)\x8eg\f\"-\x1a\x99\x0e\xc3\x1cg\xd2\x8f\xb8\xc9P\x05\xdb\xb6\x1a;]\xa2\xb3\xe1J\xba\xcbK\xe2x\xae9\x85\xc8F\xb4b\'', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) socket$kcm(0x11, 0x0, 0x300) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:10:47 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) shmctl$IPC_INFO(0x0, 0x3, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fwL-t\xfc\xaa\x12m\x03\xb9bM\xba\xf1\x02\xf9\xcc`rtA\xa6\x9d\x86\xfc\xd2\x8d\xb6L\xc7Nw\xf9UU#8\xa1\xb7\v\xa4yu\xbc\xb9FnRHm\xf7\xf62B\xf3\xc5\xdbi\x82\xe5\x13\xcd<=_\x88\t\x9c\xd5@\xb5\x8b\xdet\xd1\xa1\x040/eH\xba\xabL\x87Zvy\b4\tqT,[\x852\xc4Yf\xdc]\xcc\x18h\xf2\xbf)\x8eg\f\"-\x1a\x99\x0e\xc3\x1cg\xd2\x8f\xb8\xc9P\x05\xdb\xb6\x1a;]\xa2\xb3\xe1J\xba\xcbK\xe2x\xae9\x85\xc8F\xb4b\'', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) socket$kcm(0x11, 0x0, 0x300) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:10:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "6d1265505794810ee08456f6812d6e5392f4f95f6cb0eda355bc9d0bb0", [[], [], [], [], []]}, 0x595) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="bc", 0x1}], 0x1}}], 0x1, 0x0) 07:10:47 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac00"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:47 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000ec0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0x4}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @remote}, 0xb5}, @in6={0xa, 0x4e22, 0xb27, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}, @in={0x2, 0x4e22, @rand_addr=0x7}, @in6={0xa, 0x4e23, 0x9, @local, 0xffffffff7fffffff}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @local}], 0xb0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20044000) 07:10:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x205) close(r0) r1 = dup3(r0, r0, 0x80000) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000140)={0x20, 0x3, 0x20, 0x380000, 0xfff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x101}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x100000001, 0x100000001}, &(0x7f0000000100)=0xc) 07:10:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20500, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r2 = getpgrp(0x0) capset(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000180)={0xc12, 0x80000000, 0x4, 0x2, 0x6, 0x5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003780)={'team0\x00', 0x0}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000003840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x2c, r4, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x120, 0x1700) 07:10:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x30}, 0x98) 07:10:48 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac00"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x8000}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) stat(&(0x7f00000000c0)='\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0x2000, {0x10, 0x1, 0x4}, 0x0, r2, r3, 0xbdc, 0x9133, 0x0, 0x1ff, 0x9, 0x3, 0x7, 0x4, 0x10000, 0x7, 0xffffffffffffffe3, 0x6, 0x101, 0x6, 0x5}}, 0xa0) 07:10:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3f, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, [], 0x19}, 0x65}}, 0x7, 0x9, 0x80000001, 0x3, 0x1000000c4}, &(0x7f0000000180)=0x7578fd2008281736) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x14000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x6, 0x440405) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) fcntl$dupfd(r0, 0x406, r0) 07:10:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='highspeed\x001\xe9\x98\xf6\xb5\xe3\xf2\x7f\x8er\x87w\xdc\a\xa8=\xd8`w\xcc\xbf\xd7\xa1\x88\xb1\x8b[k(\xac=z\xab@\x1a\x1f\"\x85\xce\x19`8\x85\x8e8\xe9\xaf\xcf\xf8\x06\x0e?\xa5\xfd\b\xb0\xed\x0ei6X\xf6i\xe2GG&', 0x4d) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:semanage_exec_t:s0\x00', 0x25) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000200)={0x0, {}, 0x10000000000, 0x7}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000480)={0x6, {{0xa, 0x4e20, 0x9, @ipv4={[], [], @remote}, 0x100000000000}}, {{0xa, 0x4e24, 0x100000000, @ipv4={[], [], @multicast2}, 0xbc}}}, 0x108) 07:10:49 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept4$tipc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x10000) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x64f) close(0xffffffffffffffff) 07:10:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) r3 = msgget(0x3, 0x400) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000280)=""/66) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) fcntl$getown(r0, 0x9) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x10) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/43) ioctl$TUNSETLINK(r0, 0x400454cd, 0x302) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x7206b79c71bda4e4) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000080)) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_destroy(r3) ioctl$NBD_DISCONNECT(r1, 0xab08) 07:10:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x81) close(r0) 07:10:49 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac00"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x6, &(0x7f0000000080)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x3000000000016) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x1ff) 07:10:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x6, &(0x7f0000000080)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x3000000000016) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x1ff) 07:10:49 executing program 5: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) [ 1099.942589] IPVS: ftp: loaded support on port[0] = 21 07:10:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="680100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dd500"/124, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000030006000000000000000000000000000000190000e9b5f03a23"], 0xa8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x1000003a6}) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r4 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x60) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r7 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000200)=0x80000000, &(0x7f0000000280)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r7, 0xc0385720, &(0x7f0000000080)={0x1}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) 07:10:49 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1100.084531] IPVS: ftp: loaded support on port[0] = 21 [ 1100.157972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1100.169639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1100.178320] net_ratelimit: 23 callbacks suppressed [ 1100.178325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:10:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt(r0, 0x4, 0x200, &(0x7f0000000200)=""/51, &(0x7f0000000280)=0x33) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1100.224401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1100.243668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:10:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:50 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 07:10:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1e}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x8, 0x3, 0x100, 0x0}, &(0x7f0000000240)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="ef6dcbbfa7bdc4c1b7c6948bf5e64d274289acbad87cb033f2976c66896754dc2263b45fedbdca8edc8cc93634c0fa4bba664171537e8415e1c26b34160d16d060f31b2e08f52b49caa0c44dda60d371821d78d510af149cde1fb751018d444aa57bf08cc8cfa3a3d010b129242224fa54158b1f9fbb1ff58ebf9bb052d0c2bbe301ac857bf8f33b72c8abefe1eb9d", 0x8f}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x100000001, 0x2, 0x6, 0x1, 0x19266410, 0x2, 0xfffffffffffffc01, r1}}, @authinfo={0x18, 0x84, 0x6, {0x7fff}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x9d5, 0x1, 0x80000000, 0x20, 0x6, 0x8, 0xffff, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xe8, 0x10}, 0x20000080) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:50 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x100000000000082, 0x0) read(r0, &(0x7f00000001c0)=""/182, 0xfffffc20) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="b800000000000000010000000000000007000000000000fc9bc66b53be2710e8f27a9a00000000000000000000000000000000000000000000000000000000e1ffffffffffffff000000b541e0b80000000050fa000020003019fcf4cdaea0c4d02680d4cf3dd19fe0fd1fd40c493f45c7d1fce300"/142, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000d57f5907916c81000200001e0000000000000df90000000000006d696d655f74797065776c616e3100000000000000001cc149d1dea1c16344885b47d088eb506140f69ae0126ddf237d6b9d7e57f51650a5a9a5ad0bde1321fc71604b939c78fa30cf6e89f7bfe5d8866ea17fdfa3358a208124b449aedc1ee40624ce5aee"], 0xb8) [ 1100.351633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1100.360805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1100.385071] IPVS: ftp: loaded support on port[0] = 21 [ 1100.390723] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.390935] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.455685] CUSE: unknown device info "0üôÍ® ÄÐ&€ÔÏ" [ 1100.466668] CUSE: unknown device info "ÕY‘l" [ 1100.471706] CUSE: unknown device info "" [ 1100.476425] CUSE: unknown device info "" [ 1100.486110] CUSE: unknown device info "ù" [ 1100.490834] CUSE: DEVNAME unspecified [ 1100.496764] CUSE: unknown device info "0üôÍ® ÄÐ&€ÔÏ" [ 1100.507721] CUSE: unknown device info "ÕY‘l" [ 1100.512785] CUSE: unknown device info "" [ 1100.517246] CUSE: unknown device info "" [ 1100.527468] CUSE: unknown device info "ù" [ 1100.531975] CUSE: DEVNAME unspecified 07:10:50 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac0000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:50 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuseblk\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:10:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffd, 0x800) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x3f) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x80000) ioctl$NBD_CLEAR_QUE(r2, 0xab05) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:50 executing program 3: 07:10:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000200)=0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b7478abbf3e89043fc7890364bf03eb9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b33d3f9fd0822c02ca5990af17344296a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac00000000000000000000000000000000007cadfda8f87d4ad4f0194cfd01f1f1bfeaa9"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) 07:10:50 executing program 3: 07:10:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x10000) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x3) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='highspeed\x00]\xbc\xa4\x1c\x15\x107R\xda(PB\xc3\x9b\xb0]?F\xf47Y\xdd\xd3\x88\xc4\x99\x93\xe9e\xbd\x94>\xd1\xa32\xabS\xeb]\xbf363\xfcb\x13;\xa9\xe2&V`H\xfdp\xc5\xbd\xbc\xc7y\xfd\xb89,\xce-Hp\x9e2V\x90\xed/(\xda\x14\xaf\x99$W\xe9\xb1_}\xc54\xe0\x06\x92\x16\xfd\xa3l-\bX\x03T\"\x19\t\xe4\xf9\xfc\x906\'\x1c\xfa\xbc\xfcmp\xa4\x82\xe2\f\xf5\x9f+A_\xdbd\xa1\x8b\xf4\x03<\xd7\x90\x19\xb1\xb8Y\x85T\xc2\xd0L\xa1\xb2\x13\xd1\x9dv5\x18\xea\x9f=\x04\x1bx\x00\x81\xaf\x1c^\x19s\xfc\xc6\xe5\x89\x05', 0xb1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sync_file_range(r3, 0x2, 0x1, 0x1) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x111}}, 0x20) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x8000000186, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000200)=0x2b37) faccessat(r1, &(0x7f0000000300)='./file0\x00', 0x556a0ea8329100ab, 0x400) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000080)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:50 executing program 3: 07:10:50 executing program 5: r0 = semget$private(0x0, 0x2, 0x14) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000100)=""/79) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) fstatfs(r1, &(0x7f0000000040)=""/140) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000001c0)=""/176, &(0x7f0000000280)=0xb0) 07:10:50 executing program 3: [ 1101.190151] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.195291] protocol 88fb is buggy, dev hsr_slave_1 [ 1101.200484] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.205716] protocol 88fb is buggy, dev hsr_slave_1 07:10:51 executing program 3: 07:10:51 executing program 5: r0 = gettid() r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x410002, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, r1, 0x0, 0x15, &(0x7f00000000c0)='selfmd5sum*lo\x99vmnet1\x00', r2}, 0x30) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) close(r3) 07:10:51 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac0000"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:51 executing program 3: 07:10:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000200)={0x9, "72d1a3b9a93f09bf305a853d5ce99e8c4d26d641f4e3379ae41b373fb2a3c296", 0x1, 0x1}) 07:10:51 executing program 3: 07:10:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x400000000006, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)=ANY=[@ANYBLOB="81951340ce11c34c617797cf879d63a9d7f6c6c42564bacbd850ee93c9c6f1c3807270162978882155274bef26e06d8f1f81f3ca37567f0000006438c772781b13696462f2b85d04e95fdf1dc52498a973f4d52800a737e8fb5e09b5bf4af6e90db5f4fe39ae4331528700000000000000000000000f39d2b54448af2ab226e8d63f7ed7d808a2c75fb630fba5c5735988c0668cb5bedd2122cdd176bfb7487b0d0f72e18e08d92773c0a4d7d20297b53b6fdbd5369217404f877240e0536dd7a58f3ee03c0bb12a03c9417f8e5c917d1a1e99c6fb220304f0206741f7689893e97b882cbe9253ef76cc59bbafc77a81c9f16c570d0d30427994f4b258cb92220479ae990a432a581dd877263689beb54feb2578a109a6878a42de64c241ced0bd7f1dcc537fe0493f12bf", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1135], 0x3) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x75e030b3, @empty, 0x80000001}, r4}}, 0x30) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) r7 = inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x110) inotify_rm_watch(r3, r7) ptrace$getsig(0x4202, r6, 0x2c0, &(0x7f00000002c0)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000080)={0x1}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) [ 1101.990151] protocol 88fb is buggy, dev hsr_slave_0 07:10:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:51 executing program 3: 07:10:51 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x12201, 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x400004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00\x01\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) 07:10:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0xd97f, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:51 executing program 3: 07:10:51 executing program 3: 07:10:52 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac0000"], @ANYBLOB="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"/1139], 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:52 executing program 3: 07:10:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\xfa', 0x200}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200, 0x0) 07:10:52 executing program 3: 07:10:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r4 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000080)={0x1}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)) shutdown(r0, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0xfffffffffffffffe, 0x2, r1}) 07:10:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_DISCONNECT(r1, 0xab08) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000580)=0xe8) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000840)={0xa0, 0x0, 0x1, {{0x6, 0x0, 0x9, 0x571, 0x1, 0x10000, {0x0, 0x3ff, 0x3, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x3, 0x7, 0x1, 0x1, 0x1f, 0x7, r5, r6, 0x2, 0x4}}, {0x0, 0x4}}}, 0xa0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x93, 0xffff, 0x4}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000300)={r8, 0x6}, 0x8) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001480)=ANY=[@ANYBLOB="04f75d3d4f8b147356f3fbbeb4e1ca8228147590972849bcd1324798b1e20b0a53cd284a7709f57f16d2dcd33898db01f935353352ee8b9d08ee865f967e96c3c6d8725c84080000008f0a8c4827ee8ee1ec992d74dc04205420ad523ecdd9900da462e4b68dc80bc86f8709b115f99d88777b7680ac325cdaa02aa7ae8781a83dd2111cb838f5b0c5395805d1008c239a1af3b908afb1b8c80a44797db4c403062f8df660795b1b768a0a4778e5cc8cb6e94475cf182bdd73814e70406dec4d089d2d9e254ca1bb23abb09695694cdf314c9759", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="00000f9de0000001000000ffffffffffaaaaaaaaaabb0000000000000000000000000000000000000000ff00ffff00000000000000000000000000000000000000000000000000000000000000000000ff00ffff00ff0000000000000000000010000009800080010081000976657468315f746f5f7465616d00000069726c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000da0300008100000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001e00000020f00000001000000ac14140aac1414aaff000000ffffff00000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000900020000f65000077665746831000000000000000000000076657468315f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000400100000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ff03000073797a3000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1139], 0x3) r9 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r9, 0xc0385720, &(0x7f0000000080)={0x1}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r10, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(0xffffffffffffffff, 0x1) 07:10:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000840)={r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r4}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYBLOB="57fda4938d219415343ca74aa36cad7661ccbe10877229788e21c448e87bb58b6da2b59ab047c84de1f9e750ac6c06c5040fc68fb1abb12fc04a54616239dcc5bbfefa1be73d14e1f9d80b151e9f7e823466112c7cf070499146f86ea4f95e43182619b2501d2aa905b4893283cdb99f9b1eb67c7fd6bf7fb4e5", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x960}) shutdown(r0, 0x1) 07:10:52 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 07:10:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x80000000, @ipv4={[], [], @multicast1}, 0x8}}, [0x1ff, 0x1, 0xffff, 0xd6, 0xde57, 0x2, 0x6, 0x3, 0x0, 0x3, 0x5, 0xa44a, 0x7ff, 0x401, 0x495ba6b2]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x81}, &(0x7f0000000200)=0x8) 07:10:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x5, 0x7, 0x80000000, 0x0, 0x0, 0x80, 0x6, 0x9, 0x30000000000, 0x6, 0x8, 0x1, 0x1, 0x2, 0x9, 0x7, 0x9c3, 0xfffffffeffffffff, 0x1, 0xdd, 0x8001, 0x544039ab, 0x4, 0x4, 0xfff, 0x401, 0x7f, 0xff, 0x4, 0x3, 0x8, 0x8, 0x2, 0x0, 0x4, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x8}, 0x9, 0x1021, 0x7ff, 0xf, 0x10000, 0x4, 0x3}, r1, 0x7, r0, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)=@tipc=@id, 0x80, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0xb, 0x2, 0x7}, &(0x7f0000000280)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4009}) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000001100)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/156, 0x9c}, {&(0x7f0000002240)=""/147, 0x93}], 0x3, &(0x7f0000002340)=""/64, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x16, 0x2, &(0x7f0000000340)=@raw=[@exit, @ldst={0x1, 0x2, 0x3, 0x8, 0x5, 0x4, 0x10}], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xaa, &(0x7f0000000680)=""/170, 0x41100, 0x2, [], r6, 0x11, r0, 0x8, &(0x7f00000023c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x4, 0x7, 0x400000000000000, 0x495d}, 0x10}, 0x70) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000040)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x11x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x4, 0x7ff, 0x7, 0x3, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40, 0x7ff, 0x0, 0x2, 0x0, 0x900000000, 0x0, 0x2, 0x4, 0x9, 0x0, 0x81, 0x0, 0x0, 0x0, 0x95f8, 0x80, 0x8, 0x6e, 0x0, 0x8, 0x916, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0xffffffffffff7fff, 0xff}, 0x0, 0x9, 0x5, 0x0, 0x80000001, 0x7029, 0xffff}, 0x0, 0x0, r5, 0x8) close(r4) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7fff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x8) socket$kcm(0x2b, 0x5, 0x0) 07:10:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) epoll_create(0x71) 07:10:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x5, 0x7, 0x80000000, 0x0, 0x0, 0x80, 0x6, 0x9, 0x30000000000, 0x6, 0x8, 0x1, 0x1, 0x2, 0x9, 0x7, 0x9c3, 0xfffffffeffffffff, 0x1, 0xdd, 0x8001, 0x544039ab, 0x4, 0x4, 0xfff, 0x401, 0x7f, 0xff, 0x4, 0x3, 0x8, 0x8, 0x2, 0x0, 0x4, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x8}, 0x9, 0x1021, 0x7ff, 0xf, 0x10000, 0x4, 0x3}, r1, 0x7, r0, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)=@tipc=@id, 0x80, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0xb, 0x2, 0x7}, &(0x7f0000000280)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4009}) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000001100)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/156, 0x9c}, {&(0x7f0000002240)=""/147, 0x93}], 0x3, &(0x7f0000002340)=""/64, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x16, 0x2, &(0x7f0000000340)=@raw=[@exit, @ldst={0x1, 0x2, 0x3, 0x8, 0x5, 0x4, 0x10}], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xaa, &(0x7f0000000680)=""/170, 0x41100, 0x2, [], r6, 0x11, r0, 0x8, &(0x7f00000023c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x4, 0x7, 0x400000000000000, 0x495d}, 0x10}, 0x70) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000040)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x11x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x4, 0x7ff, 0x7, 0x3, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40, 0x7ff, 0x0, 0x2, 0x0, 0x900000000, 0x0, 0x2, 0x4, 0x9, 0x0, 0x81, 0x0, 0x0, 0x0, 0x95f8, 0x80, 0x8, 0x6e, 0x0, 0x8, 0x916, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0xffffffffffff7fff, 0xff}, 0x0, 0x9, 0x5, 0x0, 0x80000001, 0x7029, 0xffff}, 0x0, 0x0, r5, 0x8) close(r4) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7fff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x8) socket$kcm(0x2b, 0x5, 0x0) 07:10:52 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="742f398ea3bf32d52db6cd57c6b98d1ea935d64ec0b16f649981bcbabe3aeda7ed57d711bd5578e307c82866b502983aeaabb413443a22bf672394f8e23329173881dce124a0a820dba0ff85a95ae62bc902c7b9df2f1665ff9d9449734123437a738f35f427a7874f51e18ff55bcda635e12bf6eb86ede7208c772b95ec1208fefa88a0155c23b5c4a40b9b171af21f437b4a38feb15d44af1da5030af4ce3c4f109fd6f28a300151b7b8f126641f8977b64d4d5fa5970cd167fdbff95e76ebfc1169d94373c9ef4d", 0xc9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xffffffffffffffcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x7f, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x4}) unshare(0x40000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)=ANY=[@ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b2a16426342d41f3b9e6c3c756bc2ddb52191d9d284b3b43208ee1f80e66df2824bb2c0608fb408a1b7b3329187f65171ad698a292924e22c02ca5990af173442999e9739eda6b9bd7326789ba71a46a87fba1bc7de62bb39a203f87e6289f5877d21ee720cb731e70ac000000"], @ANYBLOB="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"/1139], 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) 07:10:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00\x00\x00\x00\x00H\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 07:10:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) 07:10:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x0, 0x7f, 0x2, {0xb, @sliced={0x0, [0x0, 0x3]}}}) [ 1103.317318] kasan: CONFIG_KASAN_INLINE enabled [ 1103.338420] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1103.368728] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1103.375011] Modules linked in: [ 1103.378203] CPU: 0 PID: 7605 Comm: syz-executor.3 Not tainted 4.14.141 #37 [ 1103.385204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.394556] task: ffff888070df4000 task.stack: ffff8880242d0000 [ 1103.400612] RIP: 0010:refcount_sub_and_test+0x2b/0xf0 [ 1103.405806] RSP: 0018:ffff8880242d7b98 EFLAGS: 00010202 [ 1103.411194] RAX: dffffc0000000000 RBX: ffff8880a9268280 RCX: ffffffff84262940 [ 1103.418456] RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001 [ 1103.425720] RBP: ffff8880242d7bc0 R08: 000000009f2eed17 R09: ffff888070df48c8 [ 1103.432998] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 1103.440538] R13: 0000000000000001 R14: ffff8880a9268294 R15: 0000000000000000 [ 1103.447926] FS: 00000000010c7940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 1103.456154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1103.462033] CR2: 00007f3e11ed8330 CR3: 000000008c48d000 CR4: 00000000001426f0 [ 1103.469305] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1103.476565] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1103.483826] Call Trace: [ 1103.486418] refcount_dec_and_test+0x1b/0x20 [ 1103.490820] vb2_vmalloc_put+0x18/0x70 [ 1103.494705] __vb2_buf_mem_free+0x103/0x1e0 [ 1103.499020] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 1103.504627] __vb2_queue_free+0x634/0x7d0 [ 1103.508760] vb2_core_queue_release+0x64/0x80 [ 1103.513265] _vb2_fop_release+0x1cf/0x2a0 [ 1103.517393] vb2_fop_release+0x75/0xc0 [ 1103.521276] vivid_fop_release+0x180/0x3f0 [ 1103.525490] ? vivid_remove+0x3d0/0x3d0 [ 1103.529456] ? dev_debug_store+0xe0/0xe0 [ 1103.533494] v4l2_release+0xf9/0x190 [ 1103.537201] __fput+0x275/0x7a0 [ 1103.540462] ____fput+0x16/0x20 [ 1103.543744] task_work_run+0x114/0x190 [ 1103.547611] exit_to_usermode_loop+0x1da/0x220 [ 1103.552171] do_syscall_64+0x4bc/0x640 [ 1103.556038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1103.560861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1103.566247] RIP: 0033:0x413561 [ 1103.569420] RSP: 002b:00007ffda8a510e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1103.577224] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413561 [ 1103.584479] RDX: 0000001b32020000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1103.591750] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf [ 1103.599099] R10: 00007ffda8a511c0 R11: 0000000000000293 R12: 000000000075bf20 [ 1103.606373] R13: 000000000010d5d4 R14: 0000000000761178 R15: ffffffffffffffff [ 1103.613628] Code: 55 48 89 e5 41 56 41 55 41 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 c6 64 85 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 1103.632737] RIP: refcount_sub_and_test+0x2b/0xf0 RSP: ffff8880242d7b98 [ 1103.643371] ---[ end trace 13820e77f25950b0 ]--- [ 1103.648676] Kernel panic - not syncing: Fatal exception [ 1103.655629] Kernel Offset: disabled [ 1103.659264] Rebooting in 86400 seconds..