rf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
02:58:37 executing program 2:
r0 = geteuid()
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
ioprio_set$uid(0x0, r0, 0x4)
shutdown(0xffffffffffffffff, 0x0)
02:58:37 executing program 5:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
write$P9_RREADLINK(r0, &(0x7f0000000300)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r4, 0xa05}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x215}, 0x14}}, 0x0)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084)
r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8e\x00'/15, 0x0)
pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendfile(r5, r6, 0x0, 0x102000004)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
dup(0xffffffffffffffff)
02:58:37 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x5c400, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x341101, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x4402c0, 0x0)
shutdown(r0, 0x0)
[ 656.628421] FAULT_INJECTION: forcing a failure.
[ 656.628421] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 656.651571] CPU: 1 PID: 17622 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 656.659493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 656.668854] Call Trace:
[ 656.671454] dump_stack+0x142/0x197
02:58:37 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040), 0x8)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x80480, 0x112)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000000c0)={0x7, 0x10, [0x3ff, 0x3d, 0x0, 0x9]})
listen(r1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
accept$alg(r1, 0x0, 0x0)
shutdown(r0, 0x0)
[ 656.675094] should_fail.cold+0x10f/0x159
[ 656.679234] ? __might_sleep+0x93/0xb0
[ 656.683129] __alloc_pages_nodemask+0x1d6/0x7a0
[ 656.687805] ? retint_kernel+0x2d/0x2d
[ 656.691708] ? __alloc_pages_slowpath+0x2930/0x2930
[ 656.696746] ? policy_node+0x11/0x110
[ 656.700557] alloc_pages_current+0xec/0x1e0
[ 656.704888] __get_free_pages+0xf/0x40
[ 656.708779] get_zeroed_page+0x11/0x20
[ 656.712669] get_image_page+0x1c/0x140
[ 656.716565] alloc_rtree_node+0x41/0xa0
[ 656.720635] memory_bm_create+0x3bf/0x530
[ 656.724797] create_basic_memory_bitmaps+0x94/0x130
[ 656.729824] snapshot_open+0x378/0x400
[ 656.733716] ? snapshot_release+0x230/0x230
[ 656.735140] CIFS VFS: Malformed UNC in devname.
[ 656.738046] ? snapshot_release+0x230/0x230
[ 656.747033] misc_open+0x34f/0x480
[ 656.750584] ? misc_devnode+0x130/0x130
[ 656.754562] chrdev_open+0x207/0x590
[ 656.758282] ? cdev_put.part.0+0x50/0x50
[ 656.762343] ? security_file_open+0x89/0x190
[ 656.766752] do_dentry_open+0x73b/0xeb0
[ 656.770734] ? cdev_put.part.0+0x50/0x50
[ 656.774817] vfs_open+0x105/0x220
[ 656.778271] path_openat+0x8bd/0x3f70
[ 656.782057] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 656.787412] ? trace_hardirqs_on+0x10/0x10
[ 656.791647] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 656.796299] ? __lock_is_held+0xb6/0x140
[ 656.800360] ? save_trace+0x290/0x290
[ 656.804166] ? __alloc_fd+0x1d4/0x4a0
[ 656.808100] do_filp_open+0x18e/0x250
[ 656.811884] ? __alloc_fd+0x1d4/0x4a0
[ 656.815667] ? may_open_dev+0xe0/0xe0
[ 656.819466] ? do_raw_spin_unlock+0x174/0x260
[ 656.823948] ? _raw_spin_unlock+0x2d/0x50
[ 656.828080] ? __alloc_fd+0x1d4/0x4a0
[ 656.831874] do_sys_open+0x2c5/0x430
[ 656.835689] ? filp_open+0x70/0x70
[ 656.839225] SyS_openat+0x30/0x40
[ 656.842671] ? SyS_open+0x40/0x40
[ 656.846119] do_syscall_64+0x1e8/0x640
[ 656.850008] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 656.854848] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 656.860023] RIP: 0033:0x45b349
[ 656.863202] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 656.870896] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
02:58:38 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0)
fcntl$setpipe(r2, 0x407, 0xc1)
close(r1)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_GET_XCRS(r9, 0x8188aea6, &(0x7f00000000c0)={0x1, 0x7, [{0x9a47, 0x0, 0x7}]})
ftruncate(r6, 0x5)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
write$P9_RLERROR(r1, &(0x7f0000000000)={0x9, 0x7, 0x1}, 0x9)
shutdown(r0, 0x0)
[ 656.878184] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 656.885452] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 656.892716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 656.893666] 9pnet: Insufficient options for proto=fd
[ 656.899987] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000010
02:58:38 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:38 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000100)=@x25, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/19, 0x13}, {&(0x7f00000004c0)=""/229, 0xe5}, {&(0x7f0000000340)=""/36, 0x24}], 0x5, &(0x7f0000000700)=""/187, 0xbb}, 0x40000000)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x7ee}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f00000007c0)={0x200, "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"})
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
02:58:38 executing program 4 (fault-call:1 fault-nth:17):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
connect(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200))
stat(0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300))
stat(&(0x7f0000000240)='./bus\x00', 0x0)
r4 = socket(0x11, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000380)='./file0/../file0/file0\x00', r5, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1)
ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
r7 = dup(r6)
write$uinput_user_dev(r7, &(0x7f0000000e00)={'syz0\x00', {}, 0xfffffffc, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2ea, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3)
02:58:38 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r3}, 0x7, 0xc0000000000, 0x9})
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000040)={0xe, "3c08a2c46f58708e3f401861e4b9dde5648c7dbe920f26ff5bdbe3ed2b3a76b3dd4ea924f43d0710c1901fc06b4c114d10133c2c18dd69640c6a55ea209702a1d12c35d9a5c0f3fb4fdc20a18c321b19c8b5e05de37aea107b31632f2dca3de6531f934d65ef39fc3beb93cecd7abb88a44d31970e13ccf3ce5e71dda0ea315c"})
02:58:38 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
accept4$phonet_pipe(r5, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800)
shutdown(r0, 0x1)
[ 657.134487] FAULT_INJECTION: forcing a failure.
[ 657.134487] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 657.187410] CPU: 1 PID: 17666 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 657.195399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 657.204751] Call Trace:
[ 657.207351] dump_stack+0x142/0x197
[ 657.210987] should_fail.cold+0x10f/0x159
[ 657.215122] ? __might_sleep+0x93/0xb0
[ 657.219000] __alloc_pages_nodemask+0x1d6/0x7a0
[ 657.223677] ? __alloc_pages_slowpath+0x2930/0x2930
[ 657.228711] ? __lock_is_held+0xb6/0x140
[ 657.232773] ? check_preemption_disabled+0x3c/0x250
[ 657.237798] alloc_pages_current+0xec/0x1e0
[ 657.242138] __get_free_pages+0xf/0x40
[ 657.246016] get_zeroed_page+0x11/0x20
[ 657.250003] get_image_page+0x1c/0x140
[ 657.253886] alloc_rtree_node+0x41/0xa0
[ 657.257850] memory_bm_create+0x3bf/0x530
[ 657.261997] create_basic_memory_bitmaps+0x94/0x130
[ 657.267009] snapshot_open+0x378/0x400
[ 657.270902] ? snapshot_release+0x230/0x230
[ 657.275225] ? snapshot_release+0x230/0x230
[ 657.279553] misc_open+0x34f/0x480
[ 657.283098] ? misc_devnode+0x130/0x130
[ 657.287062] chrdev_open+0x207/0x590
[ 657.290763] ? cdev_put.part.0+0x50/0x50
[ 657.294955] ? security_file_open+0x89/0x190
[ 657.299389] do_dentry_open+0x73b/0xeb0
[ 657.303370] ? cdev_put.part.0+0x50/0x50
[ 657.307426] vfs_open+0x105/0x220
[ 657.310881] path_openat+0x8bd/0x3f70
[ 657.314758] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 657.320121] ? trace_hardirqs_on+0x10/0x10
[ 657.324372] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 657.329031] ? __lock_is_held+0xb6/0x140
[ 657.333094] ? save_trace+0x290/0x290
[ 657.336916] ? __alloc_fd+0x1d4/0x4a0
[ 657.340709] do_filp_open+0x18e/0x250
[ 657.344693] ? __alloc_fd+0x1d4/0x4a0
[ 657.348498] ? may_open_dev+0xe0/0xe0
[ 657.352306] ? do_raw_spin_unlock+0x174/0x260
[ 657.356789] ? _raw_spin_unlock+0x2d/0x50
[ 657.360930] ? __alloc_fd+0x1d4/0x4a0
[ 657.364729] do_sys_open+0x2c5/0x430
[ 657.368448] ? filp_open+0x70/0x70
[ 657.371988] SyS_openat+0x30/0x40
[ 657.375451] ? SyS_open+0x40/0x40
[ 657.378911] do_syscall_64+0x1e8/0x640
[ 657.382796] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 657.388173] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 657.393357] RIP: 0033:0x45b349
[ 657.396539] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 657.404244] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 657.411510] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 657.418780] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 657.426048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
02:58:38 executing program 5:
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
write$P9_RREADLINK(r0, &(0x7f0000000300)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r4, 0xa05}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x215}, 0x14}}, 0x0)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084)
r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8e\x00'/15, 0x0)
pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendfile(r5, r6, 0x0, 0x102000004)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
dup(0xffffffffffffffff)
[ 657.433311] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000011
02:58:38 executing program 4 (fault-call:1 fault-nth:18):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:38 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0x1d4, 0x0, 0x0, 0x1d4, 0x2ac, 0x2ac, 0x2ac, 0x2ac, 0x2ac, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x1b4, 0x1d4, 0x0, {}, [@common=@inet=@sctp={{0x144, 'sctp\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0xff59)
[ 657.505812] input input9: cannot allocate more than FF_MAX_EFFECTS effects
02:58:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040)='security.evm\x00', 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
02:58:38 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
renameat2(r3, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00', 0x7)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
[ 657.592457] FAULT_INJECTION: forcing a failure.
[ 657.592457] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 657.632774] CPU: 1 PID: 17687 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 657.640703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 657.650064] Call Trace:
[ 657.652666] dump_stack+0x142/0x197
[ 657.656308] should_fail.cold+0x10f/0x159
[ 657.660465] ? __might_sleep+0x93/0xb0
[ 657.664365] __alloc_pages_nodemask+0x1d6/0x7a0
[ 657.669049] ? __alloc_pages_slowpath+0x2930/0x2930
[ 657.674070] ? __lock_is_held+0xb6/0x140
[ 657.678131] ? check_preemption_disabled+0x3c/0x250
[ 657.683156] alloc_pages_current+0xec/0x1e0
[ 657.687512] __get_free_pages+0xf/0x40
[ 657.691417] get_zeroed_page+0x11/0x20
[ 657.695304] get_image_page+0x1c/0x140
[ 657.699206] alloc_rtree_node+0x41/0xa0
[ 657.703182] memory_bm_create+0x3bf/0x530
[ 657.707329] create_basic_memory_bitmaps+0x94/0x130
[ 657.712357] snapshot_open+0x378/0x400
[ 657.716248] ? snapshot_release+0x230/0x230
[ 657.720569] ? snapshot_release+0x230/0x230
[ 657.724907] misc_open+0x34f/0x480
[ 657.728437] ? misc_devnode+0x130/0x130
[ 657.732418] chrdev_open+0x207/0x590
[ 657.736150] ? cdev_put.part.0+0x50/0x50
[ 657.740222] ? security_file_open+0x89/0x190
[ 657.744639] do_dentry_open+0x73b/0xeb0
[ 657.748612] ? cdev_put.part.0+0x50/0x50
[ 657.752677] vfs_open+0x105/0x220
[ 657.756131] path_openat+0x8bd/0x3f70
[ 657.759921] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 657.765281] ? trace_hardirqs_on+0x10/0x10
[ 657.769512] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 657.774176] ? __lock_is_held+0xb6/0x140
[ 657.778232] ? save_trace+0x290/0x290
[ 657.782048] ? __alloc_fd+0x1d4/0x4a0
[ 657.785850] do_filp_open+0x18e/0x250
[ 657.789657] ? __alloc_fd+0x1d4/0x4a0
[ 657.793451] ? may_open_dev+0xe0/0xe0
[ 657.797258] ? do_raw_spin_unlock+0x174/0x260
[ 657.801761] ? _raw_spin_unlock+0x2d/0x50
[ 657.805976] ? __alloc_fd+0x1d4/0x4a0
[ 657.809784] do_sys_open+0x2c5/0x430
[ 657.813495] ? filp_open+0x70/0x70
[ 657.817043] SyS_openat+0x30/0x40
[ 657.820503] ? SyS_open+0x40/0x40
[ 657.824002] do_syscall_64+0x1e8/0x640
[ 657.827875] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 657.832730] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 657.837957] RIP: 0033:0x45b349
[ 657.841136] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 657.848856] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 657.856166] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 657.863425] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 657.870689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
02:58:39 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
[ 657.877958] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000012
02:58:39 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0xfd, 0x4)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='wlan1\x00', r4}, 0x10)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0])
prctl$PR_GET_KEEPCAPS(0x7)
fdatasync(0xffffffffffffffff)
ftruncate(r4, 0x7fff)
sendfile(r1, r4, 0x0, 0x8000fffffffe)
02:58:39 executing program 4 (fault-call:1 fault-nth:19):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 657.987109] FAULT_INJECTION: forcing a failure.
[ 657.987109] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 658.007225] CPU: 0 PID: 17719 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 658.015152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 658.024533] Call Trace:
[ 658.027152] dump_stack+0x142/0x197
[ 658.030820] should_fail.cold+0x10f/0x159
[ 658.034989] ? __might_sleep+0x93/0xb0
[ 658.038906] __alloc_pages_nodemask+0x1d6/0x7a0
[ 658.043604] ? __alloc_pages_slowpath+0x2930/0x2930
[ 658.048741] ? __lock_is_held+0xb6/0x140
[ 658.052840] ? check_preemption_disabled+0x3c/0x250
[ 658.057894] alloc_pages_current+0xec/0x1e0
[ 658.062246] __get_free_pages+0xf/0x40
[ 658.066160] get_zeroed_page+0x11/0x20
[ 658.070073] get_image_page+0x1c/0x140
[ 658.073982] alloc_rtree_node+0x41/0xa0
[ 658.077977] memory_bm_create+0x3bf/0x530
[ 658.082269] create_basic_memory_bitmaps+0x94/0x130
02:58:39 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xfc)
listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/100, 0x64)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'bridge_slave_0\x00', {0x2}, 0x1})
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040))
openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2d0600, 0x0)
[ 658.087311] snapshot_open+0x378/0x400
[ 658.091220] ? snapshot_release+0x230/0x230
[ 658.095561] ? snapshot_release+0x230/0x230
[ 658.099912] misc_open+0x34f/0x480
[ 658.103485] ? misc_devnode+0x130/0x130
[ 658.107480] chrdev_open+0x207/0x590
[ 658.111226] ? cdev_put.part.0+0x50/0x50
[ 658.115318] ? security_file_open+0x89/0x190
[ 658.119750] do_dentry_open+0x73b/0xeb0
[ 658.123761] ? cdev_put.part.0+0x50/0x50
[ 658.127859] vfs_open+0x105/0x220
[ 658.131339] path_openat+0x8bd/0x3f70
02:58:39 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', 0xfffffffffffffffe, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000), 0x4)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x406300, 0x0)
ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000300))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000), &(0x7f0000000280)=0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xa2, "db1736d751134b2769d2161676e8c3816a4f22829d2f1402ce5ffab6eaa6a6bb646e0d429a59ba994f5de8a6292fdc7ad76064ed5422ed233206b6e8073919643189fa267f9c50f873e6bf6a0235563d45a2626c09f65b30d343ecc07a824c3d7ca0685b90ffc87e8ea8213e27c2b4199289acf601766a578e1cfa57c62ef1c1f229337746ea6d576d552ff35a24ae76c1a1b58b3ce809082c88eac6ab8e108c908c"}, &(0x7f00000001c0)=0xaa)
02:58:39 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', 0xfffffffffffffffe, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000), 0x4)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x406300, 0x0)
ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000300))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000), &(0x7f0000000280)=0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xa2, "db1736d751134b2769d2161676e8c3816a4f22829d2f1402ce5ffab6eaa6a6bb646e0d429a59ba994f5de8a6292fdc7ad76064ed5422ed233206b6e8073919643189fa267f9c50f873e6bf6a0235563d45a2626c09f65b30d343ecc07a824c3d7ca0685b90ffc87e8ea8213e27c2b4199289acf601766a578e1cfa57c62ef1c1f229337746ea6d576d552ff35a24ae76c1a1b58b3ce809082c88eac6ab8e108c908c"}, &(0x7f00000001c0)=0xaa)
[ 658.135156] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 658.140541] ? perf_trace_run_bpf_submit+0x10a/0x170
[ 658.145685] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 658.150377] ? __lock_is_held+0xb6/0x140
[ 658.154463] ? save_trace+0x290/0x290
[ 658.158285] ? __alloc_fd+0x1d4/0x4a0
[ 658.162115] do_filp_open+0x18e/0x250
[ 658.165938] ? __alloc_fd+0x1d4/0x4a0
[ 658.169757] ? may_open_dev+0xe0/0xe0
[ 658.173592] ? do_raw_spin_unlock+0x174/0x260
[ 658.178105] ? _raw_spin_unlock+0x2d/0x50
[ 658.182278] ? __alloc_fd+0x1d4/0x4a0
[ 658.186120] do_sys_open+0x2c5/0x430
[ 658.189853] ? filp_open+0x70/0x70
[ 658.193429] SyS_openat+0x30/0x40
[ 658.196895] ? SyS_open+0x40/0x40
[ 658.200368] do_syscall_64+0x1e8/0x640
[ 658.204266] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 658.209332] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 658.214541] RIP: 0033:0x45b349
[ 658.217743] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 658.225464] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 658.232776] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 658.240047] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 658.247417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 658.254685] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000013
02:58:39 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0)
r6 = fcntl$dupfd(r2, 0x406, r4)
sendto$phonet(r6, &(0x7f0000001a80)="2be9f5fd759d750caaf271be8dad471a90c6a57b23e4f1ab6f6ba47ab23f8432753886fa0aaa911ffdeb71f87476b095bf4da24cb0a5502df7e5ff19e4f44a756bac9b5190ebb28fc5262edd97a837f412881cbc", 0x54, 0x20000000, 0x0, 0x0)
02:58:39 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="00000000e60000001c002a000c180500626f6e64000000000c0002000800010006000000"], 0x3}}, 0x20044814)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, &(0x7f00000000c0)=0x4)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280cd1ba4a2dcab830350e719b9d00000a72577c84ba2f5291000000", @ANYRES32=r10, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0)
02:58:39 executing program 5:
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r4, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
open(0x0, 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x5a1000, 0x0)
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3)
lstat(0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
lstat(0x0, 0x0)
lstat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000b00)={'syz', 0x2}, 0x0, 0xfffffffffffffffe)
02:58:39 executing program 4 (fault-call:1 fault-nth:20):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:39 executing program 1:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040))
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1403, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1000040, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x400086)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0)
close(r5)
[ 658.427521] FAULT_INJECTION: forcing a failure.
[ 658.427521] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 658.439617] CPU: 1 PID: 17749 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 658.447506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 658.456863] Call Trace:
[ 658.459462] dump_stack+0x142/0x197
[ 658.463114] should_fail.cold+0x10f/0x159
[ 658.467273] ? __might_sleep+0x93/0xb0
[ 658.471204] __alloc_pages_nodemask+0x1d6/0x7a0
02:58:39 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x5c2, 0x0)
shutdown(r0, 0x0)
[ 658.475922] ? __alloc_pages_slowpath+0x2930/0x2930
[ 658.480947] ? __lock_is_held+0xb6/0x140
[ 658.485011] ? check_preemption_disabled+0x3c/0x250
[ 658.490044] alloc_pages_current+0xec/0x1e0
[ 658.494380] __get_free_pages+0xf/0x40
[ 658.496525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11594 sclass=netlink_route_socket pig=17757 comm=syz-executor.0
[ 658.498269] get_zeroed_page+0x11/0x20
[ 658.498282] get_image_page+0x1c/0x140
[ 658.498296] alloc_rtree_node+0x41/0xa0
[ 658.498311] memory_bm_create+0x3bf/0x530
[ 658.526575] create_basic_memory_bitmaps+0x94/0x130
[ 658.531622] snapshot_open+0x378/0x400
[ 658.535537] ? snapshot_release+0x230/0x230
[ 658.539849] ? snapshot_release+0x230/0x230
[ 658.544187] misc_open+0x34f/0x480
[ 658.547718] ? misc_devnode+0x130/0x130
[ 658.551688] chrdev_open+0x207/0x590
[ 658.555413] ? cdev_put.part.0+0x50/0x50
[ 658.559475] ? security_file_open+0x89/0x190
[ 658.563874] do_dentry_open+0x73b/0xeb0
[ 658.567842] ? cdev_put.part.0+0x50/0x50
[ 658.571909] vfs_open+0x105/0x220
[ 658.575378] path_openat+0x8bd/0x3f70
[ 658.579196] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 658.584574] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 658.589238] ? __lock_is_held+0xb6/0x140
[ 658.593302] ? save_trace+0x290/0x290
[ 658.597115] ? __alloc_fd+0x1d4/0x4a0
[ 658.600921] do_filp_open+0x18e/0x250
[ 658.604718] ? __alloc_fd+0x1d4/0x4a0
[ 658.608516] ? may_open_dev+0xe0/0xe0
[ 658.612332] ? do_raw_spin_unlock+0x174/0x260
[ 658.616831] ? _raw_spin_unlock+0x2d/0x50
[ 658.620978] ? __alloc_fd+0x1d4/0x4a0
[ 658.624805] do_sys_open+0x2c5/0x430
[ 658.628521] ? filp_open+0x70/0x70
[ 658.632074] SyS_openat+0x30/0x40
[ 658.635541] ? SyS_open+0x40/0x40
[ 658.639005] do_syscall_64+0x1e8/0x640
[ 658.642885] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 658.647764] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 658.652953] RIP: 0033:0x45b349
[ 658.656152] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 658.663868] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 658.671146] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 658.678414] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 658.685680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 658.692947] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000014
02:58:39 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x30f45e7dc9531825)
02:58:39 executing program 4 (fault-call:1 fault-nth:21):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:39 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:39 executing program 5:
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
getpid()
socket$inet6(0xa, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf}, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00')
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000400)=[0xa777, 0x3])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
unlink(&(0x7f0000000040)='./file0\x00')
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
accept(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffff, 0x202)
[ 658.816152] FAULT_INJECTION: forcing a failure.
[ 658.816152] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 658.828813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11594 sclass=netlink_route_socket pig=17757 comm=syz-executor.0
[ 658.833155] CPU: 1 PID: 17768 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 658.849111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 658.858471] Call Trace:
[ 658.861074] dump_stack+0x142/0x197
[ 658.864733] should_fail.cold+0x10f/0x159
[ 658.868888] ? __might_sleep+0x93/0xb0
[ 658.872794] __alloc_pages_nodemask+0x1d6/0x7a0
[ 658.877480] ? __alloc_pages_slowpath+0x2930/0x2930
[ 658.882518] ? __lock_is_held+0xb6/0x140
[ 658.886592] ? check_preemption_disabled+0x3c/0x250
[ 658.891625] alloc_pages_current+0xec/0x1e0
[ 658.895959] __get_free_pages+0xf/0x40
[ 658.899860] get_zeroed_page+0x11/0x20
[ 658.903760] get_image_page+0x1c/0x140
[ 658.907663] alloc_rtree_node+0x41/0xa0
[ 658.911655] memory_bm_create+0x3bf/0x530
[ 658.915831] create_basic_memory_bitmaps+0x94/0x130
[ 658.920863] snapshot_open+0x378/0x400
[ 658.924760] ? snapshot_release+0x230/0x230
[ 658.929087] ? snapshot_release+0x230/0x230
[ 658.933423] misc_open+0x34f/0x480
[ 658.936977] ? misc_devnode+0x130/0x130
[ 658.940960] chrdev_open+0x207/0x590
[ 658.944679] ? cdev_put.part.0+0x50/0x50
[ 658.948746] ? security_file_open+0x89/0x190
[ 658.953170] do_dentry_open+0x73b/0xeb0
[ 658.957149] ? cdev_put.part.0+0x50/0x50
[ 658.961221] vfs_open+0x105/0x220
[ 658.964681] path_openat+0x8bd/0x3f70
[ 658.968485] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 658.973863] ? trace_hardirqs_on+0x10/0x10
[ 658.978118] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 658.982801] ? __lock_is_held+0xb6/0x140
[ 658.986881] ? save_trace+0x290/0x290
[ 658.990700] ? __alloc_fd+0x1d4/0x4a0
[ 658.994511] do_filp_open+0x18e/0x250
[ 658.998320] ? __alloc_fd+0x1d4/0x4a0
[ 659.002133] ? may_open_dev+0xe0/0xe0
[ 659.006131] ? do_raw_spin_unlock+0x174/0x260
[ 659.010631] ? _raw_spin_unlock+0x2d/0x50
[ 659.014782] ? __alloc_fd+0x1d4/0x4a0
[ 659.018599] do_sys_open+0x2c5/0x430
[ 659.022321] ? filp_open+0x70/0x70
[ 659.025886] SyS_openat+0x30/0x40
[ 659.029345] ? SyS_open+0x40/0x40
[ 659.032807] do_syscall_64+0x1e8/0x640
[ 659.036706] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 659.041559] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 659.046765] RIP: 0033:0x45b349
[ 659.049974] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 659.057690] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
02:58:40 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
[ 659.064969] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 659.072246] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 659.079525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 659.086905] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000015
02:58:40 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:40 executing program 4 (fault-call:1 fault-nth:22):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:40 executing program 0:
perf_event_open(&(0x7f0000000440)={0x0, 0x2c5, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r5 = semget$private(0x0, 0x400000000d, 0x0)
semop(r5, 0x0, 0x0)
semop(r5, &(0x7f0000001840), 0x0)
semctl$GETPID(r5, 0x0, 0xb, 0x0)
semctl$SETVAL(r5, 0x1, 0x10, &(0x7f00000004c0)=0xe36)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250000000008000900000000000600060001000000ac7e2889b211d2fcf2ebfff26d2c20cd97433874f33da52a3201f1559ab10d83eed53b5702b88a63ce2fa0198eda4269416fa89c6742eada13e040e3b299a3e9c848a42a13bfc528ad7451aba8a44c5cfec063ebe7dfa69d04d279254b1ee0e01acd60f780f68219e70d1a0680b61377bbc400eed51e5098374d9f1dfe93270fa864a6390689"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x55db871bed5c4ae5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$VIDIOC_G_PRIORITY(r7, 0x80045643, 0x1)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="9a82ed829c0cc4745660b8ab89da847f97d34cf87511735f78d732faac8d5c64170a8e2e5999f03be1f9d7000000018000000092c1d44978bd72e344c1917c304b44d15189e2a5073cf776f2c4a31338905704e553532c75429a352c81ca1b92"], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x1a)
bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0xfffffe74)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800)
02:58:40 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040))
02:58:40 executing program 5:
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x20, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)='Tt\xf3\nM\xea\x9044\xd5D\xd8(\xcc\x84\x05}\xecN\x91?\xbf\xc9rG\xfaS\xf5N[\xedp\xea\a\xeaSYGk&\x11\xc7\x11\xc7\xac\xb8:\x8c\x82l\xab\x02\xbc\x97\x9d\n\x06\n\x1d\x05\xafr\xe1\xb9\x03\xaf\xc4\xea6[\xb6P\xf4\xf2\xae\xf8\xd3\xcc\x02\x12\x84\xd5\xe2\xc1Gv\xaa\xebR\x03x\x9c\xae,\xe4C!I}2\xa3\xf9A\x81h\x94\x8f', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_mr_vif\x00')
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x200, 0x2000)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x88301, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x9, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x2)
r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r2, r3}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}})
[ 659.336571] FAULT_INJECTION: forcing a failure.
[ 659.336571] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 659.357652] CPU: 0 PID: 17789 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 659.365588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 659.374957] Call Trace:
[ 659.377569] dump_stack+0x142/0x197
[ 659.381224] should_fail.cold+0x10f/0x159
[ 659.385388] ? __might_sleep+0x93/0xb0
[ 659.389298] __alloc_pages_nodemask+0x1d6/0x7a0
[ 659.393995] ? __alloc_pages_slowpath+0x2930/0x2930
[ 659.399035] ? __lock_is_held+0xb6/0x140
[ 659.403111] ? check_preemption_disabled+0x3c/0x250
[ 659.408328] alloc_pages_current+0xec/0x1e0
[ 659.412677] __get_free_pages+0xf/0x40
[ 659.416591] get_zeroed_page+0x11/0x20
[ 659.420485] get_image_page+0x1c/0x140
[ 659.424363] alloc_rtree_node+0x41/0xa0
[ 659.428395] memory_bm_create+0x3bf/0x530
[ 659.432574] create_basic_memory_bitmaps+0x94/0x130
[ 659.437672] snapshot_open+0x378/0x400
[ 659.441550] ? snapshot_release+0x230/0x230
[ 659.445913] ? snapshot_release+0x230/0x230
[ 659.450231] misc_open+0x34f/0x480
[ 659.453762] ? misc_devnode+0x130/0x130
[ 659.457728] chrdev_open+0x207/0x590
[ 659.461447] ? cdev_put.part.0+0x50/0x50
[ 659.465698] ? security_file_open+0x89/0x190
[ 659.470135] do_dentry_open+0x73b/0xeb0
[ 659.474159] ? cdev_put.part.0+0x50/0x50
[ 659.478253] vfs_open+0x105/0x220
[ 659.481702] path_openat+0x8bd/0x3f70
[ 659.485491] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 659.490864] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 659.495530] ? __lock_is_held+0xb6/0x140
[ 659.499594] ? save_trace+0x290/0x290
[ 659.503388] ? __alloc_fd+0x1d4/0x4a0
[ 659.507222] do_filp_open+0x18e/0x250
[ 659.511013] ? __alloc_fd+0x1d4/0x4a0
[ 659.514801] ? may_open_dev+0xe0/0xe0
[ 659.518614] ? do_raw_spin_unlock+0x174/0x260
[ 659.523125] ? _raw_spin_unlock+0x2d/0x50
[ 659.527266] ? __alloc_fd+0x1d4/0x4a0
[ 659.531072] do_sys_open+0x2c5/0x430
[ 659.534791] ? filp_open+0x70/0x70
[ 659.539724] SyS_openat+0x30/0x40
[ 659.543166] ? SyS_open+0x40/0x40
[ 659.546608] do_syscall_64+0x1e8/0x640
[ 659.550511] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 659.555370] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 659.560547] RIP: 0033:0x45b349
[ 659.563733] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 659.571453] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 659.578735] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000000c0)={0x0, 0xffffffe1, 0xfffffffffffffffd, &(0x7f0000000080)=0x6})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
02:58:40 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040))
[ 659.586014] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 659.593274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 659.600556] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000016
02:58:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d0000c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x46}], 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x9, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x0, 0x0, 0x0, <r3=>0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa30904, 0x10001, [], @string=&(0x7f00000000c0)}})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
02:58:40 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040))
02:58:40 executing program 4 (fault-call:1 fault-nth:23):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:40 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, 0x0)
[ 659.685245] kvm: emulating exchange as write
02:58:40 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x60}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x0, 0xfff}, 0x8)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
listen(r1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x480000, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0xffff}, 0x16, 0x1)
sendto$inet(r2, 0x0, 0x0, 0x2400878c, &(0x7f00000008c0)={0x2, 0x4e20, @local}, 0x10)
accept(r1, &(0x7f0000000040)=@alg, &(0x7f0000000140)=0x80)
02:58:40 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', r2})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000075c0)={0x1c, r11, 0xb631c6b8429a7eb, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000001a40)={@dev, <r15=>0x0}, &(0x7f0000001a80)=0x14)
sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000001b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x68, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c27f2851d84d"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x4014)
r16 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x101, 0x100)
ioctl$PPPOEIOCDFWD(r16, 0xb101, 0x0)
r17 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_upper(r17, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="00fb2a01c29ede46dda1d504c08dea8765ab289e1cac5ea1f897000000000000004402000000ef9673ffd870292515043bfe84a4afe81c4e98f8ca8f7688f888e26d18f89222e8c63c477f7f19fe"], 0x2a, 0x1)
02:58:40 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, 0x0)
[ 659.763849] FAULT_INJECTION: forcing a failure.
[ 659.763849] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 659.791712] CPU: 1 PID: 17812 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 659.799634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 659.808989] Call Trace:
[ 659.811578] dump_stack+0x142/0x197
[ 659.815200] should_fail.cold+0x10f/0x159
[ 659.819337] ? __might_sleep+0x93/0xb0
[ 659.823218] __alloc_pages_nodemask+0x1d6/0x7a0
[ 659.827896] ? __alloc_pages_slowpath+0x2930/0x2930
[ 659.832910] ? __lock_is_held+0xb6/0x140
[ 659.836965] ? check_preemption_disabled+0x3c/0x250
[ 659.841990] alloc_pages_current+0xec/0x1e0
[ 659.846307] __get_free_pages+0xf/0x40
[ 659.850184] get_zeroed_page+0x11/0x20
[ 659.854064] get_image_page+0x1c/0x140
[ 659.857947] alloc_rtree_node+0x41/0xa0
[ 659.861925] memory_bm_create+0x3bf/0x530
[ 659.866080] create_basic_memory_bitmaps+0x94/0x130
[ 659.871093] snapshot_open+0x378/0x400
[ 659.874981] ? snapshot_release+0x230/0x230
[ 659.879300] ? snapshot_release+0x230/0x230
[ 659.883617] misc_open+0x34f/0x480
[ 659.887150] ? misc_devnode+0x130/0x130
[ 659.891114] chrdev_open+0x207/0x590
[ 659.894823] ? cdev_put.part.0+0x50/0x50
[ 659.898879] ? security_file_open+0x89/0x190
[ 659.903369] do_dentry_open+0x73b/0xeb0
[ 659.907339] ? cdev_put.part.0+0x50/0x50
[ 659.911399] vfs_open+0x105/0x220
[ 659.914845] path_openat+0x8bd/0x3f70
[ 659.918635] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 659.923995] ? trace_hardirqs_on+0x10/0x10
[ 659.928231] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 659.932890] ? __lock_is_held+0xb6/0x140
[ 659.936946] ? save_trace+0x290/0x290
[ 659.940748] ? __alloc_fd+0x1d4/0x4a0
[ 659.944565] do_filp_open+0x18e/0x250
[ 659.948357] ? __alloc_fd+0x1d4/0x4a0
[ 659.952149] ? may_open_dev+0xe0/0xe0
[ 659.955967] ? do_raw_spin_unlock+0x174/0x260
[ 659.960454] ? _raw_spin_unlock+0x2d/0x50
[ 659.964595] ? __alloc_fd+0x1d4/0x4a0
[ 659.968409] do_sys_open+0x2c5/0x430
[ 659.972125] ? filp_open+0x70/0x70
[ 659.975665] SyS_openat+0x30/0x40
[ 659.979108] ? SyS_open+0x40/0x40
[ 659.982581] do_syscall_64+0x1e8/0x640
[ 659.986461] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 659.991302] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 659.996482] RIP: 0033:0x45b349
[ 659.999661] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 660.007376] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 660.014649] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 660.021910] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 660.029183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 660.036455] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000017
02:58:41 executing program 4 (fault-call:1 fault-nth:24):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:41 executing program 0:
perf_event_open(&(0x7f0000000440)={0x0, 0x2c5, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r5 = semget$private(0x0, 0x400000000d, 0x0)
semop(r5, 0x0, 0x0)
semop(r5, &(0x7f0000001840), 0x0)
semctl$GETPID(r5, 0x0, 0xb, 0x0)
semctl$SETVAL(r5, 0x1, 0x10, &(0x7f00000004c0)=0xe36)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250000000008000900000000000600060001000000ac7e2889b211d2fcf2ebfff26d2c20cd97433874f33da52a3201f1559ab10d83eed53b5702b88a63ce2fa0198eda4269416fa89c6742eada13e040e3b299a3e9c848a42a13bfc528ad7451aba8a44c5cfec063ebe7dfa69d04d279254b1ee0e01acd60f780f68219e70d1a0680b61377bbc400eed51e5098374d9f1dfe93270fa864a6390689"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x55db871bed5c4ae5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$VIDIOC_G_PRIORITY(r7, 0x80045643, 0x1)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="9a82ed829c0cc4745660b8ab89da847f97d34cf87511735f78d732faac8d5c64170a8e2e5999f03be1f9d7000000018000000092c1d44978bd72e344c1917c304b44d15189e2a5073cf776f2c4a31338905704e553532c75429a352c81ca1b92"], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x1a)
bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0xfffffe74)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800)
02:58:41 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, 0x0)
[ 660.157356] FAULT_INJECTION: forcing a failure.
[ 660.157356] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 660.173091] CPU: 0 PID: 17838 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 660.181012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 660.190383] Call Trace:
[ 660.193000] dump_stack+0x142/0x197
[ 660.196665] should_fail.cold+0x10f/0x159
[ 660.200919] ? __might_sleep+0x93/0xb0
02:58:41 executing program 5:
clone(0x1128100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0)
r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{}, [@bcast, @bcast, @remote, @remote, @null, @netrom, @remote, @netrom]}, &(0x7f0000000400)=0x48, 0x800)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0xfffffffffffff190, 0x0, 0x7})
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
getsockname$netlink(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x2, {0x1, @empty}}, 0x1e)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x1a340, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000100)={0x8000000, 0x9, 0x81, 0xfac, [], [], [], 0x2, 0x80000001, 0x5, 0xb30f, "e4050a0000c200000000000050db00"})
eventfd2(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000004c0)={0x6, &(0x7f0000000000)=[{0x4, 0x9, 0x58, 0x6}, {0x1, 0x6, 0xd9, 0x5}, {0x2, 0x3f, 0xed, 0x93bf}, {0x53fc, 0xfe, 0x3, 0x4}, {0xffff, 0x2, 0x3f, 0x4}, {0x3, 0x1f, 0x5, 0xb9}]}, 0x10)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r7, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r8 = eventfd2(0x0, 0x0)
r9 = fcntl$dupfd(r5, 0x0, r8)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0)
ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0)
[ 660.204825] __alloc_pages_nodemask+0x1d6/0x7a0
[ 660.209509] ? __alloc_pages_slowpath+0x2930/0x2930
[ 660.214549] ? __lock_is_held+0xb6/0x140
[ 660.218622] ? check_preemption_disabled+0x3c/0x250
[ 660.223665] alloc_pages_current+0xec/0x1e0
[ 660.228006] __get_free_pages+0xf/0x40
[ 660.231902] get_zeroed_page+0x11/0x20
[ 660.235893] get_image_page+0x1c/0x140
[ 660.239801] alloc_rtree_node+0x41/0xa0
[ 660.243870] memory_bm_create+0x3bf/0x530
[ 660.248020] create_basic_memory_bitmaps+0x94/0x130
[ 660.253028] snapshot_open+0x378/0x400
[ 660.256905] ? snapshot_release+0x230/0x230
[ 660.261221] ? snapshot_release+0x230/0x230
[ 660.265556] misc_open+0x34f/0x480
[ 660.269122] ? misc_devnode+0x130/0x130
[ 660.273106] chrdev_open+0x207/0x590
[ 660.276839] ? cdev_put.part.0+0x50/0x50
[ 660.280922] ? security_file_open+0x89/0x190
[ 660.285346] do_dentry_open+0x73b/0xeb0
[ 660.289334] ? cdev_put.part.0+0x50/0x50
[ 660.293426] vfs_open+0x105/0x220
[ 660.296904] path_openat+0x8bd/0x3f70
[ 660.300766] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 660.306135] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 660.310791] ? __lock_is_held+0xb6/0x140
[ 660.314843] ? save_trace+0x290/0x290
[ 660.318643] ? SOFTIRQ_verbose+0x10/0x10
[ 660.322722] ? __alloc_fd+0x1d4/0x4a0
[ 660.326583] do_filp_open+0x18e/0x250
[ 660.330373] ? __alloc_fd+0x1d4/0x4a0
[ 660.334171] ? may_open_dev+0xe0/0xe0
[ 660.337983] ? do_raw_spin_unlock+0x174/0x260
[ 660.342472] ? _raw_spin_unlock+0x2d/0x50
[ 660.346611] ? __alloc_fd+0x1d4/0x4a0
[ 660.350418] do_sys_open+0x2c5/0x430
[ 660.354126] ? filp_open+0x70/0x70
[ 660.357672] SyS_openat+0x30/0x40
[ 660.361114] ? SyS_open+0x40/0x40
[ 660.364560] do_syscall_64+0x1e8/0x640
[ 660.368439] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 660.373295] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 660.378471] RIP: 0033:0x45b349
[ 660.381647] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 660.389348] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 660.396616] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:41 executing program 3 (fault-call:3 fault-nth:0):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:41 executing program 4 (fault-call:1 fault-nth:25):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 660.403884] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 660.411145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 660.418407] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000018
02:58:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket(0x6, 0x6, 0x20)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', r7})
02:58:41 executing program 0:
perf_event_open(&(0x7f0000000440)={0x0, 0x2c5, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r5 = semget$private(0x0, 0x400000000d, 0x0)
semop(r5, 0x0, 0x0)
semop(r5, &(0x7f0000001840), 0x0)
semctl$GETPID(r5, 0x0, 0xb, 0x0)
semctl$SETVAL(r5, 0x1, 0x10, &(0x7f00000004c0)=0xe36)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250000000008000900000000000600060001000000ac7e2889b211d2fcf2ebfff26d2c20cd97433874f33da52a3201f1559ab10d83eed53b5702b88a63ce2fa0198eda4269416fa89c6742eada13e040e3b299a3e9c848a42a13bfc528ad7451aba8a44c5cfec063ebe7dfa69d04d279254b1ee0e01acd60f780f68219e70d1a0680b61377bbc400eed51e5098374d9f1dfe93270fa864a6390689"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x55db871bed5c4ae5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$VIDIOC_G_PRIORITY(r7, 0x80045643, 0x1)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="9a82ed829c0cc4745660b8ab89da847f97d34cf87511735f78d732faac8d5c64170a8e2e5999f03be1f9d7000000018000000092c1d44978bd72e344c1917c304b44d15189e2a5073cf776f2c4a31338905704e553532c75429a352c81ca1b92"], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x1a)
bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0xfffffe74)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800)
[ 660.497087] FAULT_INJECTION: forcing a failure.
[ 660.497087] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 660.528256] CPU: 1 PID: 17854 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 660.536312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 660.545691] Call Trace:
[ 660.548297] dump_stack+0x142/0x197
[ 660.551950] should_fail.cold+0x10f/0x159
[ 660.556207] ? __might_sleep+0x93/0xb0
[ 660.560117] __alloc_pages_nodemask+0x1d6/0x7a0
[ 660.564804] ? __alloc_pages_slowpath+0x2930/0x2930
[ 660.569840] ? __lock_is_held+0xb6/0x140
[ 660.573946] ? check_preemption_disabled+0x3c/0x250
[ 660.578985] alloc_pages_current+0xec/0x1e0
[ 660.583332] __get_free_pages+0xf/0x40
[ 660.587350] get_zeroed_page+0x11/0x20
[ 660.591235] get_image_page+0x1c/0x140
[ 660.595130] alloc_rtree_node+0x41/0xa0
[ 660.599103] memory_bm_create+0x3bf/0x530
[ 660.603276] create_basic_memory_bitmaps+0x94/0x130
[ 660.608296] snapshot_open+0x378/0x400
[ 660.612186] ? snapshot_release+0x230/0x230
[ 660.616506] ? snapshot_release+0x230/0x230
[ 660.620820] misc_open+0x34f/0x480
[ 660.624364] ? misc_devnode+0x130/0x130
[ 660.628327] chrdev_open+0x207/0x590
[ 660.632044] ? cdev_put.part.0+0x50/0x50
[ 660.636116] ? security_file_open+0x89/0x190
[ 660.640528] do_dentry_open+0x73b/0xeb0
[ 660.644513] ? cdev_put.part.0+0x50/0x50
[ 660.648590] vfs_open+0x105/0x220
[ 660.652053] path_openat+0x8bd/0x3f70
[ 660.655858] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 660.661227] ? debug_smp_processor_id+0x1c/0x20
[ 660.665936] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 660.670611] ? __lock_is_held+0xb6/0x140
[ 660.674679] ? save_trace+0x290/0x290
[ 660.678470] ? SOFTIRQ_verbose+0x10/0x10
[ 660.682546] ? __alloc_fd+0x1d4/0x4a0
[ 660.686362] do_filp_open+0x18e/0x250
[ 660.690173] ? __alloc_fd+0x1d4/0x4a0
[ 660.693975] ? may_open_dev+0xe0/0xe0
[ 660.697774] ? do_raw_spin_unlock+0x174/0x260
[ 660.702275] ? _raw_spin_unlock+0x2d/0x50
[ 660.706441] ? __alloc_fd+0x1d4/0x4a0
[ 660.710251] do_sys_open+0x2c5/0x430
[ 660.713970] ? filp_open+0x70/0x70
[ 660.717510] SyS_openat+0x30/0x40
[ 660.720987] ? SyS_open+0x40/0x40
[ 660.724459] do_syscall_64+0x1e8/0x640
[ 660.728333] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 660.733176] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 660.738362] RIP: 0033:0x45b349
[ 660.741543] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 660.749337] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 660.756597] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 660.763863] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 660.771150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 660.778417] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000019
02:58:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket(0x6, 0x6, 0x20)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', r7})
02:58:42 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000004900)={'batadv0\x00', <r4=>0x0})
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000004940)={@rand_addr=0xd7c, @rand_addr=0xd713, r4}, 0xc)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x3f})
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f00000000c0)={0x0, {0x4800000, 0x20}})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f00000002c0)={0xa42, 0xb, 0x4, 0x1000, 0x4, {0x77359400}, {0x2, 0xc, 0xff, 0x6, 0x0, 0x8, "331bbd46"}, 0x8, 0x1, @offset=0x40, 0x30, 0x0, <r10=>0xffffffffffffffff})
ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x1)
close(r6)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/schedstat\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r11, 0xc058534b, &(0x7f0000000240)={0x9, 0xfffff948, 0x6, 0x1f, 0xfffffffa, 0x20})
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r13=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r13}}, 0x18)
sendto$llc(r6, &(0x7f0000000100)="f5f406a32f343a7446285d397b96ac15278654c725179296c585d21125ac6f6dc5ebb49dda89ea47c47269a63f58a4ff0368bfa1e7732fb7c7c7fe9afc1378620282478e94decf26fb3afe531b73aebd", 0x50, 0x40, &(0x7f0000000180)={0x1a, 0x304, 0x2a, 0x6, 0x0, 0x9, @remote}, 0x10)
02:58:42 executing program 4 (fault-call:1 fault-nth:26):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:42 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x43732e5398417f0a})
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r11, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r12=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x76, &(0x7f0000000800)={r12}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)={r12, 0x800, 0x3, [0x81, 0x7, 0x4bd]}, 0xe)
ioctl$TUNSETTXFILTER(r5, 0x801054db, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"])
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r13=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r13}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r14=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r14}}, 0x18)
r15 = syz_open_pts(r2, 0x20000)
ioctl$TIOCL_SELLOADLUT(r15, 0x541c, &(0x7f0000000080)={0x5, 0x100, 0xfffffffffffffff8, 0xbb2, 0xc25})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
close(r16)
r17 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r17, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r18=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r16, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r18}}, 0x18)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x400200, 0x0)
ioctl$BLKSECTGET(r16, 0x1267, &(0x7f0000000000))
02:58:42 executing program 0:
perf_event_open(&(0x7f0000000440)={0x0, 0x2c5, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r5 = semget$private(0x0, 0x400000000d, 0x0)
semop(r5, 0x0, 0x0)
semop(r5, &(0x7f0000001840), 0x0)
semctl$GETPID(r5, 0x0, 0xb, 0x0)
semctl$SETVAL(r5, 0x1, 0x10, &(0x7f00000004c0)=0xe36)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250000000008000900000000000600060001000000ac7e2889b211d2fcf2ebfff26d2c20cd97433874f33da52a3201f1559ab10d83eed53b5702b88a63ce2fa0198eda4269416fa89c6742eada13e040e3b299a3e9c848a42a13bfc528ad7451aba8a44c5cfec063ebe7dfa69d04d279254b1ee0e01acd60f780f68219e70d1a0680b61377bbc400eed51e5098374d9f1dfe93270fa864a6390689"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x55db871bed5c4ae5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$VIDIOC_G_PRIORITY(r7, 0x80045643, 0x1)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="9a82ed829c0cc4745660b8ab89da847f97d34cf87511735f78d732faac8d5c64170a8e2e5999f03be1f9d7000000018000000092c1d44978bd72e344c1917c304b44d15189e2a5073cf776f2c4a31338905704e553532c75429a352c81ca1b92"], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x1a)
bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0xfffffe74)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800)
02:58:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket(0x6, 0x6, 0x20)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', r7})
02:58:42 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x1)
[ 661.087418] FAULT_INJECTION: forcing a failure.
[ 661.087418] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 661.099453] CPU: 1 PID: 17884 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 661.107348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 661.116735] Call Trace:
[ 661.119340] dump_stack+0x142/0x197
[ 661.122985] should_fail.cold+0x10f/0x159
[ 661.127265] ? __might_sleep+0x93/0xb0
[ 661.131166] __alloc_pages_nodemask+0x1d6/0x7a0
02:58:42 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x0, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x0)
[ 661.135851] ? __alloc_pages_slowpath+0x2930/0x2930
[ 661.141179] ? __lock_is_held+0xb6/0x140
[ 661.145249] ? check_preemption_disabled+0x3c/0x250
[ 661.150288] alloc_pages_current+0xec/0x1e0
[ 661.154638] __get_free_pages+0xf/0x40
[ 661.158539] get_zeroed_page+0x11/0x20
[ 661.162472] get_image_page+0x1c/0x140
[ 661.166403] alloc_rtree_node+0x41/0xa0
[ 661.170483] memory_bm_create+0x3bf/0x530
[ 661.174774] create_basic_memory_bitmaps+0x94/0x130
[ 661.179806] snapshot_open+0x378/0x400
[ 661.183703] ? snapshot_release+0x230/0x230
[ 661.188040] ? snapshot_release+0x230/0x230
[ 661.192376] misc_open+0x34f/0x480
[ 661.195965] ? misc_devnode+0x130/0x130
[ 661.199948] chrdev_open+0x207/0x590
[ 661.203675] ? cdev_put.part.0+0x50/0x50
[ 661.207753] ? security_file_open+0x89/0x190
[ 661.212178] do_dentry_open+0x73b/0xeb0
[ 661.216160] ? cdev_put.part.0+0x50/0x50
[ 661.220219] vfs_open+0x105/0x220
[ 661.223667] path_openat+0x8bd/0x3f70
[ 661.227462] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 661.232830] ? trace_hardirqs_on+0x10/0x10
[ 661.237086] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 661.237502] FAULT_INJECTION: forcing a failure.
[ 661.237502] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 661.241761] ? __lock_is_held+0xb6/0x140
[ 661.241773] ? save_trace+0x290/0x290
[ 661.241789] ? __alloc_fd+0x1d4/0x4a0
[ 661.241801] do_filp_open+0x18e/0x250
[ 661.241810] ? __alloc_fd+0x1d4/0x4a0
[ 661.241819] ? may_open_dev+0xe0/0xe0
[ 661.241838] ? do_raw_spin_unlock+0x174/0x260
[ 661.241851] ? _raw_spin_unlock+0x2d/0x50
[ 661.241860] ? __alloc_fd+0x1d4/0x4a0
[ 661.241884] do_sys_open+0x2c5/0x430
[ 661.241897] ? filp_open+0x70/0x70
[ 661.241917] SyS_openat+0x30/0x40
[ 661.241936] ? SyS_open+0x40/0x40
[ 661.241951] do_syscall_64+0x1e8/0x640
[ 661.241961] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 661.312249] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 661.317438] RIP: 0033:0x45b349
[ 661.320617] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 661.328318] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 661.335696] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 661.342959] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 661.350227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 661.357528] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000001a
[ 661.364810] CPU: 0 PID: 17851 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0
[ 661.372700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 661.382060] Call Trace:
[ 661.384659] dump_stack+0x142/0x197
[ 661.388303] should_fail.cold+0x10f/0x159
[ 661.392463] ? save_trace+0x290/0x290
[ 661.396272] __alloc_pages_nodemask+0x1d6/0x7a0
[ 661.400947] ? find_held_lock+0x35/0x130
[ 661.405016] ? __alloc_pages_slowpath+0x2930/0x2930
[ 661.410048] ? lock_downgrade+0x740/0x740
[ 661.414209] alloc_pages_current+0xec/0x1e0
[ 661.418538] __get_free_pages+0xf/0x40
[ 661.422431] __tlb_remove_page_size+0x2c5/0x4f0
[ 661.427110] unmap_page_range+0xb59/0x19f0
[ 661.431373] ? vm_normal_page_pmd+0x360/0x360
[ 661.435873] ? uprobe_munmap+0x94/0x210
[ 661.439859] unmap_single_vma+0x15d/0x2c0
[ 661.444022] unmap_vmas+0xac/0x170
[ 661.447571] exit_mmap+0x285/0x4e0
[ 661.451115] ? SyS_munmap+0x30/0x30
[ 661.454766] ? kmem_cache_free+0x244/0x2b0
[ 661.459010] ? __khugepaged_exit+0xcf/0x3d0
[ 661.463331] ? mm_update_next_owner+0x450/0x5d0
[ 661.467999] mmput+0x114/0x440
[ 661.471183] do_exit+0x952/0x2cd0
[ 661.474630] ? get_signal+0x319/0x1cd0
[ 661.478514] ? mm_update_next_owner+0x5d0/0x5d0
[ 661.483178] do_group_exit+0x111/0x330
[ 661.487066] get_signal+0x381/0x1cd0
[ 661.490779] ? check_preemption_disabled+0x3c/0x250
[ 661.495835] do_signal+0x86/0x19a0
[ 661.499364] ? __might_sleep+0x93/0xb0
[ 661.503240] ? __fget+0x210/0x370
[ 661.506743] ? setup_sigcontext+0x7d0/0x7d0
[ 661.511055] ? cec_receive_msg+0x840/0x840
[ 661.515280] ? do_vfs_ioctl+0xef/0x1060
[ 661.519255] ? selinux_file_mprotect+0x5d0/0x5d0
[ 661.523999] ? lock_downgrade+0x740/0x740
[ 661.528134] ? check_preemption_disabled+0x3c/0x250
[ 661.533141] ? ioctl_preallocate+0x1c0/0x1c0
[ 661.537582] ? kick_process+0xef/0x180
[ 661.541456] ? task_work_add+0x8e/0xf0
[ 661.545341] ? exit_to_usermode_loop+0x3d/0x220
[ 661.550006] exit_to_usermode_loop+0x15c/0x220
[ 661.554705] do_syscall_64+0x4bc/0x640
[ 661.558593] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 661.563433] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 661.568619] RIP: 0033:0x45b349
[ 661.571875] RSP: 002b:00007f499d63ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 661.579580] RAX: fffffffffffffe00 RBX: 00007f499d63b6d4 RCX: 000000000045b349
02:58:42 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x46841, 0x0)
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x9, 0x81})
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:42 executing program 4 (fault-call:1 fault-nth:27):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, {0x5}})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
02:58:42 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
r3 = getpid()
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@upd={0x100, 0x12, 0x20, 0x70bd2d, 0x25dfdbfd, {{'ecb(serpent)\x00'}, [], [], 0x2400, 0x2400}, [{0x8, 0x1, 0x3f}, {0x8, 0x1, 0x6db}, {0x8, 0x1, 0x81}, {0x8, 0x1, 0xc8d}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x10044040)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
ptrace$getenv(0x4201, r3, 0x8, &(0x7f0000000080))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000000c0)={0x3, {{0xa, 0x4e20, 0x7fff, @empty, 0x2}}, {{0xa, 0x4e21, 0x8, @rand_addr="e9aea17110434ac944f0219c05f1d44d", 0x2}}}, 0x108)
02:58:42 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_getattr(0x0, 0x0, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0xfffffda5, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r3, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c", 0x4f}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94bc6f9d185affd95a24eb5c4f075859bacaa149f6883ffe3984", 0xa6}, {&(0x7f0000001340)="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", 0x1dc}], 0x3)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
[ 661.586860] RDX: 0000000020000040 RSI: 00000000c0386106 RDI: 0000000000000005
[ 661.594128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 661.601392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 661.608655] R13: 000000000000033c R14: 00000000004c4622 R15: 0000000000000000
02:58:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x22, 0x100003, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
clock_gettime(0x0, 0x0)
write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0)
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8)
stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0)={0x0, <r8=>0x0}, &(0x7f0000000800)=0xc)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<', r5}}, {@dont_appraise='dont_appraise'}, {@euid_lt={'euid<', r6}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<', r7}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r8}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}})
r9 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00')
sendfile(r4, r9, 0x0, 0x80000007ffffffe)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r9, 0x80045400, &(0x7f00000001c0))
clock_getres(0x4, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00')
clock_gettime(0x0, &(0x7f00000000c0)={<r11=>0x0, <r12=>0x0})
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000300)={0x7d55, 0x2, 0x4, 0x104020, 0x4, {r11, r12/1000+30000}, {0x4, 0x0, 0x0, 0x81, 0x2, 0x2, "a3bc0686"}, 0x7fff, 0x2, @userptr=0x3, 0x8001, 0x0, <r13=>r10})
accept$unix(r13, 0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00')
[ 661.710378] FAULT_INJECTION: forcing a failure.
[ 661.710378] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 661.722632] CPU: 0 PID: 17917 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 661.730538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 661.739901] Call Trace:
[ 661.742486] dump_stack+0x142/0x197
[ 661.746121] should_fail.cold+0x10f/0x159
[ 661.750374] ? __might_sleep+0x93/0xb0
[ 661.754273] __alloc_pages_nodemask+0x1d6/0x7a0
[ 661.758950] ? __alloc_pages_slowpath+0x2930/0x2930
[ 661.763978] ? __lock_is_held+0xb6/0x140
[ 661.768152] ? check_preemption_disabled+0x3c/0x250
[ 661.773183] alloc_pages_current+0xec/0x1e0
[ 661.777595] __get_free_pages+0xf/0x40
[ 661.781487] get_zeroed_page+0x11/0x20
[ 661.785374] get_image_page+0x1c/0x140
[ 661.789264] alloc_rtree_node+0x41/0xa0
[ 661.793233] memory_bm_create+0x3bf/0x530
[ 661.797418] create_basic_memory_bitmaps+0x94/0x130
[ 661.802461] snapshot_open+0x378/0x400
[ 661.806372] ? snapshot_release+0x230/0x230
[ 661.810831] ? misc_open+0xba/0x480
[ 661.814492] ? snapshot_release+0x230/0x230
[ 661.818842] misc_open+0x34f/0x480
[ 661.822407] ? misc_devnode+0x130/0x130
[ 661.826401] chrdev_open+0x207/0x590
[ 661.830141] ? cdev_put.part.0+0x50/0x50
[ 661.834226] ? security_file_open+0x89/0x190
[ 661.838664] do_dentry_open+0x73b/0xeb0
[ 661.842668] ? cdev_put.part.0+0x50/0x50
[ 661.846753] vfs_open+0x105/0x220
[ 661.850211] path_openat+0x8bd/0x3f70
[ 661.854009] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 661.859386] ? trace_hardirqs_on+0x10/0x10
[ 661.863646] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 661.868319] ? __lock_is_held+0xb6/0x140
[ 661.872392] ? save_trace+0x290/0x290
[ 661.876194] ? __alloc_fd+0x1d4/0x4a0
[ 661.880008] do_filp_open+0x18e/0x250
[ 661.883820] ? __alloc_fd+0x1d4/0x4a0
[ 661.887625] ? may_open_dev+0xe0/0xe0
[ 661.891449] ? do_raw_spin_unlock+0x174/0x260
[ 661.895945] ? _raw_spin_unlock+0x2d/0x50
[ 661.900105] ? __alloc_fd+0x1d4/0x4a0
[ 661.903942] do_sys_open+0x2c5/0x430
[ 661.907659] ? filp_open+0x70/0x70
[ 661.911225] SyS_openat+0x30/0x40
[ 661.914692] ? SyS_open+0x40/0x40
[ 661.918149] do_syscall_64+0x1e8/0x640
[ 661.922043] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 661.926906] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 661.932094] RIP: 0033:0x45b349
[ 661.935285] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 661.942994] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 661.950271] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 661.957556] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 661.964855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 661.972132] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000001b
02:58:43 executing program 4 (fault-call:1 fault-nth:28):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 662.073600] FAULT_INJECTION: forcing a failure.
[ 662.073600] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 662.093271] CPU: 0 PID: 17939 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 662.101200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 662.110570] Call Trace:
[ 662.113185] dump_stack+0x142/0x197
[ 662.116904] should_fail.cold+0x10f/0x159
[ 662.121080] ? __might_sleep+0x93/0xb0
[ 662.124997] __alloc_pages_nodemask+0x1d6/0x7a0
[ 662.129691] ? __alloc_pages_slowpath+0x2930/0x2930
[ 662.134741] ? __lock_is_held+0xb6/0x140
[ 662.138826] ? check_preemption_disabled+0x3c/0x250
[ 662.143974] alloc_pages_current+0xec/0x1e0
[ 662.148366] __get_free_pages+0xf/0x40
[ 662.152295] get_zeroed_page+0x11/0x20
[ 662.156206] get_image_page+0x1c/0x140
[ 662.160119] alloc_rtree_node+0x41/0xa0
[ 662.164126] memory_bm_create+0x3bf/0x530
[ 662.168354] create_basic_memory_bitmaps+0x94/0x130
[ 662.173420] snapshot_open+0x378/0x400
[ 662.177328] ? snapshot_release+0x230/0x230
[ 662.181668] ? snapshot_release+0x230/0x230
[ 662.186009] misc_open+0x34f/0x480
[ 662.189567] ? misc_devnode+0x130/0x130
[ 662.193569] chrdev_open+0x207/0x590
[ 662.197314] ? cdev_put.part.0+0x50/0x50
[ 662.201404] ? security_file_open+0x89/0x190
[ 662.205835] do_dentry_open+0x73b/0xeb0
[ 662.209831] ? cdev_put.part.0+0x50/0x50
[ 662.213917] vfs_open+0x105/0x220
[ 662.217397] path_openat+0x8bd/0x3f70
[ 662.221210] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 662.226615] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 662.231294] ? __lock_is_held+0xb6/0x140
[ 662.235369] ? save_trace+0x290/0x290
[ 662.239195] ? __alloc_fd+0x1d4/0x4a0
[ 662.243023] do_filp_open+0x18e/0x250
[ 662.246845] ? __alloc_fd+0x1d4/0x4a0
[ 662.250775] ? may_open_dev+0xe0/0xe0
[ 662.254616] ? do_raw_spin_unlock+0x174/0x260
[ 662.259137] ? _raw_spin_unlock+0x2d/0x50
[ 662.263308] ? __alloc_fd+0x1d4/0x4a0
[ 662.267150] do_sys_open+0x2c5/0x430
[ 662.270891] ? filp_open+0x70/0x70
[ 662.274463] SyS_openat+0x30/0x40
[ 662.277929] ? SyS_open+0x40/0x40
[ 662.281423] do_syscall_64+0x1e8/0x640
[ 662.285323] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 662.290196] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 662.295400] RIP: 0033:0x45b349
[ 662.298600] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 662.306331] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 662.313621] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:43 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0x80007c)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="e60300", 0x3, 0x1000, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x5, r4, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x47fa67b654b22350, r2}])
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000200))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x1170826, &(0x7f0000000700)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize'}}]}})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400e6dc36272de2a1ce4890ec59dd6b7e1803668d3b9d22ae99ae40224dee35ef1076f795d628e651e14b53ef9cd2d74371847ed781add98cc7318bd3359b481ea2b6d35abb3d64c9d66aebc08f7e7b7372fdcce75e5e719e5e88fc57a5326edf4273ec16ee48ec66075ad2320ba85265eeb1ce3c2e480471168c7b0a4a476f4734472dae50a6d1034db1f538d00cf82c1d350aeb0e7572d0e1dbfffc7352c25b893cb19f4a863fe8", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0508"])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12269523a4425758ee956e46", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030b70e0000303030302c757365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020003)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00')
02:58:43 executing program 5:
r0 = socket$nl_generic(0xa, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x438, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x2c, 0x49, [0xfac0b, 0xfac08, 0xfac04, 0xfac09, 0xfac0d, 0xfac02, 0xfac02, 0xfac06, 0xfac0c, 0xfac08]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x0, @link_local}]}, @NL80211_ATTR_IE={0x3c6, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0x1002)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-monitor\x00', 0x40002, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000600)={0x3, 0x1})
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x1b, &(0x7f0000000ff0), 0x7106)
[ 662.320907] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 662.328196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 662.335583] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000001c
02:58:43 executing program 4 (fault-call:1 fault-nth:29):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 662.435857] FAULT_INJECTION: forcing a failure.
[ 662.435857] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 662.456366] CPU: 0 PID: 17948 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 662.464290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 662.473654] Call Trace:
[ 662.476248] dump_stack+0x142/0x197
[ 662.479881] should_fail.cold+0x10f/0x159
[ 662.484154] ? __might_sleep+0x93/0xb0
[ 662.488048] __alloc_pages_nodemask+0x1d6/0x7a0
[ 662.492736] ? __alloc_pages_slowpath+0x2930/0x2930
[ 662.497754] ? __lock_is_held+0xb6/0x140
[ 662.501824] ? check_preemption_disabled+0x3c/0x250
[ 662.506859] alloc_pages_current+0xec/0x1e0
[ 662.511196] __get_free_pages+0xf/0x40
[ 662.515078] get_zeroed_page+0x11/0x20
[ 662.518975] get_image_page+0x1c/0x140
[ 662.522864] alloc_rtree_node+0x41/0xa0
[ 662.526839] memory_bm_create+0x3bf/0x530
[ 662.531013] create_basic_memory_bitmaps+0x94/0x130
[ 662.536033] snapshot_open+0x378/0x400
[ 662.539945] ? snapshot_release+0x230/0x230
[ 662.544278] ? snapshot_release+0x230/0x230
[ 662.549560] misc_open+0x34f/0x480
[ 662.553128] ? misc_devnode+0x130/0x130
[ 662.557124] chrdev_open+0x207/0x590
[ 662.560852] ? cdev_put.part.0+0x50/0x50
[ 662.564945] ? security_file_open+0x89/0x190
[ 662.569354] do_dentry_open+0x73b/0xeb0
[ 662.573344] ? cdev_put.part.0+0x50/0x50
[ 662.577416] vfs_open+0x105/0x220
[ 662.580884] path_openat+0x8bd/0x3f70
[ 662.584690] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 662.590086] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 662.594773] ? __lock_is_held+0xb6/0x140
[ 662.598834] ? save_trace+0x290/0x290
[ 662.602635] ? __alloc_fd+0x1d4/0x4a0
[ 662.606435] do_filp_open+0x18e/0x250
[ 662.610231] ? __alloc_fd+0x1d4/0x4a0
[ 662.614110] ? may_open_dev+0xe0/0xe0
[ 662.617943] ? do_raw_spin_unlock+0x174/0x260
[ 662.622454] ? _raw_spin_unlock+0x2d/0x50
[ 662.626603] ? __alloc_fd+0x1d4/0x4a0
[ 662.630416] do_sys_open+0x2c5/0x430
[ 662.634136] ? filp_open+0x70/0x70
[ 662.637707] SyS_openat+0x30/0x40
[ 662.641153] ? SyS_open+0x40/0x40
[ 662.644605] do_syscall_64+0x1e8/0x640
[ 662.648499] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 662.653345] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 662.658685] RIP: 0033:0x45b349
[ 662.661879] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 662.669613] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 662.676884] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 662.684162] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 662.691436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 662.698723] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000001d
02:58:43 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0xb, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x7, 0x14, 0x7, 0x3, 0x0, [{@empty}, {@loopback}]}, @timestamp={0x7, 0x4}]}}}}}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'em1'}, {}, {}], 0xa, "6b83e31ea90ce8267513aca0ca6614af2694dd1e9cc473a941975a8ffd85abf60681b47f605f0e7a54bcb061114a7ad057cdf4b179a5189de7f5eaabc8d54acb785855544b776ef09cfd137a4c5f0587c97a88da6751dbb67370f245db8311ebc3adfc404bdf2a133cf4206872de72cbe818cca436035683b60270c82fc30ea2778c0d1cc45017c207e979fbbc426f690f89e29898f4f7bf3e7a61bc16bb19fd9db9807f37a71931763a35342c8f56bbdfb49a7e9c1fd6cc0eb708dfab81d059f218f6f8549ee93b3fb24e94c4ae158f"}, 0xe1)
02:58:43 executing program 4 (fault-call:1 fault-nth:30):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 662.905980] FAULT_INJECTION: forcing a failure.
[ 662.905980] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 662.923376] CPU: 0 PID: 17966 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 662.931302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 662.940674] Call Trace:
[ 662.943292] dump_stack+0x142/0x197
[ 662.946960] should_fail.cold+0x10f/0x159
[ 662.951129] ? __might_sleep+0x93/0xb0
[ 662.955042] __alloc_pages_nodemask+0x1d6/0x7a0
[ 662.959744] ? __alloc_pages_slowpath+0x2930/0x2930
[ 662.964794] ? __lock_is_held+0xb6/0x140
[ 662.968875] ? check_preemption_disabled+0x3c/0x250
[ 662.973922] alloc_pages_current+0xec/0x1e0
[ 662.978274] __get_free_pages+0xf/0x40
[ 662.982296] get_zeroed_page+0x11/0x20
[ 662.986303] get_image_page+0x1c/0x140
[ 662.990220] alloc_rtree_node+0x41/0xa0
[ 662.994269] memory_bm_create+0x3bf/0x530
[ 662.998431] create_basic_memory_bitmaps+0x94/0x130
[ 663.003447] snapshot_open+0x378/0x400
[ 663.007330] ? snapshot_release+0x230/0x230
[ 663.011656] ? snapshot_release+0x230/0x230
[ 663.015975] misc_open+0x34f/0x480
[ 663.019560] ? misc_devnode+0x130/0x130
[ 663.023544] chrdev_open+0x207/0x590
[ 663.027252] ? cdev_put.part.0+0x50/0x50
[ 663.031308] ? security_file_open+0x89/0x190
[ 663.035729] do_dentry_open+0x73b/0xeb0
[ 663.039708] ? cdev_put.part.0+0x50/0x50
[ 663.043780] vfs_open+0x105/0x220
[ 663.047394] path_openat+0x8bd/0x3f70
[ 663.051189] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 663.056604] ? trace_hardirqs_on+0x10/0x10
[ 663.060859] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 663.065535] ? __lock_is_held+0xb6/0x140
[ 663.069599] ? save_trace+0x290/0x290
[ 663.073466] ? __alloc_fd+0x1d4/0x4a0
[ 663.077334] do_filp_open+0x18e/0x250
[ 663.081135] ? __alloc_fd+0x1d4/0x4a0
[ 663.084941] ? may_open_dev+0xe0/0xe0
[ 663.088751] ? do_raw_spin_unlock+0x174/0x260
[ 663.093242] ? _raw_spin_unlock+0x2d/0x50
[ 663.097409] ? __alloc_fd+0x1d4/0x4a0
[ 663.101270] do_sys_open+0x2c5/0x430
[ 663.104983] ? filp_open+0x70/0x70
[ 663.108535] SyS_openat+0x30/0x40
[ 663.112034] ? SyS_open+0x40/0x40
[ 663.115482] do_syscall_64+0x1e8/0x640
[ 663.119360] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 663.124215] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 663.129396] RIP: 0033:0x45b349
[ 663.132572] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 663.140280] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 663.147551] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:44 executing program 0:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0xc, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e20, 0x2, 'wlc\x00', 0x1, 0xffffffff, 0x4b}, {@remote, 0x4e22, 0x4, 0x7f, 0x1, 0x4}}, 0x44)
syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@check_relaxed='check=relaxed'}]})
r3 = accept(0xffffffffffffffff, &(0x7f0000000140)=@nfc_llcp, &(0x7f0000000000)=0x80)
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x80000)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000300))
02:58:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=<r4=>0x0)
perf_event_open(0x0, r4, 0x6, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x1a7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x803, 0xa0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
connect(r5, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x11, r6, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000200))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000900)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000340)=0x37)
stat(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
stat(0x0, 0x0)
stat(&(0x7f0000000440)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000bc0))
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r8 = socket$inet6_dccp(0xa, 0x6, 0x0)
lseek(r8, 0x7ffffc, 0x3)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r12 = accept(r11, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r13)
r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r15=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r13, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r15}}, 0x18)
sendmmsg$alg(r13, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f00000003c0)=[@iv={0x28, 0x117, 0x2, 0x12, "64fe043bd54b683ad0b24e1c97055091218d"}], 0x28}], 0x1, 0x0)
recvmsg(r12, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0xfcec}], 0x1}, 0x0)
connect$inet6(r12, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
socket$inet6(0xa, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
02:58:44 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0), 0x0)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0xff0b, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0xff0b, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r2=>0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x1, r2})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000800)=""/147, 0x93}, 0x2060)
02:58:44 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000)
shutdown(r0, 0x0)
02:58:44 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20800, 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000040))
02:58:44 executing program 4 (fault-call:1 fault-nth:31):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 663.154823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 663.162222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 663.169501] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000001e
[ 663.252829] FAULT_INJECTION: forcing a failure.
[ 663.252829] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 663.284617] CPU: 0 PID: 17981 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 663.292577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
02:58:44 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r0, 0x0)
02:58:44 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000000)={0x8, 'veth1_vlan\x00', {'hsr0\x00'}, 0x8})
[ 663.301949] Call Trace:
[ 663.304556] dump_stack+0x142/0x197
[ 663.308227] should_fail.cold+0x10f/0x159
[ 663.312400] ? __might_sleep+0x93/0xb0
[ 663.316305] __alloc_pages_nodemask+0x1d6/0x7a0
[ 663.321004] ? __alloc_pages_slowpath+0x2930/0x2930
[ 663.326048] ? __lock_is_held+0xb6/0x140
[ 663.330128] ? check_preemption_disabled+0x3c/0x250
[ 663.335209] alloc_pages_current+0xec/0x1e0
[ 663.339586] __get_free_pages+0xf/0x40
[ 663.343526] get_zeroed_page+0x11/0x20
[ 663.347433] get_image_page+0x1c/0x140
[ 663.351367] alloc_rtree_node+0x41/0xa0
[ 663.355404] memory_bm_create+0x3bf/0x530
[ 663.359584] create_basic_memory_bitmaps+0x94/0x130
[ 663.364629] snapshot_open+0x378/0x400
[ 663.368546] ? snapshot_release+0x230/0x230
[ 663.372883] ? snapshot_release+0x230/0x230
[ 663.377229] misc_open+0x34f/0x480
[ 663.380789] ? misc_devnode+0x130/0x130
[ 663.384771] chrdev_open+0x207/0x590
[ 663.388491] ? cdev_put.part.0+0x50/0x50
[ 663.392575] ? security_file_open+0x89/0x190
[ 663.397068] do_dentry_open+0x73b/0xeb0
[ 663.401142] ? cdev_put.part.0+0x50/0x50
[ 663.405243] vfs_open+0x105/0x220
[ 663.408715] path_openat+0x8bd/0x3f70
[ 663.412558] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 663.417932] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 663.422597] ? __lock_is_held+0xb6/0x140
[ 663.426653] ? save_trace+0x290/0x290
[ 663.430524] ? __alloc_fd+0x1d4/0x4a0
[ 663.434325] do_filp_open+0x18e/0x250
[ 663.438115] ? __alloc_fd+0x1d4/0x4a0
[ 663.441907] ? may_open_dev+0xe0/0xe0
[ 663.445756] ? do_raw_spin_unlock+0x174/0x260
[ 663.450251] ? _raw_spin_unlock+0x2d/0x50
[ 663.454405] ? __alloc_fd+0x1d4/0x4a0
[ 663.458232] do_sys_open+0x2c5/0x430
[ 663.461953] ? filp_open+0x70/0x70
[ 663.465498] SyS_openat+0x30/0x40
[ 663.468954] ? SyS_open+0x40/0x40
[ 663.472413] do_syscall_64+0x1e8/0x640
[ 663.476298] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 663.481140] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 663.486323] RIP: 0033:0x45b349
[ 663.489523] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 663.497228] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 663.504490] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 663.511843] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 663.519106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 663.526369] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000001f
02:58:44 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r4 = socket(0x1, 0x800000003, 0x0)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffe35, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000024006d7f528e00000000000000000058", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100686866000c00020008000200000000335a18edbb00"], 0x38}}, 0x0)
02:58:44 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil)
futex(&(0x7f00000004c0)=0x2, 0x3, 0xfffffffd, 0x0, &(0x7f0000001680), 0x2)
02:58:44 executing program 4 (fault-call:1 fault-nth:32):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 663.618841] FAULT_INJECTION: forcing a failure.
[ 663.618841] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 663.631116] CPU: 1 PID: 18009 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 663.639015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 663.648370] Call Trace:
[ 663.650973] dump_stack+0x142/0x197
[ 663.654606] should_fail.cold+0x10f/0x159
[ 663.658758] ? __might_sleep+0x93/0xb0
[ 663.662679] __alloc_pages_nodemask+0x1d6/0x7a0
02:58:44 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x800, 0x3, &(0x7f0000000380)=[{&(0x7f0000000280)="a86c144b2c515dcbe4706d16ae3e657f377132480a11f8ebf58e6ac98af0d5fdc9d9b91acfc04845012fb472cfec527894d7110d2069b65719830ae5b7caab3b60e266e358b043a5d11c930b8c1a2a45133690cc2f50344976325f5627869710185738f2bff24a2373f905bc3ffad7b5ce19dc17da0082228f348a863d5926ed54cae965eb8b67679ba2dc113e6b004d90dba2f38162e57f45a82dc0fa35c81fa9d74990a1b62abe86a5598179a3e95c15dabfcbcd8e84cc2a6e130bd262b2451d0ad0f8150c091af77e4d10efaac47b17c1ef64545bce166f8a69189a6c3410706099703faf7196", 0xe8, 0x5}, {&(0x7f0000000400)="8e2899c1a71fff859bdce08f49d5fe1e834cbdc5d1f7d076d29293c5a6f2508ca2552868ef4d628a7d07a30bbf4001195236623978398720d8b604e590e6d617f8e7ef6bc44cf1001a4497bbec4f4652a7b1582f0d2379109b564de31f00a9fe5c714cec947fe34c86168cc0440acbc044729b2d89036f3cbf1e326ac601ade27ded01cf45f4bfa87e0744cf50c0023e3ba43643c5c4ca5a3429ded1d96269b9577d94380ea925d355f03ca5f33a0e77e84b486dbaf177e9a93d8d3f4d00c3af06cdbe9aa1fc487488f968815b055f9381", 0xd1, 0x6}, {&(0x7f0000000740)="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", 0xfed, 0x1000}], 0x20000, &(0x7f0000000580)={[{@shortname_lower='shortname=lower'}, {@utf8='utf8=1'}, {@shortname_win95='shortname=win95'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}], [{@hash='hash'}]})
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000040))
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x0, 0x188}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="d8db98"], 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000003, 0xff], 0x1f004})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x0, 0x120, 0x0, 0x120, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, '\x00', 'ip6gre0\x00'}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ip={@local, @local, 0x0, 0x0, '\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c2)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, r6}, 0xc)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)={r0})
[ 663.667355] ? __alloc_pages_slowpath+0x2930/0x2930
[ 663.672379] ? __lock_is_held+0xb6/0x140
[ 663.676442] ? check_preemption_disabled+0x3c/0x250
[ 663.681469] alloc_pages_current+0xec/0x1e0
[ 663.685799] __get_free_pages+0xf/0x40
[ 663.689691] get_zeroed_page+0x11/0x20
[ 663.693581] get_image_page+0x1c/0x140
[ 663.697471] alloc_rtree_node+0x41/0xa0
[ 663.701452] memory_bm_create+0x3bf/0x530
[ 663.705653] create_basic_memory_bitmaps+0x94/0x130
[ 663.710670] snapshot_open+0x378/0x400
[ 663.714558] ? preempt_schedule_common+0x4f/0xe0
[ 663.719314] ? snapshot_release+0x230/0x230
[ 663.723646] ? snapshot_release+0x230/0x230
[ 663.727979] misc_open+0x34f/0x480
[ 663.731528] ? misc_devnode+0x130/0x130
[ 663.735503] chrdev_open+0x207/0x590
[ 663.739203] ? cdev_put.part.0+0x50/0x50
[ 663.743253] ? security_file_open+0x89/0x190
[ 663.747661] do_dentry_open+0x73b/0xeb0
[ 663.751630] ? cdev_put.part.0+0x50/0x50
[ 663.755700] vfs_open+0x105/0x220
[ 663.759159] path_openat+0x8bd/0x3f70
[ 663.762959] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 663.768311] ? trace_hardirqs_on+0x10/0x10
[ 663.772551] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 663.777210] ? __lock_is_held+0xb6/0x140
[ 663.781391] ? save_trace+0x290/0x290
[ 663.785189] ? __alloc_fd+0x1d4/0x4a0
[ 663.788998] do_filp_open+0x18e/0x250
[ 663.792791] ? __alloc_fd+0x1d4/0x4a0
[ 663.796591] ? may_open_dev+0xe0/0xe0
[ 663.800384] ? do_raw_spin_unlock+0x174/0x260
[ 663.804871] ? _raw_spin_unlock+0x2d/0x50
[ 663.809001] ? __alloc_fd+0x1d4/0x4a0
[ 663.812809] do_sys_open+0x2c5/0x430
[ 663.816622] ? filp_open+0x70/0x70
[ 663.820159] ? firmware_map_remove+0x196/0x196
[ 663.824729] SyS_openat+0x30/0x40
[ 663.828170] ? SyS_open+0x40/0x40
[ 663.831627] do_syscall_64+0x1e8/0x640
[ 663.835535] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 663.840389] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 663.845572] RIP: 0033:0x45b349
[ 663.848763] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 663.856457] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
02:58:45 executing program 4 (fault-call:1 fault-nth:33):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 663.863720] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 663.870982] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 663.878244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 663.885499] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000020
02:58:45 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0)
syz_open_procfs(0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000080)
perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r7)
r8 = socket$inet(0x10, 0x2000000002, 0x0)
recvmmsg(r8, 0x0, 0x0, 0x42, 0x0)
ioctl$sock_SIOCDELDLCI(r8, 0x8981, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@remote, @in6=@remote}}, {{@in6}, 0x0, @in6=@loopback}}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="23b54f8ed668cf0eac41fb87c92c362c08a5aa30f544194adb6ebe6a4b22360be946817eadb4d042b3e2460b5909caabf7b022bb2789ad4a38b4d1cd40eec136766e36c2415a8ec509f4a30f23d0d92fdf68253cb1a9259384e6a25c6ebb4027d3a413929fd20cb2d58af981844adb7fbabcda0fc884e268705c765045c6f155714701cc616f3e2701fd80df742d1414a44c6d1c23016e98ea0f303d86695ea8c40f541ba9885e6420776f31b7d0ea1365822090688d40bc0e85311138336e2ad4e2508f0cfa02d2e65b5366844d1ea8d8e4e65515a4c8313fb1d869eaf02c4fd19d82a9e1a64252"], 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
[ 663.970486] FAULT_INJECTION: forcing a failure.
[ 663.970486] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 663.987311] CPU: 1 PID: 18022 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 663.995229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 664.004584] Call Trace:
[ 664.007187] dump_stack+0x142/0x197
[ 664.010833] should_fail.cold+0x10f/0x159
[ 664.014986] ? __might_sleep+0x93/0xb0
[ 664.018873] __alloc_pages_nodemask+0x1d6/0x7a0
[ 664.023542] ? __alloc_pages_slowpath+0x2930/0x2930
[ 664.028558] ? __lock_is_held+0xb6/0x140
[ 664.032615] ? check_preemption_disabled+0x3c/0x250
[ 664.037658] alloc_pages_current+0xec/0x1e0
[ 664.041974] __get_free_pages+0xf/0x40
[ 664.045850] get_zeroed_page+0x11/0x20
[ 664.049726] get_image_page+0x1c/0x140
[ 664.053604] alloc_rtree_node+0x41/0xa0
[ 664.057586] memory_bm_create+0x3bf/0x530
[ 664.061730] create_basic_memory_bitmaps+0x94/0x130
[ 664.066739] snapshot_open+0x378/0x400
[ 664.070616] ? snapshot_release+0x230/0x230
[ 664.074924] ? snapshot_release+0x230/0x230
[ 664.079235] misc_open+0x34f/0x480
[ 664.082764] ? misc_devnode+0x130/0x130
[ 664.086723] chrdev_open+0x207/0x590
[ 664.090425] ? cdev_put.part.0+0x50/0x50
[ 664.094474] ? security_file_open+0x89/0x190
[ 664.098874] do_dentry_open+0x73b/0xeb0
[ 664.102838] ? cdev_put.part.0+0x50/0x50
[ 664.106891] vfs_open+0x105/0x220
[ 664.110335] path_openat+0x8bd/0x3f70
[ 664.114141] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 664.119509] ? trace_hardirqs_on+0x10/0x10
[ 664.123738] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 664.128399] ? __lock_is_held+0xb6/0x140
[ 664.132450] ? save_trace+0x290/0x290
[ 664.136241] ? __alloc_fd+0x1d4/0x4a0
[ 664.140036] do_filp_open+0x18e/0x250
[ 664.143825] ? __alloc_fd+0x1d4/0x4a0
[ 664.147621] ? may_open_dev+0xe0/0xe0
[ 664.151415] ? do_raw_spin_unlock+0x174/0x260
[ 664.155898] ? _raw_spin_unlock+0x2d/0x50
[ 664.160042] ? __alloc_fd+0x1d4/0x4a0
[ 664.163842] do_sys_open+0x2c5/0x430
[ 664.167546] ? filp_open+0x70/0x70
[ 664.171083] SyS_openat+0x30/0x40
[ 664.176332] ? SyS_open+0x40/0x40
[ 664.179779] do_syscall_64+0x1e8/0x640
[ 664.183656] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 664.188492] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 664.193670] RIP: 0033:0x45b349
[ 664.196967] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 664.204676] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 664.211952] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 664.219209] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 664.226467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 664.233724] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000021
02:58:45 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
userfaultfd(0x80000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
r2 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)
socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x4}, {}, 0x3, 0x2, 0x0, 0x0, 0x2}, {{@in6=@empty}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x2}}, 0xe8)
r3 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
socket$inet6(0xa, 0x803, 0x2)
getdents(r1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000040))
r4 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000))
02:58:45 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
02:58:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
syz_open_dev$video4linux(&(0x7f0000000900)='/dev/v4l-subdev#\x00', 0x1, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000040))
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000000c0))
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vsock\x00', 0x40c0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001180)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x58, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x13}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44044}, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xba59}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x4004)
02:58:45 executing program 4 (fault-call:1 fault-nth:34):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:45 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000002c0)={0x3, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]})
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}])
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64650100008000000000303030303030303030303130303330302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fowner_eq={'fowner'}}]}})
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="000eedc8050000020000000041aafb"], 0xf)
fallocate(r6, 0x45, 0x0, 0x8020003)
ioctl$TIOCGPGRP(r2, 0x540f, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
02:58:45 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0)
syz_open_procfs(0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000080)
perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r7)
r8 = socket$inet(0x10, 0x2000000002, 0x0)
recvmmsg(r8, 0x0, 0x0, 0x42, 0x0)
ioctl$sock_SIOCDELDLCI(r8, 0x8981, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@remote, @in6=@remote}}, {{@in6}, 0x0, @in6=@loopback}}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="23b54f8ed668cf0eac41fb87c92c362c08a5aa30f544194adb6ebe6a4b22360be946817eadb4d042b3e2460b5909caabf7b022bb2789ad4a38b4d1cd40eec136766e36c2415a8ec509f4a30f23d0d92fdf68253cb1a9259384e6a25c6ebb4027d3a413929fd20cb2d58af981844adb7fbabcda0fc884e268705c765045c6f155714701cc616f3e2701fd80df742d1414a44c6d1c23016e98ea0f303d86695ea8c40f541ba9885e6420776f31b7d0ea1365822090688d40bc0e85311138336e2ad4e2508f0cfa02d2e65b5366844d1ea8d8e4e65515a4c8313fb1d869eaf02c4fd19d82a9e1a64252"], 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
02:58:45 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
shutdown(r0, 0x0)
[ 664.413645] FAULT_INJECTION: forcing a failure.
[ 664.413645] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 664.436053] CPU: 1 PID: 18051 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 664.443977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 664.453338] Call Trace:
[ 664.455938] dump_stack+0x142/0x197
[ 664.459691] should_fail.cold+0x10f/0x159
02:58:45 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000), 0x1)
[ 664.463876] ? __might_sleep+0x93/0xb0
[ 664.467775] __alloc_pages_nodemask+0x1d6/0x7a0
[ 664.472494] ? __alloc_pages_slowpath+0x2930/0x2930
[ 664.477611] ? __lock_is_held+0xb6/0x140
[ 664.481676] ? check_preemption_disabled+0x3c/0x250
[ 664.486700] alloc_pages_current+0xec/0x1e0
[ 664.491031] __get_free_pages+0xf/0x40
[ 664.494925] get_zeroed_page+0x11/0x20
[ 664.498817] get_image_page+0x1c/0x140
[ 664.502714] alloc_rtree_node+0x41/0xa0
[ 664.506695] memory_bm_create+0x3bf/0x530
[ 664.510864] create_basic_memory_bitmaps+0x94/0x130
[ 664.515885] snapshot_open+0x378/0x400
[ 664.519776] ? snapshot_release+0x230/0x230
[ 664.524105] ? snapshot_release+0x230/0x230
[ 664.528436] misc_open+0x34f/0x480
[ 664.531983] ? misc_devnode+0x130/0x130
[ 664.535958] chrdev_open+0x207/0x590
[ 664.539679] ? cdev_put.part.0+0x50/0x50
[ 664.543747] ? security_file_open+0x89/0x190
[ 664.548160] do_dentry_open+0x73b/0xeb0
[ 664.552229] ? cdev_put.part.0+0x50/0x50
[ 664.556299] vfs_open+0x105/0x220
[ 664.559760] path_openat+0x8bd/0x3f70
02:58:45 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24)
shutdown(r0, 0x0)
[ 664.563559] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 664.568927] ? trace_hardirqs_on+0x10/0x10
[ 664.573178] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 664.577850] ? __lock_is_held+0xb6/0x140
[ 664.581918] ? save_trace+0x290/0x290
[ 664.585732] ? __alloc_fd+0x1d4/0x4a0
[ 664.589540] do_filp_open+0x18e/0x250
[ 664.593340] ? __alloc_fd+0x1d4/0x4a0
[ 664.597144] ? may_open_dev+0xe0/0xe0
[ 664.600956] ? do_raw_spin_unlock+0x174/0x260
[ 664.605457] ? _raw_spin_unlock+0x2d/0x50
[ 664.609613] ? __alloc_fd+0x1d4/0x4a0
[ 664.613432] do_sys_open+0x2c5/0x430
[ 664.617150] ? filp_open+0x70/0x70
[ 664.620705] SyS_openat+0x30/0x40
[ 664.624159] ? SyS_open+0x40/0x40
[ 664.627617] do_syscall_64+0x1e8/0x640
[ 664.631513] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 664.636366] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 664.641560] RIP: 0033:0x45b349
[ 664.644754] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 664.652472] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
02:58:45 executing program 4 (fault-call:1 fault-nth:35):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:45 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0)
syz_open_procfs(0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000080)
perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r7)
r8 = socket$inet(0x10, 0x2000000002, 0x0)
recvmmsg(r8, 0x0, 0x0, 0x42, 0x0)
ioctl$sock_SIOCDELDLCI(r8, 0x8981, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@remote, @in6=@remote}}, {{@in6}, 0x0, @in6=@loopback}}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="23b54f8ed668cf0eac41fb87c92c362c08a5aa30f544194adb6ebe6a4b22360be946817eadb4d042b3e2460b5909caabf7b022bb2789ad4a38b4d1cd40eec136766e36c2415a8ec509f4a30f23d0d92fdf68253cb1a9259384e6a25c6ebb4027d3a413929fd20cb2d58af981844adb7fbabcda0fc884e268705c765045c6f155714701cc616f3e2701fd80df742d1414a44c6d1c23016e98ea0f303d86695ea8c40f541ba9885e6420776f31b7d0ea1365822090688d40bc0e85311138336e2ad4e2508f0cfa02d2e65b5366844d1ea8d8e4e65515a4c8313fb1d869eaf02c4fd19d82a9e1a64252"], 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
[ 664.659746] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 664.667016] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 664.674286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 664.681557] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000022
02:58:45 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x20, 0x4, 0x2}}, 0x14)
[ 664.886029] FAULT_INJECTION: forcing a failure.
[ 664.886029] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 664.903770] CPU: 0 PID: 18088 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 664.911701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 664.921170] Call Trace:
[ 664.923777] dump_stack+0x142/0x197
[ 664.927430] should_fail.cold+0x10f/0x159
[ 664.931595] ? __might_sleep+0x93/0xb0
[ 664.935503] __alloc_pages_nodemask+0x1d6/0x7a0
[ 664.940193] ? __alloc_pages_slowpath+0x2930/0x2930
[ 664.945228] ? __lock_is_held+0xb6/0x140
[ 664.949307] ? check_preemption_disabled+0x3c/0x250
[ 664.954347] alloc_pages_current+0xec/0x1e0
[ 664.958696] __get_free_pages+0xf/0x40
[ 664.962600] get_zeroed_page+0x11/0x20
[ 664.966505] get_image_page+0x1c/0x140
[ 664.970423] alloc_rtree_node+0x41/0xa0
[ 664.974414] memory_bm_create+0x3bf/0x530
[ 664.978599] create_basic_memory_bitmaps+0x94/0x130
[ 664.983637] snapshot_open+0x378/0x400
[ 664.987545] ? snapshot_release+0x230/0x230
[ 664.991885] ? snapshot_release+0x230/0x230
[ 664.996227] misc_open+0x34f/0x480
[ 664.999783] ? misc_devnode+0x130/0x130
[ 665.003775] chrdev_open+0x207/0x590
[ 665.007510] ? cdev_put.part.0+0x50/0x50
[ 665.011599] ? security_file_open+0x89/0x190
[ 665.016028] do_dentry_open+0x73b/0xeb0
[ 665.020022] ? cdev_put.part.0+0x50/0x50
[ 665.024110] vfs_open+0x105/0x220
[ 665.027583] path_openat+0x8bd/0x3f70
[ 665.031395] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 665.036802] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 665.041489] ? __lock_is_held+0xb6/0x140
[ 665.045572] ? save_trace+0x290/0x290
[ 665.049395] ? __alloc_fd+0x1d4/0x4a0
[ 665.053214] do_filp_open+0x18e/0x250
[ 665.057025] ? __alloc_fd+0x1d4/0x4a0
[ 665.060869] ? may_open_dev+0xe0/0xe0
[ 665.064701] ? do_raw_spin_unlock+0x174/0x260
[ 665.069215] ? _raw_spin_unlock+0x2d/0x50
[ 665.073378] ? __alloc_fd+0x1d4/0x4a0
[ 665.077216] do_sys_open+0x2c5/0x430
[ 665.080949] ? filp_open+0x70/0x70
[ 665.084520] SyS_openat+0x30/0x40
[ 665.087986] ? SyS_open+0x40/0x40
[ 665.091458] do_syscall_64+0x1e8/0x640
[ 665.095362] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 665.100230] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 665.105453] RIP: 0033:0x45b349
[ 665.108650] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 665.116380] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 665.123662] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 665.130942] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 665.138220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 665.145498] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000023
02:58:46 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
userfaultfd(0x80000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
r2 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)
socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x4}, {}, 0x3, 0x2, 0x0, 0x0, 0x2}, {{@in6=@empty}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x2}}, 0xe8)
r3 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
socket$inet6(0xa, 0x803, 0x2)
getdents(r1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000040))
r4 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000))
02:58:46 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x20000, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x604440, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x4000000)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0), 0x2)
shutdown(r0, 0x0)
02:58:46 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x102, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000240)="c9912061b40149f730cf421c38346e7659430252dd2a0ab3993cfd3df4565235c780b4abfe313624dc0e4271bb34d76e4de7e1e14e3093", 0x37}, {&(0x7f00000002c0)="928fbb221a29657965ab6bb2944371ebb9e4e505476801a06d232afadd48c22921160fdb87a642bcc6a4", 0x2a}, {&(0x7f0000000300)="d7d914954eb0a3eb2b54", 0xa}, {&(0x7f0000000680)="f85b9185a447b2714625e7eac063d742cc5fd3e79ba8bd685984b3032b1f10925a0886b49ed614328f6bc1529f23afce8f46889330ef18b0c7a1179ba6756cbe161407afcf74cb7326a709d2504cd280e4b077801808dfa9392ed19d54347b191401c4934f67796f32e2c82eb8d3afc884d7dca6fb949d5cdd84109da9b2597cca78c4c992ec6d3e1bffb07827da4e2ab0cf19eb9222502bc87d31052bb8fd4f3f62d3300f29f636f9e45d3bcb5a766d060cfc2e5d51f21b0cf67db78a070a0cbe7d2e", 0xc3}, {&(0x7f0000000780)="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", 0xff}, {&(0x7f0000000880)="47a3eabe5111465e4e0f3c5de961300b07809bc400ce141e3f341b354f86ea2b50bc28e47e880e3dbabff4be5972f2e2135a840f9637b6d80443b15b285fc8737b4c77cb47f4402a5f7fb6418ecefd5a830a3288f93970a342e6775d7b6a5b6d70cd92e14c6476188e0f809c4d57ea8034c1b422348f726ec5d5e88338fe859a0bc4f058191cbb9989e7c8932b57bd1e01fa", 0x92}, {&(0x7f0000000340)="18f915945437d7a70984916468c7207cc81d867b617a348279530ff408b0d6468de031b8b1bf0888bfc4efdc3f244f6d1f6a778ef1d531e6e8c944", 0x3b}, {&(0x7f0000000940)="6c77b211664cf0a388f1ae8465bd08d3a9ec7a7a2783e254c47c40eae38e9befc33041b24d3b1b9b604693e5dd2e551351f845ce2f87d95bd1334b953d1757409371ab8e10d613d9ce49569f4c0bb7f8c29f4ef8c5ee5820ae589fb1b2a981c1549d7bd74e9f8def04e850a8ecc670964f6a0da5bce400720eac1a7ad469f80401d25100ffa88de6f3403fa02f1025c65e7d4c39f622477052ac1fa17c5f8bbafa8ed5", 0xa3}, {&(0x7f0000000480)="1c98b072f636d68eea14ea862f68ab6c87c14a0db8", 0x15}, {&(0x7f0000000a00)="0f8b30ed4549042cee68541fcba6efe33c0de2a9902a4cefa6a510a2595638fae03bc7eb29a397c3a6c3183a1da8cc5c159cd1258a58d9d279c19d7714ef0239f39c796639174768470897a05546d9a20d31eca294ebd4187f50fa9b3ced05421e21c484a69608b91cbc10af33b0409038c26c1007f1dd59a4cd47f2a70463afde9f82ede08d377188d12beab0f2d645dc5986e7c1e377048e8fbcdf896c9e4c6458a0bce22163989acb80ef02ff7b04187d88edd6b52f56b06c097a939c35d15f962c5614bda272ba9f20470cadc17754b7551318af4e0ee4eacf54", 0xdc}], 0xa, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000180)='security.ima\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0300080000000800b9e46a9b412256ec140a49043870cc8eb76af17110f29ce01e2423ba6546b78828d0b51c0abaab9c0377a8480e61728e2d3d7f455e96246c326604207afdc7c6068dc0ad90a7cc049b1d58a643d6730db6b80f1e8b6d490daee9623bd28d90ac737c54dff9a23411f767ed1742f8f80e9ecd8141e31498a0bd291b29090009e52a40f0a8aa9ddd6c283fb7197e53a8c0e459ef2fd268843f22dd5a75ae920f9e89f1cac16c813b08c8af0be965"], 0xc2, 0x3)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
sched_setattr(r6, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xecb, 0xffffffffffffffe0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = socket$inet6(0xa, 0x3, 0x100000001)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@mcast2, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9f2}, 0xbf, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x714, 0x1}, 0x10)
ioctl$NBD_DO_IT(r8, 0xab03)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000100))
sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0)
syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x101, 0x100)
02:58:46 executing program 4 (fault-call:1 fault-nth:36):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:46 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0)
memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0)
syz_open_procfs(0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000080)
perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r7)
r8 = socket$inet(0x10, 0x2000000002, 0x0)
recvmmsg(r8, 0x0, 0x0, 0x42, 0x0)
ioctl$sock_SIOCDELDLCI(r8, 0x8981, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@remote, @in6=@remote}}, {{@in6}, 0x0, @in6=@loopback}}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="23b54f8ed668cf0eac41fb87c92c362c08a5aa30f544194adb6ebe6a4b22360be946817eadb4d042b3e2460b5909caabf7b022bb2789ad4a38b4d1cd40eec136766e36c2415a8ec509f4a30f23d0d92fdf68253cb1a9259384e6a25c6ebb4027d3a413929fd20cb2d58af981844adb7fbabcda0fc884e268705c765045c6f155714701cc616f3e2701fd80df742d1414a44c6d1c23016e98ea0f303d86695ea8c40f541ba9885e6420776f31b7d0ea1365822090688d40bc0e85311138336e2ad4e2508f0cfa02d2e65b5366844d1ea8d8e4e65515a4c8313fb1d869eaf02c4fd19d82a9e1a64252"], 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
02:58:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000300)={0x3, r5})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x8, @rand_addr="a521256795a64565c1c4a918922ed6c9", 0x671}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="75ec42640f8402d3f531b7abb90a438fbd6c30d84d7118992243b0c459a13a799127f78d3f5dd256be6e31f7f9164db5afada3eb918b17df5b90466ba875e56c746894cbf1b4ae24cbc966daf82e58ded0a28be2660f1b09ecbabaf60ccaa52ee4426f3f699c3fdcf5afb8d8fe7934a8544c0f681b167408516a5d0a", 0x7c}, {&(0x7f0000000180)="f03b10c5933d0dcf5734af6ddc050abc4313f51864e2afe4edd42486924b7b09194cebfe3915cfe87db25c38a4c5936c643a57a081", 0x35}, {&(0x7f00000001c0)="97869dfd587cf4958920132248f5191caf1fff3ab03d98cfe4faf502cf14678d25f105092e28c00707", 0x29}], 0x3, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x30}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @init={0x18, 0x84, 0x0, {0x4, 0x4e54, 0x1f, 0x6}}], 0x50, 0x8000}, 0x40)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r9 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r9, 0xc0386106, &(0x7f0000000040))
[ 665.461776] FAULT_INJECTION: forcing a failure.
[ 665.461776] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 665.478858] CPU: 0 PID: 18110 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 665.486794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 665.496347] Call Trace:
[ 665.498953] dump_stack+0x142/0x197
[ 665.502607] should_fail.cold+0x10f/0x159
[ 665.506769] ? __might_sleep+0x93/0xb0
[ 665.510686] __alloc_pages_nodemask+0x1d6/0x7a0
[ 665.515385] ? __alloc_pages_slowpath+0x2930/0x2930
[ 665.520432] ? __lock_is_held+0xb6/0x140
[ 665.524507] ? check_preemption_disabled+0x3c/0x250
[ 665.529549] alloc_pages_current+0xec/0x1e0
[ 665.533896] __get_free_pages+0xf/0x40
[ 665.537798] get_zeroed_page+0x11/0x20
[ 665.541703] get_image_page+0x1c/0x140
[ 665.545614] alloc_rtree_node+0x41/0xa0
[ 665.549606] memory_bm_create+0x3bf/0x530
[ 665.553794] create_basic_memory_bitmaps+0x94/0x130
[ 665.558835] snapshot_open+0x378/0x400
[ 665.562738] ? snapshot_release+0x230/0x230
[ 665.567082] ? snapshot_release+0x230/0x230
[ 665.571425] misc_open+0x34f/0x480
[ 665.574993] ? misc_devnode+0x130/0x130
[ 665.578980] chrdev_open+0x207/0x590
[ 665.582716] ? cdev_put.part.0+0x50/0x50
[ 665.586794] ? security_file_open+0x89/0x190
[ 665.591226] do_dentry_open+0x73b/0xeb0
[ 665.595219] ? cdev_put.part.0+0x50/0x50
[ 665.599308] vfs_open+0x105/0x220
[ 665.602781] path_openat+0x8bd/0x3f70
[ 665.606597] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 665.612011] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 665.616688] ? __lock_is_held+0xb6/0x140
[ 665.620767] ? save_trace+0x290/0x290
[ 665.624586] ? __alloc_fd+0x1d4/0x4a0
[ 665.628425] do_filp_open+0x18e/0x250
[ 665.632246] ? __alloc_fd+0x1d4/0x4a0
[ 665.636062] ? may_open_dev+0xe0/0xe0
[ 665.639892] ? do_raw_spin_unlock+0x174/0x260
[ 665.644403] ? _raw_spin_unlock+0x2d/0x50
[ 665.648566] ? __alloc_fd+0x1d4/0x4a0
[ 665.652409] do_sys_open+0x2c5/0x430
[ 665.656140] ? filp_open+0x70/0x70
[ 665.659710] SyS_openat+0x30/0x40
[ 665.663169] ? SyS_open+0x40/0x40
[ 665.666641] do_syscall_64+0x1e8/0x640
[ 665.670543] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 665.675408] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 665.680611] RIP: 0033:0x45b349
[ 665.683808] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 665.691533] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 665.698813] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:46 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, r0, 0x81000000)
02:58:46 executing program 4 (fault-call:1 fault-nth:37):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 665.706093] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 665.713380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 665.720661] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000024
[ 665.833487] FAULT_INJECTION: forcing a failure.
[ 665.833487] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 665.855469] CPU: 1 PID: 18135 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 665.863389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 665.872860] Call Trace:
[ 665.875459] dump_stack+0x142/0x197
[ 665.879109] should_fail.cold+0x10f/0x159
[ 665.883264] ? __might_sleep+0x93/0xb0
[ 665.887159] __alloc_pages_nodemask+0x1d6/0x7a0
[ 665.891835] ? __alloc_pages_slowpath+0x2930/0x2930
[ 665.896859] ? __lock_is_held+0xb6/0x140
[ 665.900921] ? check_preemption_disabled+0x3c/0x250
[ 665.905937] alloc_pages_current+0xec/0x1e0
[ 665.910260] __get_free_pages+0xf/0x40
[ 665.914149] get_zeroed_page+0x11/0x20
[ 665.918038] get_image_page+0x1c/0x140
[ 665.921933] alloc_rtree_node+0x41/0xa0
[ 665.925911] memory_bm_create+0x3bf/0x530
[ 665.930073] create_basic_memory_bitmaps+0x94/0x130
[ 665.935095] snapshot_open+0x378/0x400
[ 665.938985] ? snapshot_release+0x230/0x230
[ 665.943309] ? snapshot_release+0x230/0x230
[ 665.947635] misc_open+0x34f/0x480
[ 665.951183] ? misc_devnode+0x130/0x130
[ 665.955165] chrdev_open+0x207/0x590
[ 665.958883] ? cdev_put.part.0+0x50/0x50
[ 665.962971] ? security_file_open+0x89/0x190
[ 665.967386] do_dentry_open+0x73b/0xeb0
[ 665.971364] ? cdev_put.part.0+0x50/0x50
[ 665.975432] vfs_open+0x105/0x220
[ 665.978896] path_openat+0x8bd/0x3f70
[ 665.982700] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 665.988084] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 665.992756] ? __lock_is_held+0xb6/0x140
[ 665.996841] ? save_trace+0x290/0x290
[ 666.000650] ? __alloc_fd+0x1d4/0x4a0
[ 666.004457] do_filp_open+0x18e/0x250
[ 666.008260] ? __alloc_fd+0x1d4/0x4a0
[ 666.012061] ? may_open_dev+0xe0/0xe0
[ 666.015872] ? do_raw_spin_unlock+0x174/0x260
[ 666.020368] ? _raw_spin_unlock+0x2d/0x50
[ 666.024541] ? __alloc_fd+0x1d4/0x4a0
[ 666.028365] do_sys_open+0x2c5/0x430
[ 666.032091] ? filp_open+0x70/0x70
[ 666.035642] SyS_openat+0x30/0x40
[ 666.039096] ? SyS_open+0x40/0x40
[ 666.042559] do_syscall_64+0x1e8/0x640
[ 666.046450] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 666.051302] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 666.056496] RIP: 0033:0x45b349
[ 666.059682] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 666.067392] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 666.074712] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:47 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, r0, 0x81000000)
02:58:47 executing program 1:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x2d5}, 0xc100)
socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1)
[ 666.081997] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 666.089264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 666.096532] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000025
02:58:47 executing program 4 (fault-call:1 fault-nth:38):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:47 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, r0, 0x81000000)
[ 666.205900] FAULT_INJECTION: forcing a failure.
[ 666.205900] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 666.224628] CPU: 0 PID: 18146 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 666.232545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 666.242015] Call Trace:
[ 666.244703] dump_stack+0x142/0x197
[ 666.248374] should_fail.cold+0x10f/0x159
[ 666.252534] ? __might_sleep+0x93/0xb0
[ 666.256445] __alloc_pages_nodemask+0x1d6/0x7a0
[ 666.261137] ? __alloc_pages_slowpath+0x2930/0x2930
[ 666.266177] ? __lock_is_held+0xb6/0x140
[ 666.270257] ? check_preemption_disabled+0x3c/0x250
[ 666.275297] alloc_pages_current+0xec/0x1e0
[ 666.279641] __get_free_pages+0xf/0x40
[ 666.283545] get_zeroed_page+0x11/0x20
[ 666.287446] get_image_page+0x1c/0x140
[ 666.291349] alloc_rtree_node+0x41/0xa0
[ 666.295341] memory_bm_create+0x3bf/0x530
[ 666.299521] create_basic_memory_bitmaps+0x94/0x130
[ 666.304559] snapshot_open+0x378/0x400
[ 666.308463] ? snapshot_release+0x230/0x230
[ 666.312805] ? snapshot_release+0x230/0x230
[ 666.317144] misc_open+0x34f/0x480
[ 666.320699] ? misc_devnode+0x130/0x130
[ 666.324681] chrdev_open+0x207/0x590
[ 666.328405] ? cdev_put.part.0+0x50/0x50
[ 666.332487] ? security_file_open+0x89/0x190
[ 666.336922] do_dentry_open+0x73b/0xeb0
[ 666.340919] ? cdev_put.part.0+0x50/0x50
[ 666.345007] vfs_open+0x105/0x220
[ 666.348474] path_openat+0x8bd/0x3f70
[ 666.352283] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 666.357685] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 666.362365] ? __lock_is_held+0xb6/0x140
[ 666.366445] ? save_trace+0x290/0x290
[ 666.370265] ? __alloc_fd+0x1d4/0x4a0
[ 666.374090] do_filp_open+0x18e/0x250
[ 666.377898] ? __alloc_fd+0x1d4/0x4a0
[ 666.381718] ? may_open_dev+0xe0/0xe0
[ 666.385551] ? do_raw_spin_unlock+0x174/0x260
[ 666.390067] ? _raw_spin_unlock+0x2d/0x50
[ 666.394240] ? __alloc_fd+0x1d4/0x4a0
[ 666.398080] do_sys_open+0x2c5/0x430
[ 666.401813] ? filp_open+0x70/0x70
[ 666.405386] SyS_openat+0x30/0x40
[ 666.408852] ? SyS_open+0x40/0x40
[ 666.412324] do_syscall_64+0x1e8/0x640
[ 666.416224] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 666.421096] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 666.426306] RIP: 0033:0x45b349
[ 666.429501] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 666.437211] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 666.444478] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
fcntl$setpipe(r3, 0x407, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000440))
write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000140)='./file0\x00')
r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvfrom$l2tp(r5, &(0x7f0000000540)=""/106, 0x6a, 0x3, &(0x7f00000005c0), 0x10)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032abd7000fcdbdf250c00000006002800010000000a000900000000000000000008003b00ac000000"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8840)
[ 666.451747] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 666.459008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 666.466276] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000026
02:58:47 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0x68, "a7fa14dd1ee9746cb84b3e8576f8375643e16597deba41d74b78394a6a15fef4", 0x3, 0x20, 0x500, 0x2, 0x1, 0x0, 0x8, 0xe3eb})
shutdown(r0, 0x0)
02:58:47 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, r0, 0x81000000)
02:58:47 executing program 1:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
getpid()
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)=@fragment={0x2b, 0x0, 0x3f, 0x0, 0x0, 0x3}, 0x8)
tkill(0x0, 0x9)
tkill(r0, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0x0, 0x8}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffe4)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000800010073663d9648000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700000000000000000000000000000000000000000000000000000000000000000000000700"/96], 0x74}}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
02:58:47 executing program 4 (fault-call:1 fault-nth:39):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
setsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f0000000100)=0x81, 0x4)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x76, &(0x7f0000000800)={r9}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r9, 0x100}, 0x8)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r10 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r10, 0xc0386106, &(0x7f0000000040))
02:58:47 executing program 0:
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, 0xffffffffffffffff, 0x81000000)
[ 666.616327] FAULT_INJECTION: forcing a failure.
[ 666.616327] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 666.637776] CPU: 0 PID: 18167 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 666.645708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 666.655076] Call Trace:
[ 666.657708] dump_stack+0x142/0x197
[ 666.661360] should_fail.cold+0x10f/0x159
02:58:47 executing program 0:
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, 0xffffffffffffffff, 0x81000000)
02:58:47 executing program 0:
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, 0xffffffffffffffff, 0x81000000)
[ 666.665520] ? __might_sleep+0x93/0xb0
[ 666.669429] __alloc_pages_nodemask+0x1d6/0x7a0
[ 666.674120] ? __alloc_pages_slowpath+0x2930/0x2930
[ 666.679155] ? __lock_is_held+0xb6/0x140
[ 666.683233] ? check_preemption_disabled+0x3c/0x250
[ 666.688277] alloc_pages_current+0xec/0x1e0
[ 666.692624] __get_free_pages+0xf/0x40
[ 666.696527] get_zeroed_page+0x11/0x20
[ 666.700428] get_image_page+0x1c/0x140
[ 666.704336] alloc_rtree_node+0x41/0xa0
[ 666.708333] memory_bm_create+0x3bf/0x530
02:58:47 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x8a181)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
mmap$snddsp_control(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x2000003, 0x11, r0, 0x83000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb4, r7, 0x400, 0x2070bd2a, 0x25cfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffe7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1a60}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x155}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4246}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @remote}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x4040)
[ 666.712524] create_basic_memory_bitmaps+0x94/0x130
[ 666.717563] snapshot_open+0x378/0x400
[ 666.721466] ? snapshot_release+0x230/0x230
[ 666.725801] ? snapshot_release+0x230/0x230
[ 666.730138] misc_open+0x34f/0x480
[ 666.733703] ? misc_devnode+0x130/0x130
[ 666.737692] chrdev_open+0x207/0x590
[ 666.741516] ? cdev_put.part.0+0x50/0x50
[ 666.745688] ? security_file_open+0x89/0x190
[ 666.750117] do_dentry_open+0x73b/0xeb0
[ 666.754109] ? cdev_put.part.0+0x50/0x50
[ 666.758189] vfs_open+0x105/0x220
[ 666.761660] path_openat+0x8bd/0x3f70
02:58:47 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r0, 0x0)
02:58:47 executing program 0:
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, r0, 0x81000000)
[ 666.765475] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 666.770886] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 666.775568] ? __lock_is_held+0xb6/0x140
[ 666.779646] ? save_trace+0x290/0x290
[ 666.783467] ? __alloc_fd+0x1d4/0x4a0
[ 666.787284] do_filp_open+0x18e/0x250
[ 666.791094] ? __alloc_fd+0x1d4/0x4a0
[ 666.794915] ? may_open_dev+0xe0/0xe0
[ 666.798747] ? do_raw_spin_unlock+0x174/0x260
[ 666.803355] ? _raw_spin_unlock+0x2d/0x50
[ 666.807518] ? __alloc_fd+0x1d4/0x4a0
[ 666.811358] do_sys_open+0x2c5/0x430
[ 666.815094] ? filp_open+0x70/0x70
[ 666.818662] SyS_openat+0x30/0x40
[ 666.822144] ? SyS_open+0x40/0x40
[ 666.825616] do_syscall_64+0x1e8/0x640
[ 666.829513] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 666.834485] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 666.839688] RIP: 0033:0x45b349
[ 666.842891] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 666.850615] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 666.857913] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 666.865207] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 666.872617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 666.879898] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000027
02:58:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
fcntl$setpipe(r3, 0x407, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000440))
write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000140)='./file0\x00')
r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvfrom$l2tp(r5, &(0x7f0000000540)=""/106, 0x6a, 0x3, &(0x7f00000005c0), 0x10)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032abd7000fcdbdf250c00000006002800010000000a000900000000000000000008003b00ac000000"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8840)
02:58:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={<r3=>0x0, @rand_addr, @remote}, &(0x7f0000000340)=0xc)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x60, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x17b, 0x3}}]}, 0x60}}, 0x4000004)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
02:58:48 executing program 2:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000005000))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000203c7c33d0000000000e9ffffffffff0f0001000138000008000240000000000b006aeed3d5dc53fde47e6873d0861aa5d6f0e08319f6c728f11c7b9ad03872d3f820ba6fdf6f8ad9cec56df89449ae2ac6c1487a54820cc6b292675dac2bca78dc9f6a8ef2c23f2cbda4ba4851618cbf29258bf093f2d1c6e69729af8f1f6040909bda63d9bcbf053630c830bb01269d9591d6c798e80d2c3d413605c8ac44d3f1e92f2b067066287645715f31dd1dd777ee6a00"/196], 0x24}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x8}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000005140)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005100)={&(0x7f0000005080)={0x5c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3a}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9a4d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1fffc000}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x263f828d59070c4a}, 0x40041)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
write(r0, &(0x7f0000005180)="bdcdec390f0e33e45b8e70be5963a01380cb30acc9de006fd891a3648c30b544d511d7da7c421e1d7902bae6f1497a97608ee7138d31ec6f99fa3523adde6b9fa0e9c38a86efee58b0d206c1ab92121b55e7686f01c467d56ab0aecc8c8b027268885a2ad30a0f8c46ae3883fed30ccc349379cb09e6ce62e740e4f94dd675ea40b92f095b4c3b34d54d7132d7b9355839032c", 0x93)
shutdown(r3, 0x0)
sysinfo(&(0x7f0000000040)=""/64)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="14c1bc1b6e71a62325cd08724b589c0c78889ee57f50cf380eb3b34035d3d88be2621836a15e2bf0adb15b3b6f57680c125b749923f1ade7680aff6bea5703b58ccfecf380b5a1a0f539dfb33c06a710cba8f32951238d47730ecca58811df9e1685b3f8ef46909f14f3400e0f5133e28e563f3bc878bddce6b316b8c3d709aa124ed31eac86015f639ae9d3fbecf0a0834c5a628babd310285d69dfebfb6f3084ddd4faad9d189dbf05c3b63cbb450b571cff350d9977cb554572ae72348255d6a2d99f8244de370849e9a2f5a5ffb2645207be91fdde86a6cf9b8ae5e195f9b92f07b5408603db61c625c6", 0xec}], 0x1, &(0x7f0000000180)=[{0x70, 0x10d, 0xfffffffb, "f45e59a376c814c1496d950d46605a5f9ede7fc8fa6919560da6ea7de8b2ffef3c7ce336b033bb61e4872d98ea0509cd1e82115b8100b57614f5ef6ae0d85d1e42c8832e431f0b012b789b143b478dfbf3312100b022918f5e962e607137cc12"}, {0x28, 0x100, 0x35c58a3c, "d3964a5e6c9cfd7c2c2a78edffabc4310aac67bb260b2099"}, {0xa0, 0x6, 0x1000, "d104c8b444ffaa783b9e41dc1c4c1422f3b1102dc5838ee5fb24d0152b5aa12cb85de0818217733e030eed43a58490dd32ab4dae6421d16acf922c74d58ced3ce58991dd60796150b2e39ee0d2a3a48d5ce32dca057c9432b3c592d0f97b433515a824a328dc49a2d56e7eaf4e93d4c8ca28b6daf4bf46717091b176512b1a6b4d2b9f3777b119bc92eb"}, {0xe8, 0x29, 0x3, "d632492bd147f6bc7e08f7d80ca4d040a670875b9665dd92c51031d71e1fef3954f0d0566ec44d7fbf0a917f79666d93c961cf833d3d0942345ee2edc5e34eabcc07d4839704d585a56db497fbb39eaa0c077d6b3ecc86d780324427dfde44601a4b2b9b71e366e7d7138f1733f5fcd7a5cf6495e23b69d659a282ed17a0f1bb34f9a04a6e757df41823f424ed9ba4397ee811d65909f0769e3d3a40433d11d871c9a71352f74ffc53f7b7726c89ea8977dcdfae5082a8e438ad96974f335db08ae77bc0b34ccc71dcbe934410a83e9055b14fa45a11"}, {0x1010, 0x112, 0x9308, "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"}, {0xd8, 0x112, 0x6, "00deb9bdb85d547ee98eb8f337a3cc03c7a85d9b02c84694f140838cb0e8d8d404b10ea77c6fa30be82740f39aa95fd7470ce885f9560fb4bc487dc7304139a32e7c9fead8adcf651268d75baf87a9f240ce6e05b00eb204659c9b2d3f07ec2e8d94e9a12cc06bf9cbb2bd2743a7dea19e270cdccce58f80f3e8f393734af9a0f4b26f9a9bf4c9d0d8498b291e1e46224fe176f9976505e6231f5639d902c87c6174199585dfb4895cd99b92a38d4ed3f0f618a10183212ecb20377086f289d29dc213"}], 0x1308}}, {{&(0x7f00000014c0)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001540)="463839da55b09afad5b6bc9495bb06106aa6f7266fc3dfac59b944aebf534a3ec40ff86cf1bfe417f10a7edddba2200d5cc536f15eaf496cfa1a1c033edc43e898200c99ce515b841f6af8487959aaa7f61f40d449dbb4e5f7bfccfae9da1f95cbd04370b98ba6fdaca3f09e821398be3bd83fd24a9c00cc2803fad3c2eb45a388e95c41579039ef5af777be03e54c1e265826448059c99cf5f2e3e4833772ee135830e635", 0xa5}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="2b359118a7b4102b431a3948d9f3969d23321b147e8d09cbcbc2209c38d1e3568fd46b83e76c9a983cec61407cc6245ce732ecdf12fc8748f96f473d52b03f89b1fb6408f1ba72c4f7f582e6ca15e004510add0ea1475f011363a5ddf59e604e208d7de94c6d30e67f95c423a5ec802d517bd167f907c25d72f11473b0b88f347e9ff2cf5472", 0x86}, {&(0x7f00000026c0)="98b9475700f486eae092eea8a410ac58335c75d0cdb727cfc619a063d04de57bd5f87239a29c770535c8b6352a08ff42456c9dcc6127dba2e4cd29a0b86139126317e976f7f4690cf210edb7c75a4b6e017a7d5915c254da3b64e5eecd603888ba243d4c76beb7a1305c95f05ed84ebd2bcdd603d4efd762c6981f3ecebbf1ab17ba639c7d8a2e51a1c80afcbf05f5003fa1390920add7aa35cee67f47f1b5f37081744fb7ba492d3d14b86dcfd1602f7658c13ff3c733f5e0fca108ff69cd205100"/209, 0xd1}, {&(0x7f00000027c0)="84e0a52aae10f62114af9980f9dbf35c2c21967556abeb448ce244538e973fc5900e5c0357ec95ec33f58500e382284c24f78d9944f673f3e0979113779eb58020d7ff498a2b02b34cd347", 0x4b}], 0x5}}, {{&(0x7f00000028c0)=@l2={0x1f, 0x4, @none, 0x4e, 0x1}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000005240)="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", 0x145}, {&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000003980)="7204a6315f439c64027fecaf35785f58c5ac67426f8b5cc15a159e5280182ed12625592444b4fe12cff2ceb6dd906a7c1e4434d04f9ced300eb10c0f1eecae1f024ad0803ea965bd1a17719c20450cf8bdf15c362c9b487929f915ebf7b050f6d84fbf84a82b2cdaad158edff3458688e49d3d1a617df17f8a25d9853479eec6c2fc9e8b0c29361302691fae665ef173f40cd2e413c86ecd0c374490ee89a102f049c2b5bda146945e469b6ff31140481f0d3cfcb641d2a87de95f030a2c70ea894cd63179afccd3ddd0bbe24af320af6590d2be256eac62e2845934ca37e899856cf7e195ccef9f1d1bd2d1", 0xec}], 0x3, &(0x7f0000003ac0)=[{0x30, 0x1, 0x9, "3fba7e4913d9e2c016554c113425d459358c5876000000000000"}, {0x110, 0x1, 0x80000001, "b82e7204f0fa8459aad76eb95847b4ed111dd8a85c2eede3edc323d8e2b7596dd2c1a621c767fbfd6b5009cc8c35556e685560788260de58a319d8c330d494f375d418bf38c5fb83f379c0926709f52211e53e2e831a581c45514c451eca240e28ccc05e59ddcb29f85a986f8ad4862350f4aeda9ab2901d7e8f8c1b3c69b101b406942d26dafc3a56c24b84198cb0c1877e1370a389f71288196d05ac39bbb6421b94619d829a878a6c5ebeb8c4f78caa77a991eea4696e7cdd5c52d75bb086dca37dfc2d531cadd659b79aea91a5374c4f87fdd57ad9c621df49cfe929a50253868bd95af0adfc0d1e0cf54acec386402093842ba35a7ce438aa"}, {0x70, 0x10a, 0x80000000, "16fd28d21f4c495dea8806fc3ad61069608622d20bbf2bb888b5a6e9eaba2352b53125b096dd89e8b9b06f26a8a0b4163076caa9cf79f478c4f9c516bb8d21b35e70d2eaffe889f9d8a773e6e7b2077cd9135ef6ded79bd945befe"}, {0x100, 0x103, 0x7fff, "4b63b78d8adb76ca7aec6e05535661e60ab3be986dd8d3af9d87cece85646afbee592ce1e04142b4b9f07fdc4a2f2157a6123e79fe9e957c0f2b8b77df30014ac4c8e0782f97cabd3101e57ce052ca8aa80b541844b6c9333457f81ee04c9b99116e282338dc43c8c210bf16a1d6a7268d5c791ff704e7357de3f292cad21bbf5b1eb1205969a916d3f7f02ecd72861c8de8f5ec83760984d824b3cdd22f94affc6c5cde794819e030b48978327894cd39f85b19897719b833cc1aafd1971257262ec86f2432fd940512cb8672e926fe312603f897c94acee9d4297edcdef44d4dad51523b88de673dbd21db7d02f6"}], 0x2b0}}, {{&(0x7f0000003d80)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @rand_addr=0x8}, 0x2, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003e00)="41a1a791b639ff", 0x7}, {&(0x7f0000003e40)="45a019063e37ad69406fb138167ab7f87da781b8ee99557dd7bcfefb2558ec95a0d6887496e72a5b7eec6a2750adf8ff03f3de685951b2e785391cb64c9bc674bc505fb63f0219d20a9bbb6258e715da8c909a8ede4705fc6097760cd7769d3a4581f7ec449d5d634fec85367ea8375f9f7e711a72f35502101fa98b4435d910dadaa69c368d070d40131c093a048647e3165ef2f37e54ab637fbac0b7597ab454497f23aa911230d87cbcb7e9857147977cc26da44bcd0dd3a694facbde3c887c5049e73a7e3be6f4fbca4b53470db703534ee84b98e749838cd77ade143e914c816196cd82a43deac3a9ddefa30d8d4b064f0659a23eb0e7474bd4037c4e391eda9e11ec1078138ca67a4033d895d7142d532083174b0b5f1f474d125b38b50ec98711e264a249ee274ced46890f7a1f7c4d52ef83552faed44d5131046c906ddbc68e06e11f816deaa417a5a6c8a755fd93146f2f82f61d39bc12086b268ed82b25179e0ad27cdc9098c1d09f56166adc4cb41d4583d944a1b710df89fd4fa45547a54ecaec74e25cba439cb35dfd49b71d6e5f464c1eaf16bb4397967ea63fe8fe9370d771e675369b7a1cd60b9a0ebdf295f6a28141fe4a02d845d17b5ecb0d864645c9fe9bdf033a43f7383a1a01c5692917ee07b4196c8f97854ca326417b6d071b17b2971a1a9f2ea10dddaeb57f7ef59ce04d2aafd3e9a80e16a7052415511eef2ecbbd8cc63c9821b1cda174a6b9064eaa3153908e9dd7c5e5dfae50ec0e8a80aac8cd23af45d3d6febed05c82445484fa9ecf15422e364a64ae6e2972bfbe1ad5c1ce018e5f04a6a50c8ba15d1478964782c6132324a40608d40d486e04d14c1c99c266cf72d38cc064a3365ae414b1f388aa39db8bbe19bd34f6edf251e29b48a101c5aec908bed888004283bea1f601b271adfe1307de62281a4ea96d5d71781957b96a79142bac700a36d977dddb76d3d17dec4272f0b911511c05a937335306d02d848081817c311adc3c27f83a9acb0fba888e7f79d14915f5a761a0b71efc48c83576c99c0b93863da06e61856fc31616d5db57881bc131f834a22986af1025a76b8bd32e7f5e3f82e682f669bd3b9e6321c008775d394af1be8df4858a90254e5bdaf11fd29de3029ed45a2267f34c59fa2924e8158f0b51bd1812d728378993bf1f1ed957f1fa74787819605985a8164c626380f5de2a663f6e00880f5a0f6d8d64577c9ce0e83a9b8e88e99728f9e1ad1c852fc576736dbd6bc778533c76d185c9d247293754733a454166f1774fd61300fb0c2b68f6dc0912c58215821f5b5215b8aea60a7d18e1bddd8df46f3690757d8280523b49365bf115e8adf3b06216ad131246d07b2d69b9c77cb62d4a72e4945f0a7ecbd67023e276c3260fad6c75cb2b32d7ce93cc1316c0e6043cab5f83790d5f1ab1d26f3c34de38f656394cb24ff82e93b5cfefeaca99cb08f00f70aa44d0a5a9dd294d082dc7c067581aa19d64b740b2783a0f5be7a4e38c3fa992def25f3dc2f9de5e70a5ef71d5fe0e67f928cb31c5c4448ad0b3b5f22553e75c7d682d35815d160fc69667472b16126e52e584144e9653d12046bdabba62eb9d0a65293c5c4b30d449260e32b2644ba82780f383ed95d2f5b212f0c1172352b900bb1336f59761c632f8601627c079de3517a6a018b60a53f181a80c05dc954380f61cc182b352eb1db309fa26b7d50603490a42e4f671a31a70a20870582c8beed4c7d0473dbd6e7f4c550f1db8f3f93bed5337937f0e592ec5d8787598bcac7f7ca98d5af11c3c3a708839005bf615d898a5bad025e7ace6190f540cc8d4258f253fb13fe4d2d59922fdedd1d91e93f02bc54cd6c3b966750168628c7713a3301cde898ac76de271fb9fc3dfd507df08a88f6bd149377eccd12b5f35eb15e34350b0e6f3f7bc792df93a65034bfa52e85096ac93c0dffd91bd002582ca79332f5a5de14e9887115e15cb483be0b14778fc84fcd93f4dcfa8a3487626ffbe45d24b690912f8e7900ec4e918f9a1b612d81e956b28ef0cd93f4b58ba9bcfd6c64199989b7f431d4ac2f20ab767154a23a7d773b9a26beeee7aa59da1221f9882238878cfb857632e0fe1e8f644e72ab154c01bf0089bb0f7b3c1b247876d8e06f936f97ea0895b186bf347eefa95f40fc1382a5098d809fdf917fd7ca837ec6c935a18f7f5195b439efb01bd47bc2aead3a2378682bb123b8e619eb31a1b4b032850354418ac33dd48ebc48f7139e3886e5b4fb5571d9481f932e2a3008b348b591608a91da3b873b2ab0922b56e37c7333b7e439cc3e7a744c6c4425512bba497b8f53f8abc0ee82a597d687d9d6c1798e79b0f5a89a8e3f903f85887e5728f39d83947f6b89ebe7598151e753566b86d9d7c2ecd5783b843c3b70e6be0fd337a055416c83fffd370a79284d0ae3e28abc5aee631d2143e907f9dc41a53b25488d114cf04d23f381489d74f066dc8bf03160b66658b4c1640ffa3001a97a02a6d68f711886962e2f013d7d907004bc31d9fd71235abdd4c9914004dca90d87406defaad04ebc326b1031124337e3defb59d9cfcee66bd76b341047215744819bf9a737ec33f299287e471bc6b0e1487f07b88c9c4270662a220633a272ee6620518e9aaa6745acef1816be3fff7a00c23fed0d8cf04509f8dc2ff15ea8a94c6ec73edbe286e9880c941b3951c73a5accf5c05cc03432383e992bc09df90409c34777025d6c86c1adf98c7d72d8ec57b38c9430a902d376b8fa0f74b098a19a9081e8370268ad1b0b17e29ba596532e68411b2e7d7a83c909070cc154e4ae26e8208a7fc7fb9e473535bc7d9a5cc9a2b500dcdee0f52a1e8dc5dfffe4ec5b29a0b6c201e5f4d1c5bdb2a189ca1d0a9784902d320019443a12d49cd73a9ddc68c5db63a565553f59f3ea4cc686214b4804c7a979c18f2d93dcb4ea53343cc0060772d6c55545294cd579c37495940269dd9db8b7b1a7337dc53392bf829fa140dbeeafa2952203f7256ea0e5ecf1b3ea79b2f688182b07153e5effe141aec6333673cf6c5f22a48ef9b8f7f47d21575676924f96f793aaa27e268f5ceb16877cdfd05a11e7936216b6eae222e43c219aff8842cc8436b49654cc23cc86261191e91407360ae49a1ea1698c2adba41524ce587611f330d32157676c17ecd150ac99e79503ca4e59067e90dd949b2bb627b561e180186289ddd764bb34ebe175cd4038a54c3a6ad101680f17b7433b57d2037879bed75e2055f1f9239837c9f04237e9d199c5f0067b448c0cd9e22e80572520b9c6c296991851edc69e7bb15693d51604a9b6e582beec6a39daba00c8c04778393d2e1a168d5cdfa9d51e0f96b9305d1ec13e47d5528f02a1332f975be32ac95fc30d52f6dd9865638d9efa890458695dd6c6d46d62357f714329257db18d10439e42bafa0fc309f0195bb1a2e3402dca3bcafa3cc310b532561dcc5ef674986cf65467f99c48cd2e8495c29241ec7e12ed33c9d393be7b8a53cbf036e3d1d61194265ffe82fac16aead374e083fbfd245898ecb8efc572a0bddf272c1da26a4465480c76979faa517b8daf35897f2c644eec9f2427c763e23e0dd8492949d4694e5f1de189fb7783d85ff4d5f863ebbf8c1784792b6de484d93e9af8588353085f1449c91f82515d51ce90456887bf9081c250edce4e0e6b50eb35640ba4a1e4e59ee1040074cc6a2ec7153a6977097a2f21ffdfc4300e5973f228972b496d9f2eea7281f8371be9ebc0fbf021be8e7ec5183caceac7e53bf9beea328dcbf1d31f55f4784a271fc2a58ff93b853463d5a8d36c07df89867e85bd5e1b8080f8d58be30e77f1f6b374b4e5bf1d3ae5143af218686f2efaf9b31b8659bd1bf4e3063b183aef11f2be6cdbf282237d57a13260b6cadee84be2b5d80c3acb67163b841bfc438f370644cf9bd456940bee0c8c3bf8ba133d7281cd45b7af3a2501b1e8f875913588f3eb3068642f7a224d411a7432e92c82f387a25f7c65199440da0db2bcfaa5c092c9fc71aa8f4792402866d29d7d4037a06fe5f88d74c80aca693fb8e44c2ec5330943574250f2a44449ee2f507fe27c1f9c83bd6a2ee73de1f0c8518d5245d1bd6396913df27adf152af7551ee0fdc68433e5dc0a415325427855416ba1550ed88e73a7ab057e07a3c09b9a04d8b354b460fa8cb648c972fd7da103b2e9f964af336b9c9554075bddafca03c3b850f704a7f6945c4192380444d738551f35f7846e7742061f5e058542b9dd1f75ad148163f195f16033a08dab3f852bb0da91e23bfc1199af1e1b84e0775f162906affc489aed68235d18944af2e093f2465bfaa116530849e12693249f2cb25934e4048e3efc58ab035c085ee530c4217c27445e6275c45ce905917532969f75ea7b433387cb98d69cea0c948daedf1404efd201db6397b2fe37273ea82c581873f6291547412f8b8a3c88ad983d3d3209edf39364d3a230174b19a17cdfd5f67db3b6323cc53c365afe222d7a1b9ee7f07017d185a47c5fb9dad4e2fa1792497fa31d43df5edd1f1122b998b63a8b08e928111e8fc191f0a2408c679cd2f382be2962f8a75dc53c7f50b96ccea48655b09802fe83b7904c7340b67309ff74f209fdecc058262c48ad1a0768620fd187cfc4245419718f2ce57814634402e13380642860c1b96fb52faf045a6c5a5d8e2b0d63610d809c755e323cdf4d1b48f3114155adbcacacc565e609996fb757917b2792615a317e7c286afd3acf9c0ba309b80a0a366ea09fc3ff4125913eea2eacf0b002df5c123cd28ae688c08658f24187719f479302d1d7ffe910272dcd8d9177d1697dab7099bdc78d9311cb2669b4fd6595e2d138cbd46825175439da8bc7008da2a3e75473c89b2688f01788ef1fa0e00dca1329345a8444149bee63c10ea2ac509b11bfdfb3557c97b816aa7d84f8c494dbe9e0792e943144b91a2549646b9d0999e550300b947bb0c1ed95741c34cbf8da8e08f371c5c90bb46590ca00e27c5068033baa5040ea92f266d884dc74251ed0dfba48afe2e5b566f6fcda982f97940d570d77010d4ece6e3012be753fa55a0559d23ead62770417922a8efaa5afccefc2bc0acaeb38b3767f3cf4a60c9b93f74b91b22cb6062cbffb5cd634ebf4061bd01dceab48efb874a767e0ce99395ae0378f6f5576d5d97964889f5e3c2887e25fdcf3f86b24883ce986f27195f61055c64673e5b62662d3e5fca281095bc80bb73e21c165dd67bde3afc4f70a44156e4cbde15dc53fb427cf2b8ddee1b2bb6161c6176b71b2ec30f3f6d7c727c7e3a1baad4a0c4c0304d4f548a45b789c29787e2a07c44835be249f1092fd1aadc9dec61bab3e3db1f5cc50c595f43416519d46ddb2de46a8b32356af107d1e265bbf45125cdd09d990cd8d7fc1bcfd92b4d062c06c892c4a82886a89bb040b284ef1c2837cc7ca7a1d72e485c346782e291195a6458f63d581038c94347cd76607f31c0b5914c2439ab347f6fcc8da50a5058678872a31194a3fa12edd4a6d5cb5bf8b854d6dafa34c02d22582ee220a36db8caceda1824612f4b257a9e0a3d9e5249f2542d9f204843f947af21a04074041d4426eeed2e0e60edf88f65a9b038226bc46f221128b6e9698025cb5b71d13718089807c445df03a80b16d1540710a4e74439e174491ea19fe71985fa891359f12545b1199ef24dffb6f0da1b10e8f0aa139fe6ff95f89f7ff2ad7938abd51a12349e44654b6a20d453fd546d", 0x1000}, {&(0x7f0000004e40)="4b67b3847126b4", 0x7}], 0x3, &(0x7f0000004ec0)=[{0x30, 0x115, 0x7847, "777fb04ba71926eaec0ebeef0ca61039cada3ee169104c22441f"}], 0x5}}], 0x4, 0xc010)
02:58:48 executing program 0:
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, r0, 0x81000000)
02:58:48 executing program 4 (fault-call:1 fault-nth:40):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x20}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x8001}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4048810)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x0)
02:58:48 executing program 0:
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1c, 0x89011, r0, 0x81000000)
02:58:48 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xd01, 0x20000)
getsockname$netrom(r4, &(0x7f00000000c0)={{0x3, @default}, [@default, @default, @rose, @null, @null, @bcast, @bcast, @netrom]}, &(0x7f0000000140)=0x48)
clock_gettime(0x0, &(0x7f0000000180)={<r5=>0x0, <r6=>0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x800, 0x5, {r5, r6/1000+30000}, {0x1, 0x1, 0x3, 0x3f, 0x0, 0x1, "c51747a9"}, 0x800, 0x1, @fd, 0x10000, 0x0, <r9=>r8})
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r10, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
shutdown(r0, 0x0)
[ 667.646360] FAULT_INJECTION: forcing a failure.
[ 667.646360] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 667.659339] CPU: 0 PID: 18219 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 667.667244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 667.676610] Call Trace:
[ 667.679221] dump_stack+0x142/0x197
[ 667.682942] should_fail.cold+0x10f/0x159
[ 667.687115] ? __might_sleep+0x93/0xb0
[ 667.691028] __alloc_pages_nodemask+0x1d6/0x7a0
[ 667.695725] ? __alloc_pages_slowpath+0x2930/0x2930
[ 667.700773] ? __lock_is_held+0xb6/0x140
[ 667.704922] ? check_preemption_disabled+0x3c/0x250
[ 667.709968] alloc_pages_current+0xec/0x1e0
[ 667.714336] __get_free_pages+0xf/0x40
[ 667.718245] get_zeroed_page+0x11/0x20
[ 667.722154] get_image_page+0x1c/0x140
[ 667.726163] alloc_rtree_node+0x41/0xa0
[ 667.730160] memory_bm_create+0x3bf/0x530
[ 667.734347] create_basic_memory_bitmaps+0x94/0x130
[ 667.739385] snapshot_open+0x378/0x400
[ 667.743293] ? snapshot_release+0x230/0x230
[ 667.747640] ? snapshot_release+0x230/0x230
[ 667.751988] misc_open+0x34f/0x480
[ 667.755550] ? misc_devnode+0x130/0x130
[ 667.759538] chrdev_open+0x207/0x590
[ 667.763275] ? cdev_put.part.0+0x50/0x50
[ 667.767360] ? security_file_open+0x89/0x190
[ 667.771801] do_dentry_open+0x73b/0xeb0
[ 667.775795] ? cdev_put.part.0+0x50/0x50
[ 667.779892] vfs_open+0x105/0x220
[ 667.783372] path_openat+0x8bd/0x3f70
[ 667.787212] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 667.792610] ? path_lookupat.isra.0+0x7b0/0x7b0
02:58:48 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 667.797366] ? __lock_is_held+0xb6/0x140
[ 667.801458] ? save_trace+0x290/0x290
[ 667.805280] ? __alloc_fd+0x1d4/0x4a0
[ 667.809110] do_filp_open+0x18e/0x250
[ 667.812926] ? __alloc_fd+0x1d4/0x4a0
[ 667.816742] ? may_open_dev+0xe0/0xe0
[ 667.820575] ? do_raw_spin_unlock+0x174/0x260
[ 667.825084] ? _raw_spin_unlock+0x2d/0x50
[ 667.829242] ? __alloc_fd+0x1d4/0x4a0
[ 667.833082] do_sys_open+0x2c5/0x430
[ 667.836825] ? filp_open+0x70/0x70
[ 667.840399] SyS_openat+0x30/0x40
[ 667.843861] ? SyS_open+0x40/0x40
02:58:48 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x81000000)
[ 667.847343] do_syscall_64+0x1e8/0x640
[ 667.851244] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 667.856116] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 667.861313] RIP: 0033:0x45b349
[ 667.864510] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 667.872227] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 667.879504] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 667.886784] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
02:58:49 executing program 2:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0x9, 0xffff, 0x1)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @local, 0x8000}}, 0x24)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x18201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0)
iopl(0x0)
ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000100)=0x1a1)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000080))
shutdown(r0, 0x0)
02:58:49 executing program 4 (fault-call:1 fault-nth:41):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 667.894063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 667.901377] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000028
[ 668.037108] FAULT_INJECTION: forcing a failure.
[ 668.037108] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 668.094129] CPU: 0 PID: 18252 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 668.102061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 668.111430] Call Trace:
[ 668.114043] dump_stack+0x142/0x197
[ 668.117701] should_fail.cold+0x10f/0x159
[ 668.121864] ? __might_sleep+0x93/0xb0
[ 668.125787] __alloc_pages_nodemask+0x1d6/0x7a0
[ 668.130484] ? __alloc_pages_slowpath+0x2930/0x2930
[ 668.135524] ? __lock_is_held+0xb6/0x140
[ 668.139599] ? check_preemption_disabled+0x3c/0x250
[ 668.144643] alloc_pages_current+0xec/0x1e0
[ 668.148998] __get_free_pages+0xf/0x40
[ 668.152903] get_zeroed_page+0x11/0x20
[ 668.156812] get_image_page+0x1c/0x140
[ 668.160718] alloc_rtree_node+0x41/0xa0
[ 668.164724] memory_bm_create+0x3bf/0x530
[ 668.168914] create_basic_memory_bitmaps+0x94/0x130
[ 668.173956] snapshot_open+0x378/0x400
[ 668.177861] ? snapshot_release+0x230/0x230
[ 668.182202] ? snapshot_release+0x230/0x230
[ 668.186545] misc_open+0x34f/0x480
[ 668.190110] ? misc_devnode+0x130/0x130
[ 668.194102] chrdev_open+0x207/0x590
[ 668.197845] ? cdev_put.part.0+0x50/0x50
[ 668.201928] ? security_file_open+0x89/0x190
[ 668.206498] do_dentry_open+0x73b/0xeb0
[ 668.210495] ? cdev_put.part.0+0x50/0x50
[ 668.214585] vfs_open+0x105/0x220
[ 668.218065] path_openat+0x8bd/0x3f70
[ 668.221884] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 668.227291] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 668.231981] ? __lock_is_held+0xb6/0x140
[ 668.236058] ? save_trace+0x290/0x290
[ 668.239895] ? __alloc_fd+0x1d4/0x4a0
[ 668.243726] do_filp_open+0x18e/0x250
[ 668.247546] ? __alloc_fd+0x1d4/0x4a0
[ 668.251363] ? may_open_dev+0xe0/0xe0
[ 668.255305] ? do_raw_spin_unlock+0x174/0x260
[ 668.259822] ? _raw_spin_unlock+0x2d/0x50
[ 668.264093] ? __alloc_fd+0x1d4/0x4a0
[ 668.267930] do_sys_open+0x2c5/0x430
[ 668.271665] ? filp_open+0x70/0x70
[ 668.275230] SyS_openat+0x30/0x40
[ 668.278758] ? SyS_open+0x40/0x40
[ 668.282229] do_syscall_64+0x1e8/0x640
[ 668.286131] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 668.291120] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 668.296329] RIP: 0033:0x45b349
[ 668.299533] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 668.307266] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 668.314554] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 668.321841] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 668.329127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 668.336407] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000029
02:58:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00')
syz_genetlink_get_family_id$tipc2(0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x7b05, 0x0, 0x0, 0x0, 0x40}}, &(0x7f00000003c0)=0xb0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000800)={0x0, 0x888d, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x1, 0x0, "13cc6a7a45751f58c3e11dc3da0213a7"})
renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000240))
02:58:49 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x81000000)
02:58:49 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200240, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2a0002)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4)
02:58:49 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
ptrace$peekuser(0x3, r0, 0xc189)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffbf}, 0x8, 0x9}, 0x0, 0x5, r1, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:58:49 executing program 4 (fault-call:1 fault-nth:42):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:49 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[]}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)="2200000020000707e0bd0000090007010a457c12837cf2e2abfdea593ab0f62ed176cd9459c508e70814b75cb2c00694a71a5afc9f41590eb2afb8c67be5166f72eae364999a2136581eedb23566951d41041bbf45d7471dbb59ef5c682e8d36e28cd2e6d484722b5bf06e854143a563e01df16d29", 0x75)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000d2aa85)="dd", 0x20d2aa86, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(0xffffffffffffffff, r5, &(0x7f0000000240)=0x202, 0x4000000000dc)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x860210}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_SOCKETS={0x1c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1484c}, 0x4000000)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendto$inet6(r8, &(0x7f0000d2aa85)="dd", 0x20d2aa86, 0x0, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="000828bd7000fddbdf25010000000c000200700d0000000000000c000400ff070000000000000c000800fbffffffffffffff0c00040000040000000000000c000800e1030000000000000c000300000000feffffff010c000400c3f30000000000000c0005000a000000000000002400078008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f88419a9", @ANYRES32, @ANYBLOB="0c0002000000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x24008005}, 0x40084)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7302dd7d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r9, 0x4008ae73, &(0x7f00000001c0)={0x0, 0x5})
02:58:49 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
02:58:49 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x81000000)
[ 668.872792] FAULT_INJECTION: forcing a failure.
[ 668.872792] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 668.899032] CPU: 1 PID: 18266 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 668.906959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 668.916319] Call Trace:
[ 668.918918] dump_stack+0x142/0x197
[ 668.922564] should_fail.cold+0x10f/0x159
[ 668.926723] ? __might_sleep+0x93/0xb0
[ 668.930622] __alloc_pages_nodemask+0x1d6/0x7a0
[ 668.935304] ? __alloc_pages_slowpath+0x2930/0x2930
[ 668.940328] ? __lock_is_held+0xb6/0x140
[ 668.944396] ? check_preemption_disabled+0x3c/0x250
[ 668.949429] alloc_pages_current+0xec/0x1e0
[ 668.953869] __get_free_pages+0xf/0x40
[ 668.957768] get_zeroed_page+0x11/0x20
[ 668.961664] get_image_page+0x1c/0x140
[ 668.965563] alloc_rtree_node+0x41/0xa0
[ 668.969546] memory_bm_create+0x3bf/0x530
[ 668.973718] create_basic_memory_bitmaps+0x94/0x130
[ 668.978753] snapshot_open+0x378/0x400
[ 668.982657] ? snapshot_release+0x230/0x230
[ 668.986985] ? snapshot_release+0x230/0x230
[ 668.991321] misc_open+0x34f/0x480
[ 668.994877] ? misc_devnode+0x130/0x130
[ 668.998860] chrdev_open+0x207/0x590
[ 669.002591] ? cdev_put.part.0+0x50/0x50
[ 669.006668] ? security_file_open+0x89/0x190
[ 669.011094] do_dentry_open+0x73b/0xeb0
[ 669.015078] ? cdev_put.part.0+0x50/0x50
[ 669.019291] vfs_open+0x105/0x220
[ 669.022756] path_openat+0x8bd/0x3f70
[ 669.026563] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 669.031946] ? trace_hardirqs_on+0x10/0x10
[ 669.036202] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 669.040881] ? __lock_is_held+0xb6/0x140
[ 669.045061] ? save_trace+0x290/0x290
[ 669.048878] ? __alloc_fd+0x1d4/0x4a0
[ 669.052690] do_filp_open+0x18e/0x250
[ 669.056495] ? __alloc_fd+0x1d4/0x4a0
[ 669.060309] ? may_open_dev+0xe0/0xe0
[ 669.064139] ? do_raw_spin_unlock+0x174/0x260
[ 669.068651] ? _raw_spin_unlock+0x2d/0x50
[ 669.072814] ? __alloc_fd+0x1d4/0x4a0
[ 669.076646] do_sys_open+0x2c5/0x430
[ 669.080372] ? filp_open+0x70/0x70
[ 669.083935] SyS_openat+0x30/0x40
[ 669.087390] ? SyS_open+0x40/0x40
[ 669.090856] do_syscall_64+0x1e8/0x640
[ 669.094753] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 669.099613] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 669.104808] RIP: 0033:0x45b349
[ 669.108001] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 669.115718] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
02:58:50 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, 0xffffffffffffffff, 0x81000000)
02:58:50 executing program 1:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x488840, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
02:58:50 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOBLANK(r8, 0x4611, 0x3)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001640)={<r12=>0x0, @multicast1, @initdev}, &(0x7f0000001680)=0xc)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r13)
r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r15=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r13, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r15}}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000016c0)={0xa, 0xff, 0xe209, 0x6, 0x208, 0x1, 0x3, [], r12, r13, 0x3, 0x1}, 0x3c)
r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001780)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r17=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r17}}, 0x18)
ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0xd42)
socket$bt_cmtp(0x1f, 0x3, 0x5)
syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8, 0x210003)
ioctl$TIOCSTI(r6, 0x5412, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r18=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r18}}, 0x18)
ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@bcast, @default, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
sendmsg$nfc_llcp(r7, &(0x7f0000001600)={&(0x7f0000000140)={0x27, 0x1, 0x0, 0x5, 0xba, 0x4, "a43e5221825cce819983b5cb89fdc0b3b6e6e5313de71f19185adf874ce9b77a84a0162a55530702d00909ab3956ad79f157938cfac7011fcb0837f8ef9bed", 0x1b}, 0x60, &(0x7f0000001500)=[{&(0x7f0000000200)="01ec4f1833f65cc9b5f1dbd191d87139d303a4d655379d1eba9f30d7704061509b463998dc290f69e768983cbaa73fc9eadc6fed770ca00703eeb8d9fc32dbd304a43222ef0fb5155d830a838163", 0x4e}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="2cb8ab2137e5edb9dc3cf80d936d12c1edce937fc42b706792fe60e8224ec0fbbb360eda2cb162e78d326b0d73e344747161dc62bc57eadb9809b4f323a6cbf0eb8d50a12fad8165e19e7b18b239a10a2fd97f66bd06e2affd5763c80da8f6aea2bd3c8e299b60b2068818ddeff5d2832465", 0x72}, {&(0x7f0000000340)="c0a721ae041fddb76a1d410026ed83b73592256c8396a4d42d3f78c25bb6f7e9282fa716a2ce3c111e1fd068040f8535d3cc9096f1fb7b11a207b24387d27d2ce528fcc2f21350a8732cc34cacc24af859900ccf3c94b31e547bcfa64a3f1a78dba6f1ef1c4aeecc621e4f94bd63360b854959231b2204b16a9c281c7d6b7556bb04733c23c7bc5efb0a92e82acb2eeeab7a57123128ce486948bb3a15b1c6db035f23e7e85c259c5c945723180d8d1dc24af589310c51", 0xb7}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000001440)="89de897b407405b2982afa77a394f502be6ca2094e89136f80b9af2e5c278b44eb73b54f9491b79996e7545cda02c0ecb38ee80e44145dd515b5d76cfb226937a677142e7d5eb96ce22987710249a1246aa3b814ad010d4481f107e71f5b4128dc69e3ee360e64111840332e20afabb6060b226f039920a999317195f3429caefe5f7868158b7efd3ccf25ad2589aa5dadf6a57e3cac739dd17e2292ecd5813e4b761bfc13453e10a2175fe7", 0xac}], 0x7, &(0x7f0000001700)=ANY=[@ANYBLOB="68000000000000001501004007000006007d102c83360ad694827ecbe7b58ebf4fdcdc8a1986df3cd233a83b0400a3acf93f3416b97287f6b2dba266fd6513059d21eaa56d0d75c27dd16055ff052eb69f5bca499e7501f1f42a433c4fd1f356c59ae2e4ee2c1809f1b70000000000"], 0x68, 0x10}, 0x9)
02:58:50 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001a80180002801400d951510ee5bcf2770000080013000800000008001b00000000003571e642ce"], 0x44}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4ee)
r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1)
sendfile(0xffffffffffffffff, r1, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
flistxattr(0xffffffffffffffff, &(0x7f0000000680)=""/130, 0x82)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00')
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f00000000c0)={0x0, {0x3}})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000015c0)={0x0, 0x0, 0xb}, 0x8)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x6}, 0x7, 0x0, @userptr=0x3})
[ 669.122996] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 669.130274] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 669.137654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 669.144950] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000002a
[ 669.256384] Unknown ioctl -1054845647
02:58:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xd)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffffffd, 0x3, 0x8, 0xfffffffff7fffffb}, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff", 0x28}], 0x1}, 0x0)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={0x0, @nl=@unspec, @phonet={0x23, 0x0, 0x6, 0x3f}, @hci={0x1f, 0x7, 0x2}, 0x14, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='macvtap0\x00', 0x3, 0x51})
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(r5, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
openat$cgroup_ro(r6, 0x0, 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0xb90, 0x2, 0x0, 0x0, 0x0, 0x801}, 0x0, 0x800000000000000, r7, 0xa)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000240)=0x2)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmmsg$inet(r8, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1, 0x0, 0x0, 0x1cb}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000)
02:58:50 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
recvfrom$inet(r1, &(0x7f0000000000)=""/200, 0xc8, 0x12202, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10)
02:58:50 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, 0xffffffffffffffff, 0x81000000)
[ 669.308649] Unknown ioctl -1054845647
02:58:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000100)={0xa})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20000, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x8001, 0x1ff}, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x804)
02:58:50 executing program 4 (fault-call:1 fault-nth:43):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x83)
02:58:50 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, 0xffffffffffffffff, 0x81000000)
02:58:50 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
02:58:50 executing program 5:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x481100, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
dup(0xffffffffffffffff)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={<r4=>0x0, 0x2}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x3, @empty, 0x7f}}, 0x7fffffff, 0x3, 0x4, 0x4, 0xc7, 0x6, 0xab}, 0x9c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
02:58:50 executing program 0 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 669.733276] FAULT_INJECTION: forcing a failure.
[ 669.733276] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 669.798428] CPU: 1 PID: 18325 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 669.806235] FAULT_INJECTION: forcing a failure.
[ 669.806235] name failslab, interval 1, probability 0, space 0, times 0
[ 669.806354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 669.826893] Call Trace:
[ 669.829484] dump_stack+0x142/0x197
[ 669.833114] should_fail.cold+0x10f/0x159
[ 669.837260] ? __might_sleep+0x93/0xb0
[ 669.841158] __alloc_pages_nodemask+0x1d6/0x7a0
[ 669.845836] ? __alloc_pages_slowpath+0x2930/0x2930
[ 669.850863] ? __lock_is_held+0xb6/0x140
[ 669.854922] ? check_preemption_disabled+0x3c/0x250
[ 669.859944] alloc_pages_current+0xec/0x1e0
[ 669.864272] __get_free_pages+0xf/0x40
[ 669.868175] get_zeroed_page+0x11/0x20
[ 669.872062] get_image_page+0x1c/0x140
[ 669.875942] alloc_rtree_node+0x41/0xa0
[ 669.879922] memory_bm_create+0x3bf/0x530
[ 669.884087] create_basic_memory_bitmaps+0x94/0x130
[ 669.889121] snapshot_open+0x378/0x400
[ 669.893009] ? snapshot_release+0x230/0x230
[ 669.897337] ? snapshot_release+0x230/0x230
[ 669.901673] misc_open+0x34f/0x480
[ 669.905220] ? misc_devnode+0x130/0x130
[ 669.909189] chrdev_open+0x207/0x590
[ 669.912901] ? cdev_put.part.0+0x50/0x50
[ 669.916959] ? security_file_open+0x89/0x190
[ 669.921362] do_dentry_open+0x73b/0xeb0
[ 669.925335] ? cdev_put.part.0+0x50/0x50
[ 669.929403] vfs_open+0x105/0x220
[ 669.932864] path_openat+0x8bd/0x3f70
[ 669.936658] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 669.942021] ? trace_hardirqs_on+0x10/0x10
[ 669.946269] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 669.950946] ? __lock_is_held+0xb6/0x140
[ 669.955015] ? save_trace+0x290/0x290
[ 669.958836] ? __alloc_fd+0x1d4/0x4a0
[ 669.962651] do_filp_open+0x18e/0x250
[ 669.966449] ? __alloc_fd+0x1d4/0x4a0
[ 669.970252] ? may_open_dev+0xe0/0xe0
[ 669.974058] ? do_raw_spin_unlock+0x174/0x260
[ 669.978564] ? _raw_spin_unlock+0x2d/0x50
[ 669.982717] ? __alloc_fd+0x1d4/0x4a0
[ 669.986533] do_sys_open+0x2c5/0x430
[ 669.990240] ? filp_open+0x70/0x70
[ 669.993792] SyS_openat+0x30/0x40
[ 669.997243] ? SyS_open+0x40/0x40
[ 670.000705] do_syscall_64+0x1e8/0x640
[ 670.004588] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 670.009431] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 670.014621] RIP: 0033:0x45b349
[ 670.017800] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 670.025500] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 670.032873] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 670.040135] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
02:58:50 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
[ 670.047403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 670.054668] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000002b
[ 670.061982] CPU: 0 PID: 18333 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0
[ 670.069874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 670.079237] Call Trace:
[ 670.081831] dump_stack+0x142/0x197
[ 670.085476] should_fail.cold+0x10f/0x159
[ 670.089743] should_failslab+0xdb/0x130
[ 670.093740] kmem_cache_alloc+0x2d7/0x780
02:58:51 executing program 1:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=<r4=>0x0)
r5 = getuid()
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r7)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r9)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x9c, r10, 0x810, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
getgroups(0x4, &(0x7f0000000100)=[0xee00, <r11=>r7, r9, 0xee00])
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r4, r5, r11}, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x30005, 0x0)
[ 670.099738] ? file_has_perm+0x163/0x2c0
[ 670.103817] __split_vma+0xc9/0x6d0
[ 670.107463] do_munmap+0x257/0xd60
[ 670.111014] ? arch_get_unmapped_area+0x5f0/0x5f0
[ 670.115869] mmap_region+0x16f/0x1030
[ 670.119676] do_mmap+0x5b8/0xcd0
[ 670.123156] vm_mmap_pgoff+0x17a/0x1d0
[ 670.127050] ? vma_is_stack_for_current+0xa0/0xa0
[ 670.131886] ? __fget+0x237/0x370
[ 670.135352] SyS_mmap_pgoff+0x3ca/0x520
[ 670.139330] ? find_mergeable_anon_vma+0x2c0/0x2c0
[ 670.144274] ? do_syscall_64+0x53/0x640
[ 670.148239] ? align_vdso_addr+0x60/0x60
[ 670.152307] SyS_mmap+0x16/0x20
[ 670.155589] do_syscall_64+0x1e8/0x640
[ 670.159470] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 670.164318] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 670.169650] RIP: 0033:0x45b349
[ 670.172830] RSP: 002b:00007f6720eb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 670.180533] RAX: ffffffffffffffda RBX: 00007f6720eb46d4 RCX: 000000000045b349
[ 670.187793] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffd000
02:58:51 executing program 0 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 670.195054] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000081000000
[ 670.202318] R10: 0000000000089011 R11: 0000000000000246 R12: 0000000000000004
[ 670.209594] R13: 000000000000071b R14: 00000000004c890e R15: 0000000000000000
02:58:51 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
shutdown(r0, 0x0)
02:58:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:51 executing program 4 (fault-call:1 fault-nth:44):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 670.346268] FAULT_INJECTION: forcing a failure.
[ 670.346268] name failslab, interval 1, probability 0, space 0, times 0
[ 670.365329] CPU: 0 PID: 18353 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0
[ 670.373256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 670.382721] Call Trace:
[ 670.384219] FAULT_INJECTION: forcing a failure.
[ 670.384219] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 670.385329] dump_stack+0x142/0x197
[ 670.385351] should_fail.cold+0x10f/0x159
[ 670.404917] should_failslab+0xdb/0x130
[ 670.408907] kmem_cache_alloc+0x47/0x780
[ 670.412981] ? __split_vma+0xc9/0x6d0
[ 670.416788] ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 670.422251] anon_vma_clone+0xde/0x470
[ 670.426147] __split_vma+0x28a/0x6d0
[ 670.429861] do_munmap+0x257/0xd60
[ 670.433399] ? arch_get_unmapped_area+0x5f0/0x5f0
[ 670.438249] mmap_region+0x16f/0x1030
[ 670.442074] do_mmap+0x5b8/0xcd0
[ 670.445450] vm_mmap_pgoff+0x17a/0x1d0
[ 670.449348] ? vma_is_stack_for_current+0xa0/0xa0
[ 670.454193] ? __fget+0x237/0x370
[ 670.457644] SyS_mmap_pgoff+0x3ca/0x520
[ 670.461623] ? find_mergeable_anon_vma+0x2c0/0x2c0
[ 670.466557] ? do_syscall_64+0x53/0x640
[ 670.470548] ? align_vdso_addr+0x60/0x60
[ 670.474615] SyS_mmap+0x16/0x20
[ 670.477903] do_syscall_64+0x1e8/0x640
[ 670.481793] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 670.486648] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 670.491858] RIP: 0033:0x45b349
[ 670.495056] RSP: 002b:00007f6720eb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 670.502760] RAX: ffffffffffffffda RBX: 00007f6720eb46d4 RCX: 000000000045b349
[ 670.510032] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffd000
[ 670.517359] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000081000000
[ 670.524626] R10: 0000000000089011 R11: 0000000000000246 R12: 0000000000000004
[ 670.531896] R13: 000000000000071b R14: 00000000004c890e R15: 0000000000000001
[ 670.539192] CPU: 1 PID: 18356 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 670.547085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 670.556443] Call Trace:
[ 670.559053] dump_stack+0x142/0x197
[ 670.562695] should_fail.cold+0x10f/0x159
[ 670.566854] ? __might_sleep+0x93/0xb0
[ 670.570762] __alloc_pages_nodemask+0x1d6/0x7a0
[ 670.575454] ? __alloc_pages_slowpath+0x2930/0x2930
[ 670.580491] ? __lock_is_held+0xb6/0x140
[ 670.584567] ? check_preemption_disabled+0x3c/0x250
[ 670.589605] alloc_pages_current+0xec/0x1e0
[ 670.593938] __get_free_pages+0xf/0x40
[ 670.597837] get_zeroed_page+0x11/0x20
[ 670.601735] get_image_page+0x1c/0x140
[ 670.605636] alloc_rtree_node+0x41/0xa0
[ 670.609626] memory_bm_create+0x3bf/0x530
[ 670.613800] create_basic_memory_bitmaps+0x94/0x130
[ 670.618836] snapshot_open+0x378/0x400
[ 670.622732] ? snapshot_release+0x230/0x230
[ 670.627072] ? snapshot_release+0x230/0x230
[ 670.631406] misc_open+0x34f/0x480
[ 670.634961] ? misc_devnode+0x130/0x130
[ 670.638945] chrdev_open+0x207/0x590
[ 670.642674] ? cdev_put.part.0+0x50/0x50
[ 670.646746] ? security_file_open+0x89/0x190
[ 670.651167] do_dentry_open+0x73b/0xeb0
[ 670.655154] ? cdev_put.part.0+0x50/0x50
[ 670.659234] vfs_open+0x105/0x220
[ 670.662701] path_openat+0x8bd/0x3f70
[ 670.666610] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 670.671984] ? trace_hardirqs_on+0x10/0x10
[ 670.672339] FAULT_INJECTION: forcing a failure.
[ 670.672339] name failslab, interval 1, probability 0, space 0, times 0
[ 670.676234] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 670.676250] ? __lock_is_held+0xb6/0x140
[ 670.676262] ? save_trace+0x290/0x290
[ 670.676278] ? __alloc_fd+0x1d4/0x4a0
[ 670.676292] do_filp_open+0x18e/0x250
[ 670.676302] ? __alloc_fd+0x1d4/0x4a0
[ 670.676311] ? may_open_dev+0xe0/0xe0
[ 670.676330] ? do_raw_spin_unlock+0x174/0x260
[ 670.719703] ? _raw_spin_unlock+0x2d/0x50
[ 670.723860] ? __alloc_fd+0x1d4/0x4a0
[ 670.727687] do_sys_open+0x2c5/0x430
[ 670.731411] ? filp_open+0x70/0x70
[ 670.734971] SyS_openat+0x30/0x40
[ 670.738432] ? SyS_open+0x40/0x40
[ 670.741901] do_syscall_64+0x1e8/0x640
[ 670.745808] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 670.750665] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 670.755863] RIP: 0033:0x45b349
[ 670.759156] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 670.766874] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 670.774151] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 670.781437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 670.788737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
02:58:51 executing program 0 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 670.796009] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000002c
[ 670.804024] CPU: 0 PID: 18359 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0
[ 670.812014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 670.821379] Call Trace:
[ 670.823975] dump_stack+0x142/0x197
[ 670.827616] should_fail.cold+0x10f/0x159
[ 670.831780] should_failslab+0xdb/0x130
[ 670.835765] kmem_cache_alloc+0x2d7/0x780
[ 670.839933] __split_vma+0xc9/0x6d0
[ 670.843572] do_munmap+0x2bd/0xd60
[ 670.847129] ? arch_get_unmapped_area+0x5f0/0x5f0
[ 670.851990] mmap_region+0x16f/0x1030
[ 670.855809] do_mmap+0x5b8/0xcd0
[ 670.859186] vm_mmap_pgoff+0x17a/0x1d0
[ 670.863102] ? vma_is_stack_for_current+0xa0/0xa0
[ 670.867953] ? __fget+0x237/0x370
[ 670.871420] SyS_mmap_pgoff+0x3ca/0x520
[ 670.875408] ? find_mergeable_anon_vma+0x2c0/0x2c0
[ 670.880349] ? do_syscall_64+0x53/0x640
[ 670.884325] ? align_vdso_addr+0x60/0x60
[ 670.888387] SyS_mmap+0x16/0x20
[ 670.891676] do_syscall_64+0x1e8/0x640
[ 670.895565] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 670.900443] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 670.905637] RIP: 0033:0x45b349
[ 670.908828] RSP: 002b:00007f6720eb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 670.916542] RAX: ffffffffffffffda RBX: 00007f6720eb46d4 RCX: 000000000045b349
[ 670.923817] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffd000
[ 670.931100] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000081000000
[ 670.938375] R10: 0000000000089011 R11: 0000000000000246 R12: 0000000000000004
02:58:52 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
shutdown(r0, 0x0)
[ 670.945649] R13: 000000000000071b R14: 00000000004c890e R15: 0000000000000002
02:58:52 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @empty}], 0x30)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0xa7, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000780)=ANY=[@ANYBLOB="1ef1d5c82a0705da934b52243b61da7c08220ab31377961481a86cef0c77e4c5f00836298ab1ab5067cf1b064ab40447c59e81de1e6c7ce4727dbd8ebe614ba57ba394e7895ee00b30e495a54eeaae4be9b5b0640287df321f81077c920975a0ac74396d2640df7bf8d1a6cade217661190ac7bced6b779e6189db7b3138018c1e4c0113c828d0dda7ab9e7a7de6212c598b702c5a6ae7d9d12ff4b450783c4dd95bb44f18bbbd7139285d09e7ef39f7df731b00536087fc87b9103e88e20efa0000000000120000000000000000", @ANYRES16=r8, @ANYBLOB="30002cbd700703dbdf251180000004000500fcd717510bfa46d785baaad5718386af161255d7b0f882616c649089d4f4d68c"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xd8, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa6a00000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc6aa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000084)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="e864000010d04a90193819a52dcb825c81a34948f8704497cffd128d9076302500fabe9421cfc4", @ANYRES16=0x0, @ANYBLOB="00000200000002000000da730a47"]}, 0x1, 0x0, 0x0, 0x8000}, 0x55)
syz_mount_image$cifs(&(0x7f00000002c0)='cifs\x00', &(0x7f00000003c0)='./file0\x00', 0x80, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)='eth\x00')
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x8e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000400))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x201, 0x4, 0x0, 0x0, 0x1f}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r12=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYBLOB="0fcb641375c807add4329350514cd8db25332de0bfaa209048aed1bce47f6cf1c1dfc0840d9ac26c9233670c4c9536dfd8beef58cd73f59153e992b45fd55507b837f88731e556d7d3c95cb35476799b2e", @ANYBLOB="2c616363659f98657874656e00"/26])
02:58:52 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xa00000, 0x0, 0x6, <r4=>r0, 0x0, &(0x7f0000000040)={0x9909cc, 0xac5e, [], @p_u8=&(0x7f0000000000)=0xfb}})
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000440))
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=ANY=[@ANYBLOB="06009ac8", @ANYRES16=r7, @ANYBLOB="30012cbd7000fcdbdf251100000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x40004)
[ 671.011994] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 671.038170] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 671.077191] EXT4-fs: failed to create workqueue
[ 671.084767] EXT4-fs (loop5): mount failed
02:58:52 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7f)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='inodL\t2,\x00'])
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x2400)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000140)={0x1, {{0xa, 0x4e21, 0xfffffffa, @remote, 0x4}}, {{0xa, 0x4e20, 0x101, @mcast1, 0xc21b}}}, 0x108)
02:58:52 executing program 4 (fault-call:1 fault-nth:45):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:52 executing program 0 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:58:52 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_ROPEN(r1, &(0x7f0000000240)={0x18, 0x71, 0x1, {{0x2, 0x4, 0x2}, 0xffffffff}}, 0x18)
close(r2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/364], 0x170}}, 0x8000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r7 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r7, 0x0)
shmctl$SHM_LOCK(r7, 0xb)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fcntl$setlease(r8, 0x400, 0x2)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r10 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x807fe, 0x480000)
ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000000500000000000000020000000004000003000000000000000100000081000000010100000000000000800000000000000000000000000000000000000000000000060000000000000000000000000000040000000000000006000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000900000000000000ff0100000000000000000000000000000000000000000000000400"/200])
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12)
r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r14=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r12, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r14}}, 0x18)
recvfrom$ax25(r12, &(0x7f0000000200)=""/44, 0x2c, 0x40, &(0x7f00000005c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000000)={0x3, 0x8, 0x4, 0xc7e34b2fc2fb2991, 0x1, {0x0, 0x2710}, {0x2, 0xc, 0x80, 0x4, 0x7f, 0x2a, "1bbd2d6a"}, 0xfffff4df, 0x1, @fd, 0x3})
02:58:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_tables_matches\x00')
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
readahead(r2, 0x5, 0x8)
syz_extract_tcp_res(&(0x7f0000000140), 0xc580, 0x5)
r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r3, 0xc0386106, &(0x7f0000000040))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x3f, @mcast2, 0x6}, {0xa, 0x4e22, 0x0, @rand_addr="0ff6c80d9ee5f01e76b34664f11392cc", 0x3f}, 0x8, [0x156da, 0x5, 0x7, 0x8, 0x8, 0xfffffff8, 0x401, 0x3bb]}, 0x5c)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x1, 0x838, 0xffff1627}})
[ 671.289131] 9pnet: Insufficient options for proto=fd
[ 671.339000] FAULT_INJECTION: forcing a failure.
[ 671.339000] name failslab, interval 1, probability 0, space 0, times 0
[ 671.359212] FAULT_INJECTION: forcing a failure.
[ 671.359212] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 671.360999] CPU: 0 PID: 18395 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0
[ 671.378972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 671.388353] Call Trace:
[ 671.390980] dump_stack+0x142/0x197
[ 671.394612] should_fail.cold+0x10f/0x159
[ 671.398766] should_failslab+0xdb/0x130
[ 671.402735] kmem_cache_alloc+0x47/0x780
[ 671.406797] ? __split_vma+0xc9/0x6d0
[ 671.410597] ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 671.416054] anon_vma_clone+0xde/0x470
[ 671.425770] __split_vma+0x28a/0x6d0
[ 671.429488] do_munmap+0x2bd/0xd60
[ 671.433068] ? arch_get_unmapped_area+0x5f0/0x5f0
[ 671.437917] mmap_region+0x16f/0x1030
[ 671.441716] do_mmap+0x5b8/0xcd0
[ 671.445096] vm_mmap_pgoff+0x17a/0x1d0
[ 671.448987] ? vma_is_stack_for_current+0xa0/0xa0
[ 671.453825] ? __fget+0x237/0x370
[ 671.457294] SyS_mmap_pgoff+0x3ca/0x520
[ 671.461268] ? find_mergeable_anon_vma+0x2c0/0x2c0
[ 671.466193] ? do_syscall_64+0x53/0x640
[ 671.470187] ? align_vdso_addr+0x60/0x60
[ 671.474268] SyS_mmap+0x16/0x20
[ 671.477563] do_syscall_64+0x1e8/0x640
[ 671.481461] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 671.486319] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 671.491510] RIP: 0033:0x45b349
[ 671.494716] RSP: 002b:00007f6720eb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 671.502434] RAX: ffffffffffffffda RBX: 00007f6720eb46d4 RCX: 000000000045b349
[ 671.509709] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffd000
[ 671.517002] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000081000000
[ 671.524276] R10: 0000000000089011 R11: 0000000000000246 R12: 0000000000000004
[ 671.531545] R13: 000000000000071b R14: 00000000004c890e R15: 0000000000000003
[ 671.538842] CPU: 1 PID: 18392 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 671.546741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 671.556105] Call Trace:
[ 671.558717] dump_stack+0x142/0x197
[ 671.562363] should_fail.cold+0x10f/0x159
[ 671.566533] ? __might_sleep+0x93/0xb0
[ 671.570443] __alloc_pages_nodemask+0x1d6/0x7a0
[ 671.575123] ? __alloc_pages_slowpath+0x2930/0x2930
[ 671.580153] ? __lock_is_held+0xb6/0x140
[ 671.584222] ? check_preemption_disabled+0x3c/0x250
02:58:52 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @empty}], 0x30)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0xa7, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000780)=ANY=[@ANYBLOB="1ef1d5c82a0705da934b52243b61da7c08220ab31377961481a86cef0c77e4c5f00836298ab1ab5067cf1b064ab40447c59e81de1e6c7ce4727dbd8ebe614ba57ba394e7895ee00b30e495a54eeaae4be9b5b0640287df321f81077c920975a0ac74396d2640df7bf8d1a6cade217661190ac7bced6b779e6189db7b3138018c1e4c0113c828d0dda7ab9e7a7de6212c598b702c5a6ae7d9d12ff4b450783c4dd95bb44f18bbbd7139285d09e7ef39f7df731b00536087fc87b9103e88e20efa0000000000120000000000000000", @ANYRES16=r8, @ANYBLOB="30002cbd700703dbdf251180000004000500fcd717510bfa46d785baaad5718386af161255d7b0f882616c649089d4f4d68c"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xd8, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa6a00000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc6aa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000084)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="e864000010d04a90193819a52dcb825c81a34948f8704497cffd128d9076302500fabe9421cfc4", @ANYRES16=0x0, @ANYBLOB="00000200000002000000da730a47"]}, 0x1, 0x0, 0x0, 0x8000}, 0x55)
syz_mount_image$cifs(&(0x7f00000002c0)='cifs\x00', &(0x7f00000003c0)='./file0\x00', 0x80, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)='eth\x00')
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x8e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000400))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x201, 0x4, 0x0, 0x0, 0x1f}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r12=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYBLOB="0fcb641375c807add4329350514cd8db25332de0bfaa209048aed1bce47f6cf1c1dfc0840d9ac26c9233670c4c9536dfd8beef58cd73f59153e992b45fd55507b837f88731e556d7d3c95cb35476799b2e", @ANYBLOB="2c616363659f98657874656e00"/26])
02:58:52 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r4=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x76, &(0x7f0000000800)={r4}, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
recvfrom(r5, &(0x7f0000000140)=""/115, 0x73, 0x40002040, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000001c0))
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x76, &(0x7f0000000800)={r10}, 0x8)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r4, 0x9, 0x2, 0x81, 0x3ff, 0x6, 0x7ff, 0x5, {<r11=>r10, @in={{0x2, 0x4e22, @local}}, 0x5, 0x90b8, 0x4, 0xd62, 0x80}}, &(0x7f00000000c0)=0xb0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r11, 0x5}, 0x8)
[ 671.589253] alloc_pages_current+0xec/0x1e0
[ 671.593599] __get_free_pages+0xf/0x40
[ 671.597502] get_zeroed_page+0x11/0x20
[ 671.601412] get_image_page+0x1c/0x140
[ 671.605316] alloc_rtree_node+0x41/0xa0
[ 671.609307] memory_bm_create+0x3bf/0x530
[ 671.613481] create_basic_memory_bitmaps+0x94/0x130
[ 671.618510] snapshot_open+0x378/0x400
[ 671.622405] ? snapshot_release+0x230/0x230
[ 671.626634] XFS (loop5): unknown mount option [inodL 2].
[ 671.626739] ? snapshot_release+0x230/0x230
[ 671.636593] misc_open+0x34f/0x480
[ 671.640151] ? misc_devnode+0x130/0x130
[ 671.644137] chrdev_open+0x207/0x590
[ 671.647864] ? cdev_put.part.0+0x50/0x50
[ 671.651943] ? security_file_open+0x89/0x190
[ 671.656376] do_dentry_open+0x73b/0xeb0
[ 671.660366] ? cdev_put.part.0+0x50/0x50
[ 671.664562] vfs_open+0x105/0x220
[ 671.668034] path_openat+0x8bd/0x3f70
[ 671.671913] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 671.677307] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 671.681983] ? __lock_is_held+0xb6/0x140
[ 671.686046] ? save_trace+0x290/0x290
[ 671.689847] ? __alloc_fd+0x1d4/0x4a0
[ 671.693647] do_filp_open+0x18e/0x250
[ 671.697438] ? __alloc_fd+0x1d4/0x4a0
[ 671.701237] ? may_open_dev+0xe0/0xe0
[ 671.705042] ? do_raw_spin_unlock+0x174/0x260
[ 671.709540] ? _raw_spin_unlock+0x2d/0x50
[ 671.713701] ? __alloc_fd+0x1d4/0x4a0
[ 671.717532] do_sys_open+0x2c5/0x430
[ 671.721252] ? filp_open+0x70/0x70
[ 671.724789] SyS_openat+0x30/0x40
[ 671.728248] ? SyS_open+0x40/0x40
[ 671.731761] do_syscall_64+0x1e8/0x640
[ 671.735652] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 671.740508] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 671.745704] RIP: 0033:0x45b349
[ 671.748883] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 671.756604] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 671.763869] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 671.771133] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 671.778395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 671.785663] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000002d
02:58:52 executing program 0 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:58:52 executing program 4 (fault-call:1 fault-nth:46):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:53 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @empty}], 0x30)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0xa7, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000780)=ANY=[@ANYBLOB="1ef1d5c82a0705da934b52243b61da7c08220ab31377961481a86cef0c77e4c5f00836298ab1ab5067cf1b064ab40447c59e81de1e6c7ce4727dbd8ebe614ba57ba394e7895ee00b30e495a54eeaae4be9b5b0640287df321f81077c920975a0ac74396d2640df7bf8d1a6cade217661190ac7bced6b779e6189db7b3138018c1e4c0113c828d0dda7ab9e7a7de6212c598b702c5a6ae7d9d12ff4b450783c4dd95bb44f18bbbd7139285d09e7ef39f7df731b00536087fc87b9103e88e20efa0000000000120000000000000000", @ANYRES16=r8, @ANYBLOB="30002cbd700703dbdf251180000004000500fcd717510bfa46d785baaad5718386af161255d7b0f882616c649089d4f4d68c"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xd8, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa6a00000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc6aa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000084)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="e864000010d04a90193819a52dcb825c81a34948f8704497cffd128d9076302500fabe9421cfc4", @ANYRES16=0x0, @ANYBLOB="00000200000002000000da730a47"]}, 0x1, 0x0, 0x0, 0x8000}, 0x55)
syz_mount_image$cifs(&(0x7f00000002c0)='cifs\x00', &(0x7f00000003c0)='./file0\x00', 0x80, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)='eth\x00')
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x8e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000400))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x201, 0x4, 0x0, 0x0, 0x1f}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r12=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYBLOB="0fcb641375c807add4329350514cd8db25332de0bfaa209048aed1bce47f6cf1c1dfc0840d9ac26c9233670c4c9536dfd8beef58cd73f59153e992b45fd55507b837f88731e556d7d3c95cb35476799b2e", @ANYBLOB="2c616363659f98657874656e00"/26])
[ 671.956037] FAULT_INJECTION: forcing a failure.
[ 671.956037] name failslab, interval 1, probability 0, space 0, times 0
[ 671.965182] FAULT_INJECTION: forcing a failure.
[ 671.965182] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 671.976191] CPU: 0 PID: 18429 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0
[ 671.986999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 671.996390] Call Trace:
[ 671.998994] dump_stack+0x142/0x197
[ 672.002640] should_fail.cold+0x10f/0x159
[ 672.006801] should_failslab+0xdb/0x130
[ 672.010786] kmem_cache_alloc+0x2d7/0x780
[ 672.014931] mmap_region+0x602/0x1030
[ 672.018734] do_mmap+0x5b8/0xcd0
[ 672.022107] vm_mmap_pgoff+0x17a/0x1d0
[ 672.025995] ? vma_is_stack_for_current+0xa0/0xa0
[ 672.030833] ? __fget+0x237/0x370
[ 672.034295] SyS_mmap_pgoff+0x3ca/0x520
[ 672.038384] ? find_mergeable_anon_vma+0x2c0/0x2c0
[ 672.043322] ? do_syscall_64+0x53/0x640
[ 672.047295] ? align_vdso_addr+0x60/0x60
[ 672.051347] SyS_mmap+0x16/0x20
[ 672.054639] do_syscall_64+0x1e8/0x640
[ 672.058526] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 672.063376] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 672.068567] RIP: 0033:0x45b349
[ 672.071764] RSP: 002b:00007f6720eb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 672.079582] RAX: ffffffffffffffda RBX: 00007f6720eb46d4 RCX: 000000000045b349
[ 672.086865] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffd000
[ 672.094139] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000081000000
02:58:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{0x8, 0x6, 0xc8, 0x200, '\x00', 0x6}, 0x1, [0x4, 0x101, 0x2, 0x2, 0x4, 0x7f, 0x3f, 0x80, 0x8, 0x4, 0x2, 0x7fffffff, 0x8000, 0x7, 0x9, 0x8, 0x7, 0x2, 0xc2, 0x7ff, 0x547, 0xfffffffffffffbff, 0x0, 0x1, 0x8, 0x400000000000, 0x6, 0x0, 0x8, 0x6, 0x2, 0x101, 0x8001, 0xc2, 0x78c, 0x2, 0x3, 0x5, 0x9, 0x9021, 0x8, 0x9, 0x5, 0x3f, 0x6, 0x3, 0x3, 0x3ff, 0x3, 0x8, 0x2, 0x4, 0x7, 0x8406, 0x1ca, 0xfffffffffffffff8, 0x22, 0x9, 0x400, 0x2ca, 0x5, 0x9, 0xfffffffffffffc01, 0xa1, 0xde, 0x8a, 0x6, 0x101, 0x10001, 0x3, 0x8000, 0x2, 0x3, 0x8, 0x7, 0x8, 0x7, 0x3, 0x8744, 0x4800000000000000, 0xffff, 0x81, 0x5, 0x5, 0x1, 0x4, 0x0, 0x1, 0x7, 0x8, 0x400, 0x6fa, 0xfffffffffffffffb, 0x0, 0xac, 0xbdb, 0x200, 0x8, 0x3, 0x7, 0x200, 0xfffffffffffffff8, 0x8, 0x9, 0x0, 0x3058e81, 0x20, 0x29, 0x6, 0x100000000, 0x6, 0x1, 0x5, 0x6, 0x1f, 0x3011, 0x20, 0x4, 0x0, 0x2, 0x7f, 0x18619172, 0x100, 0xf48e, 0x7fff, 0xb8, 0x1ff, 0x3]})
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x5)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
02:58:53 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[]}}, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket(0x10, 0x80002, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x44000, 0x0)
ioctl$KVM_SMI(r3, 0xaeb7)
[ 672.101405] R10: 0000000000089011 R11: 0000000000000246 R12: 0000000000000004
[ 672.108680] R13: 000000000000071b R14: 00000000004c890e R15: 0000000000000004
[ 672.135704] CPU: 1 PID: 18430 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 672.143637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 672.153109] Call Trace:
[ 672.155715] dump_stack+0x142/0x197
[ 672.159374] should_fail.cold+0x10f/0x159
[ 672.163525] ? __might_sleep+0x93/0xb0
[ 672.167424] __alloc_pages_nodemask+0x1d6/0x7a0
[ 672.172145] ? __alloc_pages_slowpath+0x2930/0x2930
[ 672.177173] ? __lock_is_held+0xb6/0x140
[ 672.181238] ? check_preemption_disabled+0x3c/0x250
[ 672.186260] alloc_pages_current+0xec/0x1e0
[ 672.190639] __get_free_pages+0xf/0x40
[ 672.194524] get_zeroed_page+0x11/0x20
[ 672.198427] get_image_page+0x1c/0x140
[ 672.202332] alloc_rtree_node+0x41/0xa0
[ 672.206311] memory_bm_create+0x3bf/0x530
[ 672.207363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 672.210479] create_basic_memory_bitmaps+0x94/0x130
[ 672.210495] snapshot_open+0x378/0x400
[ 672.210506] ? snapshot_release+0x230/0x230
[ 672.210516] ? snapshot_release+0x230/0x230
[ 672.210530] misc_open+0x34f/0x480
[ 672.210543] ? misc_devnode+0x130/0x130
[ 672.224112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 672.227623] chrdev_open+0x207/0x590
[ 672.227637] ? cdev_put.part.0+0x50/0x50
[ 672.227653] ? security_file_open+0x89/0x190
[ 672.227667] do_dentry_open+0x73b/0xeb0
[ 672.227682] ? cdev_put.part.0+0x50/0x50
[ 672.232387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 672.236006] vfs_open+0x105/0x220
[ 672.236022] path_openat+0x8bd/0x3f70
[ 672.236035] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 672.236051] ? trace_hardirqs_on+0x10/0x10
[ 672.236070] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 672.241013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 672.243918] ? __lock_is_held+0xb6/0x140
[ 672.243931] ? save_trace+0x290/0x290
[ 672.243947] ? __alloc_fd+0x1d4/0x4a0
[ 672.243961] do_filp_open+0x18e/0x250
[ 672.243970] ? __alloc_fd+0x1d4/0x4a0
[ 672.243979] ? may_open_dev+0xe0/0xe0
[ 672.243998] ? do_raw_spin_unlock+0x174/0x260
[ 672.248471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 672.260008] ? _raw_spin_unlock+0x2d/0x50
[ 672.260020] ? __alloc_fd+0x1d4/0x4a0
[ 672.260047] do_sys_open+0x2c5/0x430
[ 672.260062] ? filp_open+0x70/0x70
[ 672.260080] SyS_openat+0x30/0x40
[ 672.260088] ? SyS_open+0x40/0x40
[ 672.260102] do_syscall_64+0x1e8/0x640
[ 672.260116] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 672.264790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 672.267887] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 672.267897] RIP: 0033:0x45b349
[ 672.267903] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 672.267915] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 672.267922] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 672.267928] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 672.267933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
02:58:53 executing program 0 (fault-call:1 fault-nth:5):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:58:53 executing program 4 (fault-call:1 fault-nth:47):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:53 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @empty}], 0x30)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0xa7, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000780)=ANY=[@ANYBLOB="1ef1d5c82a0705da934b52243b61da7c08220ab31377961481a86cef0c77e4c5f00836298ab1ab5067cf1b064ab40447c59e81de1e6c7ce4727dbd8ebe614ba57ba394e7895ee00b30e495a54eeaae4be9b5b0640287df321f81077c920975a0ac74396d2640df7bf8d1a6cade217661190ac7bced6b779e6189db7b3138018c1e4c0113c828d0dda7ab9e7a7de6212c598b702c5a6ae7d9d12ff4b450783c4dd95bb44f18bbbd7139285d09e7ef39f7df731b00536087fc87b9103e88e20efa0000000000120000000000000000", @ANYRES16=r8, @ANYBLOB="30002cbd700703dbdf251180000004000500fcd717510bfa46d785baaad5718386af161255d7b0f882616c649089d4f4d68c"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xd8, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa6a00000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc6aa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000084)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="e864000010d04a90193819a52dcb825c81a34948f8704497cffd128d9076302500fabe9421cfc4", @ANYRES16=0x0, @ANYBLOB="00000200000002000000da730a47"]}, 0x1, 0x0, 0x0, 0x8000}, 0x55)
syz_mount_image$cifs(&(0x7f00000002c0)='cifs\x00', &(0x7f00000003c0)='./file0\x00', 0x80, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)='eth\x00')
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x8e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000400))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x201, 0x4, 0x0, 0x0, 0x1f}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r12=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYBLOB="0fcb641375c807add4329350514cd8db25332de0bfaa209048aed1bce47f6cf1c1dfc0840d9ac26c9233670c4c9536dfd8beef58cd73f59153e992b45fd55507b837f88731e556d7d3c95cb35476799b2e", @ANYBLOB="2c616363659f98657874656e00"/26])
[ 672.267947] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000002e
[ 672.477604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 672.519069] FAULT_INJECTION: forcing a failure.
[ 672.519069] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 672.558600] CPU: 0 PID: 18455 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 672.566547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 672.575920] Call Trace:
[ 672.578537] dump_stack+0x142/0x197
[ 672.582201] should_fail.cold+0x10f/0x159
[ 672.586373] ? __might_sleep+0x93/0xb0
[ 672.590388] __alloc_pages_nodemask+0x1d6/0x7a0
[ 672.595089] ? __alloc_pages_slowpath+0x2930/0x2930
[ 672.600184] ? __lock_is_held+0xb6/0x140
[ 672.604273] ? check_preemption_disabled+0x3c/0x250
[ 672.609314] alloc_pages_current+0xec/0x1e0
[ 672.613664] __get_free_pages+0xf/0x40
[ 672.617577] get_zeroed_page+0x11/0x20
[ 672.621487] get_image_page+0x1c/0x140
[ 672.625413] alloc_rtree_node+0x41/0xa0
[ 672.629421] memory_bm_create+0x3bf/0x530
[ 672.633713] create_basic_memory_bitmaps+0x94/0x130
[ 672.638772] snapshot_open+0x378/0x400
[ 672.642683] ? snapshot_release+0x230/0x230
[ 672.647029] ? snapshot_release+0x230/0x230
[ 672.651382] misc_open+0x34f/0x480
[ 672.654948] ? misc_devnode+0x130/0x130
[ 672.658970] chrdev_open+0x207/0x590
[ 672.662713] ? cdev_put.part.0+0x50/0x50
02:58:53 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
02:58:53 executing program 2:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x294, r4, 0x620, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda73}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x79}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcf5b}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x401, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x2a}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x28}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x19}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x358}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x0, 0x70, 0x4b, 0xff, 0x9, 0x8, 0x0, 0x40, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x2, 0x5}, 0x1, 0x8, 0x81, 0x6, 0x1f, 0x8, 0xfffd})
r5 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r5, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000001480)=[{&(0x7f0000000480)="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", 0x1000, 0x10001, 0x4}], 0x3e0000)
[ 672.666810] ? security_file_open+0x89/0x190
[ 672.671244] do_dentry_open+0x73b/0xeb0
[ 672.675241] ? cdev_put.part.0+0x50/0x50
[ 672.679333] vfs_open+0x105/0x220
[ 672.682811] path_openat+0x8bd/0x3f70
[ 672.686628] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 672.692149] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 672.696835] ? __lock_is_held+0xb6/0x140
[ 672.700920] ? save_trace+0x290/0x290
[ 672.704752] ? __alloc_fd+0x1d4/0x4a0
[ 672.708585] do_filp_open+0x18e/0x250
[ 672.712398] ? __alloc_fd+0x1d4/0x4a0
[ 672.716216] ? may_open_dev+0xe0/0xe0
[ 672.720053] ? do_raw_spin_unlock+0x174/0x260
[ 672.724571] ? _raw_spin_unlock+0x2d/0x50
[ 672.728756] ? __alloc_fd+0x1d4/0x4a0
[ 672.732601] do_sys_open+0x2c5/0x430
[ 672.736335] ? filp_open+0x70/0x70
[ 672.739919] SyS_openat+0x30/0x40
[ 672.743385] ? SyS_open+0x40/0x40
[ 672.746856] do_syscall_64+0x1e8/0x640
[ 672.750757] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 672.755620] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 672.760817] RIP: 0033:0x45b349
[ 672.764010] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 672.771721] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 672.778993] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 672.786267] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 672.793540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 672.800815] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000002f
[ 672.961269] 9pnet: Insufficient options for proto=fd
[ 673.018959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
[ 673.066106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
02:58:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000180))
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x2, 0xb, 0x4, 0x20000, 0x3, {}, {0x5, 0x2, 0xc1, 0x2, 0x3, 0x9, "cb5fd8e4"}, 0x2, 0x1, @fd, 0x10001, 0x0, <r4=>r0})
connect$x25(r4, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r5, 0xc0386106, &(0x7f0000000040))
02:58:54 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c)
listen(r0, 0x1d7)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x8}, 0x4)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r2=>0x0)
process_vm_writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, &(0x7f0000000440)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)
[ 673.112162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18440 comm=syz-executor.5
02:58:54 executing program 4 (fault-call:1 fault-nth:48):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000040)="9012189eb87c0c956af24476d6c6bdfa072335093e03441198cc968fba46acb09a7d75ee6fa5db282e5db6c75cd92d378f6ac5e2fc8a016212de100e71c539218e3aee57ed60f40fadd3b6a24be8702a1777c6f8f376e192c751b623762273ad665f87cc5ce305c7f133f75c96b9a5cc", 0x70}], 0x3)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xa)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8010)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000440)="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", 0xc16}], 0x1}, 0x0)
02:58:54 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)
socket$inet6(0xa, 0x803, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x8080, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev\x00')
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r8 = syz_open_pts(r7, 0x4000000000000002)
sendfile(r8, r6, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r9, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8094)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4003)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0xff, [[0x7, 0x48c2, 0x3, 0x9, 0x7fffffff, 0x3, 0x4, 0xabd3], [0xffffffff, 0xfffffffc, 0x7fff, 0xf2f, 0x5, 0x50f, 0x2, 0x8000], [0x8, 0x2, 0x3f, 0x101, 0x7, 0x400, 0x3f, 0x5]], [], [{0x2, 0x92, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x3, 0x1}, {0x3, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8001, 0x7, 0x0, 0x1, 0x0, 0x1}, {0xa5, 0x81, 0x0, 0x1}, {0xffff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x7}, {0x1f, 0x5, 0x0, 0x1, 0x1}, {0xffffffff, 0xb8c, 0x0, 0x0, 0x1}], [], 0x8001})
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f0000000440)="20cdd10fa8f3cacb3a239388bb643de4415bdddd738a804c07ed8c266d15bbcdb26af508ad99dd81412360f5042f35d24d9961f56239276da5aa18cf6783431f05de5b5c61e3b01500353e55d23ecb610d2f41d2a664b00b0cac9a4cc672fb440e20f64be7a50142b43c4e77f4b3944abdfaa371f710c506a82f850357d7ba9d587aa2052712171de25ea47829c0d01d9d2d293f482b08dd13d6a1ef836a10ab2d415fb8adca63", &(0x7f0000000500)="5a2d9794e495a7fc5e297ba428dea46eb0ce6814b340f5b91e237a493662c4c91f476968a456b4e8ce47627ef8737f", 0x1}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r10, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x9, 0x99a, "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", 0x7, 0x0, 0x38, 0x81, 0x2, 0x3f, 0x81}, r4}}, 0x120)
02:58:54 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]})
[ 673.258835] FAULT_INJECTION: forcing a failure.
[ 673.258835] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 673.318667] CPU: 0 PID: 18485 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 673.326621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 673.335992] Call Trace:
[ 673.338602] dump_stack+0x142/0x197
[ 673.342256] should_fail.cold+0x10f/0x159
[ 673.346419] ? __might_sleep+0x93/0xb0
[ 673.350336] __alloc_pages_nodemask+0x1d6/0x7a0
[ 673.355031] ? __alloc_pages_slowpath+0x2930/0x2930
[ 673.360070] ? __lock_is_held+0xb6/0x140
[ 673.364143] ? check_preemption_disabled+0x3c/0x250
[ 673.369188] alloc_pages_current+0xec/0x1e0
[ 673.373533] __get_free_pages+0xf/0x40
[ 673.377439] get_zeroed_page+0x11/0x20
[ 673.381342] get_image_page+0x1c/0x140
[ 673.385254] alloc_rtree_node+0x41/0xa0
[ 673.389358] memory_bm_create+0x3bf/0x530
[ 673.393549] create_basic_memory_bitmaps+0x94/0x130
[ 673.398588] snapshot_open+0x378/0x400
[ 673.402501] ? snapshot_release+0x230/0x230
[ 673.406842] ? snapshot_release+0x230/0x230
[ 673.411186] misc_open+0x34f/0x480
[ 673.414753] ? misc_devnode+0x130/0x130
[ 673.418751] chrdev_open+0x207/0x590
[ 673.422484] ? cdev_put.part.0+0x50/0x50
[ 673.426575] ? security_file_open+0x89/0x190
[ 673.431012] do_dentry_open+0x73b/0xeb0
[ 673.435012] ? cdev_put.part.0+0x50/0x50
[ 673.439107] vfs_open+0x105/0x220
[ 673.442591] path_openat+0x8bd/0x3f70
[ 673.446517] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 673.451936] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 673.456632] ? __lock_is_held+0xb6/0x140
[ 673.460723] ? save_trace+0x290/0x290
[ 673.464566] ? __alloc_fd+0x1d4/0x4a0
[ 673.468402] do_filp_open+0x18e/0x250
[ 673.472229] ? __alloc_fd+0x1d4/0x4a0
[ 673.476165] ? may_open_dev+0xe0/0xe0
[ 673.480011] ? do_raw_spin_unlock+0x174/0x260
[ 673.484537] ? _raw_spin_unlock+0x2d/0x50
[ 673.488730] ? __alloc_fd+0x1d4/0x4a0
[ 673.492573] do_sys_open+0x2c5/0x430
[ 673.496322] ? filp_open+0x70/0x70
[ 673.499907] SyS_openat+0x30/0x40
[ 673.503401] ? SyS_open+0x40/0x40
[ 673.506888] do_syscall_64+0x1e8/0x640
[ 673.510797] ? trace_hardirqs_off_thunk+0x1a/0x1c
02:58:54 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x84)
add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000001080)='5', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x35}, 0x5}, 0x1c)
[ 673.515679] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 673.520884] RIP: 0033:0x45b349
[ 673.524084] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 673.531824] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 673.539111] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 673.546504] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 673.553794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 673.561079] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000030
02:58:54 executing program 4 (fault-call:1 fault-nth:49):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 673.747163] FAULT_INJECTION: forcing a failure.
[ 673.747163] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 673.776156] CPU: 1 PID: 18510 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 673.784084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 673.793886] Call Trace:
[ 673.796488] dump_stack+0x142/0x197
[ 673.800129] should_fail.cold+0x10f/0x159
[ 673.804282] ? __might_sleep+0x93/0xb0
[ 673.808190] __alloc_pages_nodemask+0x1d6/0x7a0
[ 673.812901] ? __alloc_pages_slowpath+0x2930/0x2930
[ 673.817928] ? __lock_is_held+0xb6/0x140
[ 673.822000] ? check_preemption_disabled+0x3c/0x250
[ 673.827045] alloc_pages_current+0xec/0x1e0
[ 673.831374] __get_free_pages+0xf/0x40
[ 673.835268] get_zeroed_page+0x11/0x20
[ 673.839159] get_image_page+0x1c/0x140
[ 673.843402] alloc_rtree_node+0x41/0xa0
[ 673.847384] memory_bm_create+0x3bf/0x530
[ 673.851553] create_basic_memory_bitmaps+0x94/0x130
[ 673.856662] snapshot_open+0x378/0x400
[ 673.860559] ? snapshot_release+0x230/0x230
[ 673.864885] ? snapshot_release+0x230/0x230
[ 673.869217] misc_open+0x34f/0x480
[ 673.872770] ? misc_devnode+0x130/0x130
[ 673.876749] chrdev_open+0x207/0x590
[ 673.880485] ? cdev_put.part.0+0x50/0x50
[ 673.884559] ? security_file_open+0x89/0x190
[ 673.888973] do_dentry_open+0x73b/0xeb0
[ 673.892989] ? cdev_put.part.0+0x50/0x50
[ 673.897061] vfs_open+0x105/0x220
[ 673.901568] path_openat+0x8bd/0x3f70
[ 673.905379] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 673.910756] ? trace_hardirqs_on+0x10/0x10
[ 673.915009] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 673.919686] ? __lock_is_held+0xb6/0x140
[ 673.923758] ? save_trace+0x290/0x290
[ 673.927569] ? __alloc_fd+0x1d4/0x4a0
[ 673.931376] do_filp_open+0x18e/0x250
[ 673.935181] ? __alloc_fd+0x1d4/0x4a0
[ 673.938982] ? may_open_dev+0xe0/0xe0
[ 673.942793] ? do_raw_spin_unlock+0x174/0x260
[ 673.947278] ? _raw_spin_unlock+0x2d/0x50
[ 673.951433] ? __alloc_fd+0x1d4/0x4a0
[ 673.955249] do_sys_open+0x2c5/0x430
[ 673.958977] ? filp_open+0x70/0x70
[ 673.962536] SyS_openat+0x30/0x40
[ 673.965989] ? SyS_open+0x40/0x40
[ 673.969447] do_syscall_64+0x1e8/0x640
[ 673.973346] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 673.978198] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 673.983393] RIP: 0033:0x45b349
[ 673.986584] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 673.994296] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 674.001573] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 674.008848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 674.016209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 674.023485] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000031
02:58:55 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)="582de2e9f2af5b5960ad673fe1429ca6496601dd48bc9c9c35b0e05eb39ef59348a0244273c060c20ae88242eaa6f7d61da784dd869f5f1b33a1efc9ced4402efa7831c629eef3147e6c935a086429104db22bf295dc5278328391869f11d14be86952cced986b2b4a4eb70673cf96ddc490a188e53f6e885df6a351fdc9bdf50cf60700b7fc1fa9ac949be115cfde36900d0933cef29faa8c664aaf0d3d59fd0bdf4b1f978a09d3709c7f2fb340b427898126764631f5ef3b04e679d9979c165847ce6bc0", &(0x7f0000000140)="e21eb8b5e3f2854a6b55c42816a451473c0d51989a5d85f6a65ebe61e2", 0x2}, 0x20)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000001c0)="e6d5ee13ef52e786", &(0x7f0000000200)="0d89590c96d1ad137c5bf2e1966e3bc3487212e88d0b373c2d03aa81e245527f369f9c839dc1e6b07c802ddcdf977f52e91e18169d95a4ea44ec45cfedd25d3b2ec3", 0x2}, 0x20)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x109480, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r3, 0xc}}, 0x10)
ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000002c0)={0x6, 0x2})
02:58:55 executing program 4 (fault-call:1 fault-nth:50):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:55 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
[ 674.261114] FAULT_INJECTION: forcing a failure.
[ 674.261114] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 674.287807] CPU: 0 PID: 18530 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 674.295730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 674.305206] Call Trace:
[ 674.307826] dump_stack+0x142/0x197
[ 674.311480] should_fail.cold+0x10f/0x159
[ 674.315639] ? __might_sleep+0x93/0xb0
[ 674.319557] __alloc_pages_nodemask+0x1d6/0x7a0
[ 674.324257] ? __alloc_pages_slowpath+0x2930/0x2930
[ 674.329310] ? __lock_is_held+0xb6/0x140
[ 674.333383] ? check_preemption_disabled+0x3c/0x250
[ 674.338426] alloc_pages_current+0xec/0x1e0
[ 674.342770] __get_free_pages+0xf/0x40
[ 674.346671] get_zeroed_page+0x11/0x20
[ 674.350576] get_image_page+0x1c/0x140
[ 674.354483] alloc_rtree_node+0x41/0xa0
[ 674.358474] memory_bm_create+0x3bf/0x530
[ 674.362657] create_basic_memory_bitmaps+0x94/0x130
[ 674.367696] snapshot_open+0x378/0x400
[ 674.371607] ? snapshot_release+0x230/0x230
[ 674.375946] ? snapshot_release+0x230/0x230
[ 674.380290] misc_open+0x34f/0x480
[ 674.383858] ? misc_devnode+0x130/0x130
[ 674.387847] chrdev_open+0x207/0x590
[ 674.391578] ? cdev_put.part.0+0x50/0x50
[ 674.395664] ? security_file_open+0x89/0x190
[ 674.400089] do_dentry_open+0x73b/0xeb0
[ 674.404081] ? cdev_put.part.0+0x50/0x50
[ 674.408175] vfs_open+0x105/0x220
[ 674.411647] path_openat+0x8bd/0x3f70
[ 674.415458] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 674.420864] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 674.425545] ? __lock_is_held+0xb6/0x140
[ 674.429618] ? save_trace+0x290/0x290
[ 674.433433] ? __alloc_fd+0x1d4/0x4a0
[ 674.437361] do_filp_open+0x18e/0x250
[ 674.441175] ? __alloc_fd+0x1d4/0x4a0
[ 674.444995] ? may_open_dev+0xe0/0xe0
[ 674.448828] ? do_raw_spin_unlock+0x174/0x260
[ 674.453339] ? _raw_spin_unlock+0x2d/0x50
[ 674.457500] ? __alloc_fd+0x1d4/0x4a0
[ 674.461338] do_sys_open+0x2c5/0x430
[ 674.465069] ? filp_open+0x70/0x70
[ 674.468638] SyS_openat+0x30/0x40
[ 674.472101] ? SyS_open+0x40/0x40
[ 674.475574] do_syscall_64+0x1e8/0x640
[ 674.479475] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 674.484342] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 674.489566] RIP: 0033:0x45b349
[ 674.492760] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 674.500489] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 674.507773] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 674.515059] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 674.522340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 674.529628] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000032
02:58:55 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = fcntl$dupfd(r1, 0x406, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000aef000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="66ba2000edc462f923d4c4a27d25cc460fc76cb91d400f6fd366baf80cb852cc3781ef66bafc0cb028ee48b80f000000000000000f23c80f21f835040080000f23f8440f20c0350f000000440f22c0b9860a0000b80f000000ba000000000f30450f00de", 0x64}], 0x1, 0x10, &(0x7f0000000100), 0x0)
mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0xa, 0x8012, r0, 0x0)
02:58:55 executing program 4 (fault-call:1 fault-nth:51):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 674.605135] syz-executor.1 (18509) used greatest stack depth: 23200 bytes left
02:58:55 executing program 0:
prctl$PR_SET_TIMERSLACK(0x1d, 0x10000)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x400, 0x282680)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:58:55 executing program 1:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38e, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0, r0, 0x6dc2ac5cdfd0069e)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
[ 674.687037] FAULT_INJECTION: forcing a failure.
[ 674.687037] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 674.711615] CPU: 0 PID: 18541 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 674.719772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 674.729136] Call Trace:
[ 674.731747] dump_stack+0x142/0x197
[ 674.735401] should_fail.cold+0x10f/0x159
[ 674.739560] ? __might_sleep+0x93/0xb0
[ 674.743469] __alloc_pages_nodemask+0x1d6/0x7a0
[ 674.748163] ? __alloc_pages_slowpath+0x2930/0x2930
[ 674.753204] ? __lock_is_held+0xb6/0x140
[ 674.757285] ? check_preemption_disabled+0x3c/0x250
[ 674.762321] alloc_pages_current+0xec/0x1e0
[ 674.766660] __get_free_pages+0xf/0x40
[ 674.770566] get_zeroed_page+0x11/0x20
[ 674.774459] get_image_page+0x1c/0x140
[ 674.778363] alloc_rtree_node+0x41/0xa0
[ 674.782354] memory_bm_create+0x3bf/0x530
[ 674.786636] create_basic_memory_bitmaps+0x94/0x130
[ 674.791669] snapshot_open+0x378/0x400
[ 674.795565] ? snapshot_release+0x230/0x230
[ 674.799902] ? snapshot_release+0x230/0x230
[ 674.804246] misc_open+0x34f/0x480
[ 674.807800] ? misc_devnode+0x130/0x130
[ 674.811785] chrdev_open+0x207/0x590
[ 674.815534] ? cdev_put.part.0+0x50/0x50
[ 674.819608] ? security_file_open+0x89/0x190
[ 674.824032] do_dentry_open+0x73b/0xeb0
[ 674.828020] ? cdev_put.part.0+0x50/0x50
[ 674.832102] vfs_open+0x105/0x220
[ 674.835572] path_openat+0x8bd/0x3f70
[ 674.839383] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 674.844785] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 674.849462] ? __lock_is_held+0xb6/0x140
[ 674.853535] ? save_trace+0x290/0x290
[ 674.857352] ? __alloc_fd+0x1d4/0x4a0
[ 674.861168] do_filp_open+0x18e/0x250
[ 674.864978] ? __alloc_fd+0x1d4/0x4a0
[ 674.868816] ? may_open_dev+0xe0/0xe0
[ 674.872648] ? do_raw_spin_unlock+0x174/0x260
[ 674.877156] ? _raw_spin_unlock+0x2d/0x50
[ 674.881315] ? __alloc_fd+0x1d4/0x4a0
[ 674.885152] do_sys_open+0x2c5/0x430
[ 674.888883] ? filp_open+0x70/0x70
[ 674.892455] SyS_openat+0x30/0x40
[ 674.895921] ? SyS_open+0x40/0x40
[ 674.899395] do_syscall_64+0x1e8/0x640
[ 674.903306] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 674.908193] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 674.913407] RIP: 0033:0x45b349
[ 674.916614] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 674.924341] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 674.931637] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 674.938929] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 674.946223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 674.953511] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000033
02:58:56 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x410201)
fchdir(r0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1000010, 0x4000010, r0, 0x81000000)
[ 674.994514] audit: type=1400 audit(1579834736.084:459): avc: denied { map } for pid=18542 comm="syz-executor.5" path="/dev/usbmon0" dev="devtmpfs" ino=16355 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usbmon_device_t:s0 tclass=chr_file permissive=1
02:58:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:56 executing program 4 (fault-call:1 fault-nth:52):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x800000003}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10061, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
02:58:56 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 675.126316] FAULT_INJECTION: forcing a failure.
[ 675.126316] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 675.166179] CPU: 1 PID: 18563 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 675.174114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 675.183481] Call Trace:
[ 675.186090] dump_stack+0x142/0x197
[ 675.189745] should_fail.cold+0x10f/0x159
[ 675.193908] ? __might_sleep+0x93/0xb0
[ 675.197812] __alloc_pages_nodemask+0x1d6/0x7a0
[ 675.202499] ? __alloc_pages_slowpath+0x2930/0x2930
[ 675.207538] ? __lock_is_held+0xb6/0x140
[ 675.211614] ? check_preemption_disabled+0x3c/0x250
[ 675.216647] alloc_pages_current+0xec/0x1e0
[ 675.220983] __get_free_pages+0xf/0x40
[ 675.224876] get_zeroed_page+0x11/0x20
[ 675.228800] get_image_page+0x1c/0x140
[ 675.232695] alloc_rtree_node+0x41/0xa0
[ 675.236677] memory_bm_create+0x3bf/0x530
[ 675.240845] create_basic_memory_bitmaps+0x94/0x130
[ 675.245869] snapshot_open+0x378/0x400
[ 675.249763] ? snapshot_release+0x230/0x230
[ 675.254379] ? snapshot_release+0x230/0x230
[ 675.258714] misc_open+0x34f/0x480
[ 675.262267] ? misc_devnode+0x130/0x130
[ 675.266246] chrdev_open+0x207/0x590
[ 675.269967] ? cdev_put.part.0+0x50/0x50
[ 675.274041] ? security_file_open+0x89/0x190
[ 675.278470] do_dentry_open+0x73b/0xeb0
[ 675.282456] ? cdev_put.part.0+0x50/0x50
[ 675.286535] vfs_open+0x105/0x220
[ 675.289998] path_openat+0x8bd/0x3f70
[ 675.293801] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 675.299183] ? trace_hardirqs_on+0x10/0x10
[ 675.303439] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 675.308116] ? __lock_is_held+0xb6/0x140
[ 675.312196] ? save_trace+0x290/0x290
[ 675.316008] ? __alloc_fd+0x1d4/0x4a0
[ 675.319823] do_filp_open+0x18e/0x250
[ 675.323633] ? __alloc_fd+0x1d4/0x4a0
02:58:56 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000080)=0x7)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 675.327445] ? may_open_dev+0xe0/0xe0
[ 675.331270] ? do_raw_spin_unlock+0x174/0x260
[ 675.335778] ? _raw_spin_unlock+0x2d/0x50
[ 675.339937] ? __alloc_fd+0x1d4/0x4a0
[ 675.343761] do_sys_open+0x2c5/0x430
[ 675.347491] ? filp_open+0x70/0x70
[ 675.351052] SyS_openat+0x30/0x40
[ 675.354513] ? SyS_open+0x40/0x40
[ 675.357998] do_syscall_64+0x1e8/0x640
[ 675.361899] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 675.366767] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 675.371968] RIP: 0033:0x45b349
02:58:56 executing program 4 (fault-call:1 fault-nth:53):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 675.375166] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 675.382897] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 675.390177] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 675.397463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 675.404846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 675.412125] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000034
02:58:56 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd73f720de82df5fd, 0x4000010, r0, 0x81000000)
[ 675.491653] FAULT_INJECTION: forcing a failure.
[ 675.491653] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 675.511528] CPU: 1 PID: 18581 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 675.519464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 675.528835] Call Trace:
[ 675.531444] dump_stack+0x142/0x197
[ 675.535092] should_fail.cold+0x10f/0x159
[ 675.539247] ? __might_sleep+0x93/0xb0
[ 675.543154] __alloc_pages_nodemask+0x1d6/0x7a0
[ 675.547842] ? __alloc_pages_slowpath+0x2930/0x2930
[ 675.552875] ? __lock_is_held+0xb6/0x140
[ 675.556943] ? check_preemption_disabled+0x3c/0x250
[ 675.561975] alloc_pages_current+0xec/0x1e0
[ 675.566311] __get_free_pages+0xf/0x40
[ 675.570207] get_zeroed_page+0x11/0x20
[ 675.574102] get_image_page+0x1c/0x140
[ 675.577999] alloc_rtree_node+0x41/0xa0
[ 675.581985] memory_bm_create+0x3bf/0x530
[ 675.586149] create_basic_memory_bitmaps+0x94/0x130
[ 675.591173] snapshot_open+0x378/0x400
[ 675.595063] ? snapshot_release+0x230/0x230
[ 675.599390] ? snapshot_release+0x230/0x230
[ 675.603725] misc_open+0x34f/0x480
[ 675.607276] ? misc_devnode+0x130/0x130
[ 675.611258] chrdev_open+0x207/0x590
[ 675.614988] ? cdev_put.part.0+0x50/0x50
[ 675.619061] ? security_file_open+0x89/0x190
[ 675.623489] do_dentry_open+0x73b/0xeb0
[ 675.627484] ? cdev_put.part.0+0x50/0x50
[ 675.631571] vfs_open+0x105/0x220
[ 675.635053] path_openat+0x8bd/0x3f70
[ 675.638870] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 675.644274] ? trace_hardirqs_on+0x10/0x10
[ 675.648545] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 675.653233] ? __lock_is_held+0xb6/0x140
[ 675.657326] ? save_trace+0x290/0x290
[ 675.661154] ? __alloc_fd+0x1d4/0x4a0
[ 675.664980] do_filp_open+0x18e/0x250
[ 675.668796] ? __alloc_fd+0x1d4/0x4a0
[ 675.672616] ? may_open_dev+0xe0/0xe0
[ 675.676451] ? do_raw_spin_unlock+0x174/0x260
[ 675.680966] ? _raw_spin_unlock+0x2d/0x50
[ 675.685132] ? __alloc_fd+0x1d4/0x4a0
[ 675.688969] do_sys_open+0x2c5/0x430
[ 675.692718] ? filp_open+0x70/0x70
[ 675.696286] SyS_openat+0x30/0x40
[ 675.699761] ? SyS_open+0x40/0x40
[ 675.703230] do_syscall_64+0x1e8/0x640
[ 675.707133] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 675.711998] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 675.717372] RIP: 0033:0x45b349
[ 675.720577] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 675.728301] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 675.735587] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:58:56 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x20010, r0, 0x81000000)
write(0xffffffffffffffff, &(0x7f0000000040)="1b61cfae27813017598957258ce14236aa78e1268dd59ffb4eef54fb4e2ae5e184519a1c093be01ac66a1e34719a6f698147505cfcc3b6333261af6a86d9cb404f74c6850903c57cd0db830a893f746978fe8729596a38198d", 0x59)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='berfs.nodev]\x00'], &(0x7f0000000140)=""/255, 0xff)
[ 675.742873] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 675.750154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 675.757442] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000035
02:58:56 executing program 4 (fault-call:1 fault-nth:54):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:56 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x14f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0)
ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000080)={[], 0xb1c1, 0x2, 0x3, 0x0, 0x7fff, 0x10000, 0x2, [], 0x9})
02:58:56 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x280000, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="f3ff0000", @ANYRES32=0x0, @ANYRES32=<r5=>0x0], &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x76, &(0x7f0000000800)={r5}, 0x8)
socket$pptp(0x18, 0x1, 0x2)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r5}, 0x8)
[ 675.875869] FAULT_INJECTION: forcing a failure.
[ 675.875869] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 675.924778] CPU: 1 PID: 18591 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 675.932711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 675.942080] Call Trace:
[ 675.944694] dump_stack+0x142/0x197
[ 675.948347] should_fail.cold+0x10f/0x159
[ 675.952508] ? __might_sleep+0x93/0xb0
[ 675.956415] __alloc_pages_nodemask+0x1d6/0x7a0
[ 675.961105] ? __alloc_pages_slowpath+0x2930/0x2930
[ 675.966137] ? __lock_is_held+0xb6/0x140
[ 675.970205] ? check_preemption_disabled+0x3c/0x250
[ 675.975235] alloc_pages_current+0xec/0x1e0
[ 675.979580] __get_free_pages+0xf/0x40
[ 675.983486] get_zeroed_page+0x11/0x20
[ 675.987399] get_image_page+0x1c/0x140
[ 675.991305] alloc_rtree_node+0x41/0xa0
[ 675.995406] memory_bm_create+0x3bf/0x530
[ 675.999581] create_basic_memory_bitmaps+0x94/0x130
[ 676.004619] snapshot_open+0x378/0x400
[ 676.008516] ? snapshot_release+0x230/0x230
[ 676.012847] ? snapshot_release+0x230/0x230
[ 676.017175] misc_open+0x34f/0x480
[ 676.020731] ? misc_devnode+0x130/0x130
[ 676.024713] chrdev_open+0x207/0x590
[ 676.028435] ? cdev_put.part.0+0x50/0x50
[ 676.032517] ? security_file_open+0x89/0x190
[ 676.036942] do_dentry_open+0x73b/0xeb0
[ 676.040947] ? cdev_put.part.0+0x50/0x50
[ 676.045024] vfs_open+0x105/0x220
[ 676.048493] path_openat+0x8bd/0x3f70
[ 676.052308] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 676.057693] ? trace_hardirqs_on+0x10/0x10
[ 676.061953] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 676.066633] ? __lock_is_held+0xb6/0x140
[ 676.070714] ? save_trace+0x290/0x290
[ 676.074555] ? __alloc_fd+0x1d4/0x4a0
[ 676.078374] do_filp_open+0x18e/0x250
[ 676.082187] ? __alloc_fd+0x1d4/0x4a0
[ 676.086007] ? may_open_dev+0xe0/0xe0
[ 676.089830] ? do_raw_spin_unlock+0x174/0x260
[ 676.094340] ? _raw_spin_unlock+0x2d/0x50
[ 676.098502] ? __alloc_fd+0x1d4/0x4a0
[ 676.102332] do_sys_open+0x2c5/0x430
[ 676.106064] ? filp_open+0x70/0x70
[ 676.109624] SyS_openat+0x30/0x40
[ 676.113089] ? SyS_open+0x40/0x40
[ 676.116590] do_syscall_64+0x1e8/0x640
[ 676.120483] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 676.125342] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 676.130534] RIP: 0033:0x45b349
[ 676.133727] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 676.141443] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 676.148720] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 676.156000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 676.163281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
02:58:57 executing program 1:
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4)
socket$caif_stream(0x25, 0x1, 0x5)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618)
close(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x6dd9207777e1701)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f00000000c0))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0xb], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r7})
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001425815bd93546bf8aa85eb954eeb94daeebd919b94e402fea2f459b641bd844952c19a68b752381b4b304e85c60f207eecfef2c2960b41e756b2be51eec6164ad3c", @ANYRES32=r7, @ANYBLOB="14000100ff010000000000000000000000000001"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x24044001)
sendmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x3, 0x2, {0xa, 0x4e20, 0x163, @remote, 0x4221}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="6932dd59155893270c1f30691285a3fe0ea544613f89eeeac1a4b161ad575a8d", 0x20}, {&(0x7f0000000500)="076f1df79f1c23f03c2890a466fc119a7a14efd90c490cdb487489278506fb19895134b82f2345aac1786e4abf2a5dd0cc5d150d3b6f9f3b6534b6f98636641cf7b06552f229cfef92", 0x49}, {&(0x7f0000000300)="dd813f03fa88", 0x6}, {&(0x7f0000000580)="e850826f332838c5bf75057c1dc8e6ef601707c9ee5e200309370cbf495e6c8abb7c08eb9b38b0d8886f13599b5ba3fa636bcc58810ae3f34f3aeebf146ab9fe175aa3a600033134aa82832493fdbe98e2a42af0648d60abb3e53e57540c22b3ed0451e67d6863640813fe2846c7ea700bb0c1c8", 0x74}, {&(0x7f0000000600)="6bc4b72563d59b34455877da8c890a5bcd52bb6e905bb738d48eb41a4d48da7e3f0e0271d79d40480898c2d3d46e605fb57f0eaba6a86204a2ba804c38ff060424645a45653c6ef203fbf620bf814267e2463b0e85cf421e1c6fbca5a4992206e107c47ae53c96688b09d09bff", 0x6d}], 0x5}}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)="5c0ce27fcc326ef05d5f647cdfd943d4321b69dae86d", 0x16}, {&(0x7f00000007c0)="babec76b025d34b5b917c6e2a54755a06345347d4474e39eb021e0dc679582fa391f6c9e16f91e1afb7f477ba8de141624c17cec103751d6c01f834bd59fa7fb2667b4cbaac962204c96969340827295793f469439c77a3c", 0x58}, {&(0x7f0000000840)="6487883bf5ae5324171bca360c62e4edb46f9b84a37b4ee86f026e4b4f282b7ef630b2ee9202e1cbcb0f031df8e814a3da295d2ba56a31a66d69d7bbee2285224a871a6ece55b65ebfa8b38539c584c0b7be3933ab7540b98c1cde8743de36e0e3021aca", 0x64}, {&(0x7f00000008c0)="1b5ea5c9739ed1026d1b0dc6bdd3a2fa96358e1d248fb26853f1c10978436f14e41d8f3dcfbd75ab3939ae85868f38699194dd30ce011db194e07989c97dbb68ae844ef73a744f3f591711fe43e254cb58417ff13740ffc5f20f562e6edba65e5fbdce782d13c2f6cba254d6df4124", 0x6f}, {&(0x7f0000000940)="fc2b07598a9abbacaf5ed89a4d88dd739d76894300900f15a389a6847d656aaf543fabd6089d1905c668ba3754ee45c3b102ad699dfe532d52", 0x39}, {&(0x7f0000000980)="fee660e3617936c1c7deecd84fa74b5d2beb62420b5e1145b293f8d6773b96e2e13cd08ae079bd1b1042b84ada2d8f6050edb5ca00669554d1c6b013ae147a", 0x3f}], 0x6}}, {{&(0x7f0000000a40)=@can={0x1d, r7}, 0x299, &(0x7f0000001c00)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="67a97fef4d904cd5d41f9d62cd874866a450cbb5e32fc47691e795161f838aa53e7b6b472d3e51444b082330bfbd31f7530e5387d9fa746848157c2dada9d2f1379b6a51b9fa08dc81f9d6ecd927498a4f78de9deaee8db321d24edf7fb693cabe254d486c9b42e5433d853742c3e0756ccddf1e6657d5f1d270cf441f451b2743e42007eb19da0a9106e2821166cdd946a5be80fe065a2b0660f17a87a4254795eecaef30e553a1ac46775377a878df9c69b7649d24ed8950343880f3f865937697bda4a02f3f4c8242b1c892260c5b8a1dda06caab124e0d4c730fcc43bf9a784738b6f9ea08c2d32c9979c7", 0xed}, {&(0x7f0000001bc0)="09572ce59449d572e534a701d5ad8cf8", 0x10}], 0x3, &(0x7f0000003f00)=[{0x1010, 0x0, 0x5, "e025ba5f83a96468fd7dfb29aecd9d89222264d85db05606deca101d1eaca2364495ef516dd1a397b4188598a67bf2e90aecc97401dafb755b21a30bc82145441742346aaf5623b2cccaca701b11201d9185b5d8a7cb6e86de865a50328c68a2d5b66ce7a5868a71253a3e8f86aef916ba5cec4cbf39564e562aa1949b67b11b16169b93c42e531c8a3b05926e774c01605d7bd3641d4396ba033ebd168081afe44cf69a44db7f2b3e6b166621eef9a699fde196ecf9d8d2e8b55035dcc9f3c15f8d8d645b8c77549d2025554091dd2bb306a01f9ca0089f6a5a48312721815e5f32c7b11266fd35b51f54c02d8af73b1c483f6c0688ea3772f76f94483e9b0b86a070fc6d5dcfad42e78e0f7ca43951c7a51e52f762c5c5a1dfaf6b09a065de30cd8e03767bf9454aa2eb268db1cca54804c04c07e796cbe6cc771575055859e943694ada81242c335e800b61fb973e6005aadde99ea4b3ffa19ee90e7ddea865f72a05a35daf9e4b541742e548abeb2d7bf5e753ecb3c9c3698647b2b76db748b1b0fa9f471250c3bf72b610c9145aed074d37fd15e84d2566bdff695a51734aeaacf4b1010832246e25100bf6ff3742af0b1be88c481b6d24ae53ec5930bd860e69ae760a6030a7d988c00421e939dd86d172856377912fa7b12c37c2a343f88c4c46de1d9e0efa9661a823a2a82684a7c7b67c0196e38856cc9a378002a0b3fce4a8246b260e24fb48a4cdc8329471191708b912fdffec8e6ad1c04536605e23303b2dfe2c71d7efedfbdf196da89ecb45d53b2c75e34d0c7517c00679ec79590e1879ec7be0a159b2abbc76db05e5e29e508362dc58b32bf86ef4934477631b642d874e07a131fbca4db7ab0701cacad088b5fa638d685c7235ee887fef811dcc63b9f68468e149022cc2a4a177a41226b2d49bbc6e7267ca3bd8560e2c9c2272fc8e21c8b417f0d7d8108a77e2f900c254c02088e7b87fbe579c7498d4eeae97b1a172fd6d55acb33401e670ea1a735b28e8cc59b75a496e2328b53c0050781a95a1d87f02cd353a20a483c303a07460b16321b3591138537729a4518d737a420b92fc2cd54e9ebdee8831279b9d9593d1a2fd3d0ec37531256ec18a9122fe7d739531679a2012e3aa639d70ea66ff42cddb359d97cb1f21151d6077ccda657d573b38612a03a2cda3a1b8419635b8c614a16324eed711eefaea588261a656df0cad530f1e40423a75132ee50b1d816e5c904c13a981e166d4ed1c8a37cf58cd4603af3fae305383ffe7bb2dc7f4416ad44a4fc26b34585e78321bfd8abb0d5d0033f9c8f0ccf2732c366f946e3147005b9b32d5c756b6dae656ef32ddda240666b16fbed43cd0c2a4a04860c64fe496ea9d543cc0d6dcf366ec6f9eb89cca6dfa6ffb1d1d76cdff7fed3c102a079db017aa8925a5698a34a37af5f70eee4d6811b26c54d8c736495f6e29dc933d7f952a98da179afafcf2aa47b9eeadaa064409dc032de5e84b35354658fa6718f37102d60dc29742d23e1b6c06e16977b34520ea7a43982d2dc844b7c687fc74a21cf959d21bea81cf3c0423a458f5921961ea7fc87148ea20b5bbc31decf37abd5f981eab53fbacab13fbba4a8e432f4dbd9b5abcbeeb986fdc46ee5ac42802152e087378928dbba66b430661a8a720035ae3c1c63063c4e6041bef0d20e36d5a5ee1630f527c1bc56068c07be7f88a967587aaa3d407c2210391915ef1fda7aaacbc6114fd2730ae06b02d1f38e1e31c4750e122bd1d0ad908b60b8de742cbc37c42962c698f844108d7d5fb69ad4c799a3e39733d3d954163452df2d8f10eb1a129323b530d57868de6d306fdca42d430379d95476d46ae31f390b7a40820052f2cd636ba882e566f5eeb83584ae0338812db560f8fcc7cf2e39f300a82ddd764a9429ed355d180a5f1e80953fb76b6aeaef686a86a893fbdc5364a3ff58b25eb04e8bcd634be1b45247c4daf0ef2f830f4c98545730e905576992b34f443711a99d1f853890ab984faa766279f8e7f6d6941d5a3962f88490dfc47f7dd5fe717fb46e5b50774b2e1ef73716ec73a4c660c34722d93be563a7496a5870479f8f205d4be4c55e829f6f0ad1c96c05575f1af6ba1c32d7ab3aded6c5be62d234df1929fa38df17668513ad10918a35028c4b03b5f1c3681f86e3f476a6a9af44dd535710e3a94f36f27ba3460d0b21615185299f10f90dd192b2e2e33cd4dafd9becd8cd9561e493a141d622e7041d38e009f28f35331552dd65c9bfcad5fe8904b339b01fc791a00206dd8973ef9cf46e9171597769b8b1ae0131ac59d917a0ce146880d21a2677be9057e24f8eafccf2fc70716a1bf80f3518b7d76b4c70163fa07018c1d87464dacc17d7a94aba888920513159080b7d2fe3cc02e629b41aa79c63c5dbf25666c8d6cb1543d89f7c1d196c3b82e9f272a6da40c5f65e9849ae584b7876eda3ed251f5be24e9b65236944cc192a9e4c4c570e44b724498d6847d6428fe2e7ed3e5f7b34f140207307d31b259cf0752d87b834048f2ed85fdaf0927bf8ddb38fce2602eba2e62f43069d47fd94515fdb5f600b818265d785dc2d179679618403ee3ca584d6614b16af629a0f049f760f751f01fab4a713b0450d197cc9283d8735e05ab5804a9fad982cf84a6d93e91ba7d454e5fb1894daa716f1b5269a4ce221900b31a188fdf65aa437edbcf7a6750986f79bc232d19ef2bfc05fec29ecf16ef523c0fd5c194fb8a76d65e111be90438304cf187fd71830c32d4a3e76a61015dc4e7461429d952f0586f4de4c749642432c3b7f04ac8afe2c5ba539aedecba6d4feaf2bb6e58e1b58eaf0afdfb7c6b9348ea20f2192c276dd06544151cb39e49bf174b7211d31843edbf3acc945e061cf3f3fb46f262ee477878970ed77b04ba6af6b2b6b927d263bc3e9aed219a8e3756f7d44133dbec226ea93e259bfe27abe7aed4aee7b3ed4f723c1a2ac493f4ecd136b3349437fe5b89c9437d3b6dc9498cc128c3edc264c9000df6e9c804d0e19d4c16c29e9e47aeb84093e16d3201e1387aae2f649f62c3c4080c62f982e74d482fe7e7663fb82478cf5832eec4a264b6d2a82d6400a8f0cb24f951f4f4fdec4ced39bd35aa2546bd11d75a8a35ea25a609e33081cdb86c23476c1a83f67ce170dface3a5a3e53336e17d6e862ec44d29b1e8b0db4698dfaacdd0f5596de00bf9cc61a6836fbcdcbd903b288541ca1755c665b59ec1b5ba72e47ad596d4869d868045ad0e537d920a2a1cf9f1faca9389a44838d0e923c0de3c30c6adffa6725e7756189f3ec1b7e873c608c75f6cdf2c141cbdf88612816f303ce70a5fc3979033201947bd376bb49b3a49a89879eba0204bb63cc4b4300ee2994acf13e84d89d4b31549ea716df0c09ad221c5e7310f587b78b7cf071c2e9186a8df2329019a50a00ca7c262343d2c9f25a23866b2a69596fc98d135e1c468184f93e5159284611c1a686951798797b67c2968520398a4f1e2b70e2cf4ca64ea16ec45b3307306bb6d7e2b3e288876b110e8a5107d958bf73cc20a4e28b212b1f7d6d7c734c7e6d415cacb7294e4a8906ec56f5d324808a1223b7efa32b21ba25711897afa63464d622721cee78f16cbe53697314a84cc946f866044d601570ee343561efd564194920180cce97a31d61db2686df55d5032c47081f35066f370c18532f2b5ca4d0735ea20f3e3e6b346599ba9a982aedba632ec6001252aee68cfa7afb56cdf9b673d182b0c2da8a6f070c6d4ce53443b8b6c3d1b4d2dab8badbb6caffc3e28e39aaf54a4f176c66cb621a607ce11b06eff88bf9511d470585764b8962438e95ac92a33972cbfaa08e654bc5c2ea253ad2509dccc3251867e807f81fa49f050ae679080ffbce5355d465849ed26ebaa22361f0ce1ef033195d8ab93cff358ac7c735e7b7b2fc6f80a459fbb783c7e067013381572bb3db9defa8462c25ca91f81c5d7cd60c4b8448a762d8dfbaf20044777cf2fdf8ef12ffb304fdbb379a22a31af3a136b947ab77ec5951208a347ae3ff270d9995f76b64a26308b927466c1bef7b6342c5db1e1a11bf6034f49477b2f02a5f79fda66c76188dc2d21462f02f489b4866af30b4f46e859c972423f1027d437273cebea69d96c9d706c472cca9a542babffd236a17293741bd98f285244a19235672560a70353c181699f5f44d0884745f600c66faba100fc3182c458341006efe8c83ba14452b568a5a9b87707c36ef34e3a23112150a144682c5948cb261e5f881ceb77bb06257b72efc03c4b2fdde26e152c2fd0ba7be4f98299ed43780b2fb15df32f1159d885d10ac0e0228a7ba167eb43d5705a24ecb5c5f44e10647de5fa548f1c2fa06272402c2326bfb4f5fa6e071668e00c18f5ec300e2d226d72456294468d68769c6cd93c6b2e8254bc3b4b2e441f46b9eba0e8c4bc6f63e132352e5f0fcc84f92c7f7d4aad8ec99229c7c586697c9346bf745f6ccafb97640f15ca40f4635e2a2bafe86f9980a5bad6b7f325661c40f61e05dd61a47dfd5fc4ac9e503929123318a70d8f59755a7a8bb2294a0b14ed5cef6a2aec4e3aeb0374a8461c2ab4d77a49afb19d6260c0722831fb1670e191b4198a36f9edf403740189417ce6aebfddbd5140a7543de37b7bc250fee2572edcad2d4a839f2f3cd3ee73f34385848634721208316bf3b76eaca35c7008fb15651635b3745e6e052b6748d4b872c155efdb1f36a515a2b6a0e47da2df8aed6387ea4f992cd6465cdfc0d6ea7138ab418c9fe8e844dd8aa080e8ed74288c50d2073214a95842db41bb6a2ef689e7221acb1caefc92e43e343aae92fae6a39942b186282e9e4ef40698c20856b7b565ade22272ed0196fbabd1787ba945f77329f43c33532f1dd87215936f176adbb1427082b17a43236274b493f1094f32da44083768f1550a897800712a8d90116c9dc98a11b059ef42c3a089de9b526b719c3144bcf2f0ad8a35f799641ce680494e2f2585d163c488482f1f015c771d584233f897e169fa99df75b1e2e8b1a5e5abef5d17ccaac870b88319e573bab331258731a495cd8aa004be5d956b97124c4ecacdbcde6ceb6531741fb582f7ca9412f734444b90eee1c9d5006d998d5745f388035c3e596822753ac12fec16a10966bc70996a82322003acaf9a4a67579eaaab8c041e69386466bd5cd11a3a5e577d3eb8d174f0e1f4a2b21fa8e78903d33aa423c75452c40ea8fb9330106c1f9671c6d80ea3fb2eb8691d16da0ff0d260eac561166fbe5da02d2f50df9e5b8a216a2e116a7536b28643a7e9c250191cb6d37188b4b29ee3d41ba1c737b1f70da4b25d3de97d7b5587a7d3b5541f90b5ca9bc8e12c2b8c7152440baf8d8a8302c0406d3502e776e0c2e70cdbbe5195a1308c5adb06263adf54136a28db2cf3c692429a5988031ae5b3732c2c60019e6e8bac6f36e341f72e4b132def59abdc79a400675504b5cc60efda33fe603169a68971d04975ec9fced15d4498506b7ce58522a0b54de0de89a5f664adb572719a283ed8cf79cbd676ea8eaf500c0b52636c03c1e040787cd83e90cd0531898dfcb447595dee778a939795872fc2887176665a24f4bcf32b9821ed68d27da24818612311aec0528086cf39520b8b029c41a5671dd90a6eb19a9f5b975d4768867ea4ed87dd0dfd5975e7c0f239e3a9f4b35f675a9ab7520192e96ddeaa1dee675cba87d4d02bea147701581f4e5f991604dfbed8fc355c4964e468d87bc6f8"}, {0xa8, 0x1, 0x90c, "fee50e8370e638c3c3cc5b31c45754852e086b3e60635cccab0ae2f35da954fd0bc7b26d0f0bbcf02b28d4ef826342ad920b3f2b26c7d326ed26677955a81ef9345ad84fc1e8bd6a682adee639ad470e2780021162907580b781f8a94e41290f49216f25a3c0af6f7c644756767aa8eb45bca41d9eb237d17dbf0afe2b7fedafecace0342522f796ad1e9deb8f4a167b936d"}, {0x1a0, 0x111, 0xfffffff9, "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"}], 0x1258}}], 0x3, 0x4000)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39bca59f8c40649e3eb79d8745797b308edd84adef35ad9d8a17240f38f5a8f8d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d921442b0a06b135f8a73b68486ba1a76f256f50ae7cb980e69e7580b9f11c6ede4210f23240559b8c428900d7ce7862417ab5a50e494b2a54e346d7efa008ccef06813e235b446788ac0f1df3c65bc1fb5393364a0cfd284640ec2c438ad2b24a69f1f9da000000000004000000000000009eee6a9283bf25"], 0x1}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r8, r8)
bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0)
[ 676.170557] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000036
02:58:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000000c0)={0x6, 0x7fffffff, 0x85, 0x2})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780)='/dev/nvram\x00', 0x10100, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
getsockopt$inet_int(r4, 0x0, 0x32, &(0x7f00000007c0), &(0x7f0000000800)=0x4)
ioctl$IOC_PR_PREEMPT(r3, 0xc0386106, &(0x7f0000000040))
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x6, 0x5, 0x4, 0x400000, 0xbf, {}, {0x2, 0x1, 0x5, 0xfa, 0x3, 0x8, "6b58cc0f"}, 0x3ff, 0x1, @userptr=0x3ff, 0x4, 0x0, <r5=>r2})
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4100, 0x0)
fanotify_mark(r5, 0x1, 0x8, r6, &(0x7f0000000240)='./file0\x00')
02:58:57 executing program 4 (fault-call:1 fault-nth:55):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 676.381986] FAULT_INJECTION: forcing a failure.
[ 676.381986] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 676.409391] CPU: 1 PID: 18617 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 676.417321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 676.426681] Call Trace:
[ 676.429282] dump_stack+0x142/0x197
[ 676.432928] should_fail.cold+0x10f/0x159
[ 676.437087] ? __might_sleep+0x93/0xb0
[ 676.440989] __alloc_pages_nodemask+0x1d6/0x7a0
[ 676.445668] ? __alloc_pages_slowpath+0x2930/0x2930
[ 676.450723] ? __lock_is_held+0xb6/0x140
[ 676.454794] ? check_preemption_disabled+0x3c/0x250
[ 676.459824] alloc_pages_current+0xec/0x1e0
[ 676.464155] __get_free_pages+0xf/0x40
[ 676.468049] get_zeroed_page+0x11/0x20
[ 676.471941] get_image_page+0x1c/0x140
[ 676.475842] alloc_rtree_node+0x41/0xa0
[ 676.479828] memory_bm_create+0x3bf/0x530
[ 676.483996] create_basic_memory_bitmaps+0x94/0x130
[ 676.489019] snapshot_open+0x378/0x400
[ 676.492914] ? snapshot_release+0x230/0x230
[ 676.497246] ? snapshot_release+0x230/0x230
[ 676.501576] misc_open+0x34f/0x480
[ 676.505127] ? misc_devnode+0x130/0x130
[ 676.509102] chrdev_open+0x207/0x590
[ 676.512821] ? cdev_put.part.0+0x50/0x50
[ 676.516894] ? security_file_open+0x89/0x190
[ 676.521314] do_dentry_open+0x73b/0xeb0
[ 676.525300] ? cdev_put.part.0+0x50/0x50
[ 676.529369] vfs_open+0x105/0x220
[ 676.532830] path_openat+0x8bd/0x3f70
[ 676.536645] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 676.542017] ? trace_hardirqs_on+0x10/0x10
[ 676.546269] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 676.550941] ? __lock_is_held+0xb6/0x140
[ 676.555003] ? save_trace+0x290/0x290
[ 676.558821] ? __alloc_fd+0x1d4/0x4a0
[ 676.562642] do_filp_open+0x18e/0x250
[ 676.566446] ? __alloc_fd+0x1d4/0x4a0
[ 676.570363] ? may_open_dev+0xe0/0xe0
[ 676.574203] ? do_raw_spin_unlock+0x174/0x260
[ 676.578716] ? _raw_spin_unlock+0x2d/0x50
[ 676.582880] ? __alloc_fd+0x1d4/0x4a0
[ 676.586706] do_sys_open+0x2c5/0x430
[ 676.590434] ? filp_open+0x70/0x70
[ 676.593994] SyS_openat+0x30/0x40
[ 676.597450] ? SyS_open+0x40/0x40
[ 676.601033] do_syscall_64+0x1e8/0x640
[ 676.604943] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 676.609802] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 676.615005] RIP: 0033:0x45b349
[ 676.618206] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 676.625932] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
02:58:57 executing program 5:
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2})
capget(&(0x7f0000000000), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0xa, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000380)="df", 0x1}], 0x1}, 0x0)
socket(0xa, 0x3, 0x8)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084)
r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r2, r3, 0x0, 0x102000004)
02:58:57 executing program 1:
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4)
socket$caif_stream(0x25, 0x1, 0x5)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=ANY=[@ANYBLOB="0200000000008ff93961a05fe2b00cf5d2fcddfd1a80374007242f79399a169a7715919be87aeaa6f8a2a4f2dd7b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db2832e09a378ba17c7edc3aaa65fa204f7d6a8b3900f907eec3815d61eb8c22f358ce5a843053e1bf170364d69a51f39b924e14393269b7f7748f8620c2615b2c4e33e0d05d7301f9bc61713f9501db516081404b65ef9b6dbc4f0a70634a31ea368446b539664d0025ee59be92b8e34e8ba5de19b56ddea93efaa2ac7b0f54ef694c07d92a961605c47d87f9452a38196d0e890b3c451b41e1ff7a5a0acd48e9cdaddf6cfbad9b9d04932c"], 0x1}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618)
close(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x6dd9207777e1701)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f00000000c0))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0xb], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r7})
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001425815bd93546bf8aa85eb954eeb94daeebd919b94e402fea2f459b641bd844952c19a68b752381b4b304e85c60f207eecfef2c2960b41e756b2be51eec6164ad3c", @ANYRES32=r7, @ANYBLOB="14000100ff010000000000000000000000000001"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x24044001)
sendmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x3, 0x2, {0xa, 0x4e20, 0x163, @remote, 0x4221}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="6932dd59155893270c1f30691285a3fe0ea544613f89eeeac1a4b161ad575a8d", 0x20}, {&(0x7f0000000500)="076f1df79f1c23f03c2890a466fc119a7a14efd90c490cdb487489278506fb19895134b82f2345aac1786e4abf2a5dd0cc5d150d3b6f9f3b6534b6f98636641cf7b06552f229cfef92", 0x49}, {&(0x7f0000000300)="dd813f03fa88", 0x6}, {&(0x7f0000000580)="e850826f332838c5bf75057c1dc8e6ef601707c9ee5e200309370cbf495e6c8abb7c08eb9b38b0d8886f13599b5ba3fa636bcc58810ae3f34f3aeebf146ab9fe175aa3a600033134aa82832493fdbe98e2a42af0648d60abb3e53e57540c22b3ed0451e67d6863640813fe2846c7ea700bb0c1c8", 0x74}, {&(0x7f0000000600)="6bc4b72563d59b34455877da8c890a5bcd52bb6e905bb738d48eb41a4d48da7e3f0e0271d79d40480898c2d3d46e605fb57f0eaba6a86204a2ba804c38ff060424645a45653c6ef203fbf620bf814267e2463b0e85cf421e1c6fbca5a4992206e107c47ae53c96688b09d09bff", 0x6d}], 0x5}}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)="5c0ce27fcc326ef05d5f647cdfd943d4321b69dae86d", 0x16}, {&(0x7f00000007c0)="babec76b025d34b5b917c6e2a54755a06345347d4474e39eb021e0dc679582fa391f6c9e16f91e1afb7f477ba8de141624c17cec103751d6c01f834bd59fa7fb2667b4cbaac962204c96969340827295793f469439c77a3c", 0x58}, {&(0x7f0000000840)="6487883bf5ae5324171bca360c62e4edb46f9b84a37b4ee86f026e4b4f282b7ef630b2ee9202e1cbcb0f031df8e814a3da295d2ba56a31a66d69d7bbee2285224a871a6ece55b65ebfa8b38539c584c0b7be3933ab7540b98c1cde8743de36e0e3021aca", 0x64}, {&(0x7f00000008c0)="1b5ea5c9739ed1026d1b0dc6bdd3a2fa96358e1d248fb26853f1c10978436f14e41d8f3dcfbd75ab3939ae85868f38699194dd30ce011db194e07989c97dbb68ae844ef73a744f3f591711fe43e254cb58417ff13740ffc5f20f562e6edba65e5fbdce782d13c2f6cba254d6df4124", 0x6f}, {&(0x7f0000000940)="fc2b07598a9abbacaf5ed89a4d88dd739d76894300900f15a389a6847d656aaf543fabd6089d1905c668ba3754ee45c3b102ad699dfe532d52", 0x39}, {&(0x7f0000000980)="fee660e3617936c1c7deecd84fa74b5d2beb62420b5e1145b293f8d6773b96e2e13cd08ae079bd1b1042b84ada2d8f6050edb5ca00669554d1c6b013ae147a", 0x3f}], 0x6}}, {{&(0x7f0000000a40)=@can={0x1d, r7}, 0x299, &(0x7f0000001c00)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="67a97fef4d904cd5d41f9d62cd874866a450cbb5e32fc47691e795161f838aa53e7b6b472d3e51444b082330bfbd31f7530e5387d9fa746848157c2dada9d2f1379b6a51b9fa08dc81f9d6ecd927498a4f78de9deaee8db321d24edf7fb693cabe254d486c9b42e5433d853742c3e0756ccddf1e6657d5f1d270cf441f451b2743e42007eb19da0a9106e2821166cdd946a5be80fe065a2b0660f17a87a4254795eecaef30e553a1ac46775377a878df9c69b7649d24ed8950343880f3f865937697bda4a02f3f4c8242b1c892260c5b8a1dda06caab124e0d4c730fcc43bf9a784738b6f9ea08c2d32c9979c7", 0xed}, {&(0x7f0000001bc0)="09572ce59449d572e534a701d5ad8cf8", 0x10}], 0x3, &(0x7f0000003f00)=[{0x1010, 0x0, 0x5, "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"}, {0xa8, 0x1, 0x90c, "fee50e8370e638c3c3cc5b31c45754852e086b3e60635cccab0ae2f35da954fd0bc7b26d0f0bbcf02b28d4ef826342ad920b3f2b26c7d326ed26677955a81ef9345ad84fc1e8bd6a682adee639ad470e2780021162907580b781f8a94e41290f49216f25a3c0af6f7c644756767aa8eb45bca41d9eb237d17dbf0afe2b7fedafecace0342522f796ad1e9deb8f4a167b936d"}, {0x1a0, 0x111, 0xfffffff9, "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"}], 0x1258}}], 0x3, 0x4000)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39bca59f8c40649e3eb79d8745797b308edd84adef35ad9d8a17240f38f5a8f8d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d921442b0a06b135f8a73b68486ba1a76f256f50ae7cb980e69e7580b9f11c6ede4210f23240559b8c428900d7ce7862417ab5a50e494b2a54e346d7efa008ccef06813e235b446788ac0f1df3c65bc1fb5393364a0cfd284640ec2c438ad2b24a69f1f9da000000000004000000000000009eee6a9283bf25"], 0x1}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r8, r8)
bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0)
02:58:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x200100, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'team_slave_1\x00', 0x2}, 0x18)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @isdn={0x22, 0x1, 0xd7, 0x71, 0xc5}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, @l2={0x1f, 0x14, @fixed={[], 0x12}, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='erspan0\x00', 0x6, 0x77, 0x3})
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x6, 0x8, 0x1, 0x3, 0x335a, 0x8001, 0x1, 0x81, 0x4b2, 0x22, 0x1ff, 0x7fffffff, 0x200, 0x20, 0xfefe162b365138da, 0x0, {0x8c, 0x9}, 0x0, 0x20}})
02:58:57 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2000, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x5, 0x89011, r0, 0x81000000)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
[ 676.633222] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 676.640512] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 676.647796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 676.655077] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000037
02:58:57 executing program 4 (fault-call:1 fault-nth:56):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:57 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f00000003c0)=0x4)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$mouse(0x0, 0x7, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0xa7, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f00000001c0)=0x8000, 0x4)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r6, 0x20, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x124, r7, 0xc653795c81a3a76f, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94}, @TIPC_NLA_MEDIA={0x4c}, @TIPC_NLA_SOCK={0xfffffdf9}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x55)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000100)={0x3, 'bridge_slave_1\x00', {0x3ff}, 0xf7})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x8e)
bind$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x4, 0xec, 0x0, 0x1f}, 0xfffffeba)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="0656b75c76a60a98647c6058bb2123ad2c7766646e6f3d", @ANYRESHEX=r9, @ANYBLOB="2c616363659f98657874656e00"/25])
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000540)='security.ima\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02d1d80e5298a321f25dfc43fa79877628469cfb0b7470f6cd500a01222af77f18ba402297da383df054a08577cf9cf667b564cb59c51d4256e85511233bbf2d1a6603172fc55a5c0410ac54b9345f1759310d4964883e"], 0x1, 0x3)
[ 676.889702] FAULT_INJECTION: forcing a failure.
[ 676.889702] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 676.938181] CPU: 1 PID: 18637 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 676.946114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 676.955481] Call Trace:
[ 676.958086] dump_stack+0x142/0x197
[ 676.961738] should_fail.cold+0x10f/0x159
[ 676.965901] ? __might_sleep+0x93/0xb0
[ 676.969808] __alloc_pages_nodemask+0x1d6/0x7a0
[ 676.974497] ? __alloc_pages_slowpath+0x2930/0x2930
[ 676.979540] ? __lock_is_held+0xb6/0x140
[ 676.983716] ? check_preemption_disabled+0x3c/0x250
[ 676.988862] alloc_pages_current+0xec/0x1e0
[ 676.993200] __get_free_pages+0xf/0x40
[ 676.997087] get_zeroed_page+0x11/0x20
[ 677.000977] get_image_page+0x1c/0x140
[ 677.004877] alloc_rtree_node+0x41/0xa0
[ 677.008868] memory_bm_create+0x3bf/0x530
[ 677.013035] create_basic_memory_bitmaps+0x94/0x130
[ 677.018059] snapshot_open+0x378/0x400
[ 677.021952] ? snapshot_release+0x230/0x230
[ 677.026284] ? snapshot_release+0x230/0x230
[ 677.030615] misc_open+0x34f/0x480
[ 677.034180] ? misc_devnode+0x130/0x130
[ 677.038160] chrdev_open+0x207/0x590
[ 677.041893] ? cdev_put.part.0+0x50/0x50
[ 677.045962] ? security_file_open+0x89/0x190
[ 677.050379] do_dentry_open+0x73b/0xeb0
[ 677.054359] ? cdev_put.part.0+0x50/0x50
[ 677.058438] vfs_open+0x105/0x220
[ 677.061900] path_openat+0x8bd/0x3f70
[ 677.065704] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 677.071077] ? trace_hardirqs_on+0x10/0x10
[ 677.075326] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 677.080003] ? __lock_is_held+0xb6/0x140
[ 677.084075] ? save_trace+0x290/0x290
[ 677.087889] ? __alloc_fd+0x1d4/0x4a0
[ 677.091700] do_filp_open+0x18e/0x250
[ 677.095505] ? __alloc_fd+0x1d4/0x4a0
[ 677.099314] ? may_open_dev+0xe0/0xe0
[ 677.103235] ? do_raw_spin_unlock+0x174/0x260
[ 677.107740] ? _raw_spin_unlock+0x2d/0x50
[ 677.111897] ? __alloc_fd+0x1d4/0x4a0
[ 677.115725] do_sys_open+0x2c5/0x430
[ 677.119451] ? filp_open+0x70/0x70
[ 677.123009] SyS_openat+0x30/0x40
[ 677.126512] ? SyS_open+0x40/0x40
[ 677.130072] do_syscall_64+0x1e8/0x640
[ 677.133971] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 677.138828] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 677.144028] RIP: 0033:0x45b349
[ 677.147284] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 677.155010] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 677.162288] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 677.169575] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 677.176853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 677.184131] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000038
02:58:58 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
eventfd(0xffff7fff)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:58:58 executing program 4 (fault-call:1 fault-nth:57):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:58 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0xae, 0x1, 0x34, &(0x7f0000ffc000/0x4000)=nil, 0x826})
[ 677.292853] audit: type=1400 audit(1579834738.384:460): avc: denied { map } for pid=18652 comm="syz-executor.0" path="/proc/keys" dev="proc" ino=4026532145 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
[ 677.359837] FAULT_INJECTION: forcing a failure.
[ 677.359837] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 677.392902] CPU: 1 PID: 18659 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 677.400827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 677.410300] Call Trace:
[ 677.412904] dump_stack+0x142/0x197
[ 677.416553] should_fail.cold+0x10f/0x159
[ 677.420715] ? __might_sleep+0x93/0xb0
[ 677.424623] __alloc_pages_nodemask+0x1d6/0x7a0
[ 677.429318] ? __alloc_pages_slowpath+0x2930/0x2930
[ 677.434352] ? __lock_is_held+0xb6/0x140
[ 677.438425] ? check_preemption_disabled+0x3c/0x250
[ 677.443461] alloc_pages_current+0xec/0x1e0
[ 677.447810] __get_free_pages+0xf/0x40
[ 677.451716] get_zeroed_page+0x11/0x20
[ 677.455620] get_image_page+0x1c/0x140
[ 677.459525] alloc_rtree_node+0x41/0xa0
[ 677.463519] memory_bm_create+0x3bf/0x530
[ 677.467694] create_basic_memory_bitmaps+0x94/0x130
[ 677.472823] snapshot_open+0x378/0x400
[ 677.476721] ? snapshot_release+0x230/0x230
[ 677.481051] ? snapshot_release+0x230/0x230
[ 677.485383] misc_open+0x34f/0x480
[ 677.488936] ? misc_devnode+0x130/0x130
[ 677.492923] chrdev_open+0x207/0x590
[ 677.496648] ? cdev_put.part.0+0x50/0x50
[ 677.500720] ? security_file_open+0x89/0x190
[ 677.505140] do_dentry_open+0x73b/0xeb0
[ 677.509126] ? cdev_put.part.0+0x50/0x50
[ 677.513206] vfs_open+0x105/0x220
[ 677.516671] path_openat+0x8bd/0x3f70
[ 677.520475] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 677.525846] ? trace_hardirqs_on+0x10/0x10
[ 677.530090] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 677.534760] ? __lock_is_held+0xb6/0x140
[ 677.538814] ? save_trace+0x290/0x290
[ 677.542624] ? __alloc_fd+0x1d4/0x4a0
[ 677.546429] do_filp_open+0x18e/0x250
[ 677.550220] ? __alloc_fd+0x1d4/0x4a0
[ 677.554023] ? may_open_dev+0xe0/0xe0
[ 677.557831] ? do_raw_spin_unlock+0x174/0x260
[ 677.562317] ? _raw_spin_unlock+0x2d/0x50
[ 677.566475] ? __alloc_fd+0x1d4/0x4a0
[ 677.570295] do_sys_open+0x2c5/0x430
[ 677.574018] ? filp_open+0x70/0x70
[ 677.577574] SyS_openat+0x30/0x40
[ 677.581035] ? SyS_open+0x40/0x40
[ 677.584503] do_syscall_64+0x1e8/0x640
[ 677.588399] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 677.593259] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 677.598453] RIP: 0033:0x45b349
[ 677.601646] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
02:58:58 executing program 5:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, r0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='+', 0x1}], 0x1}, 0x48000)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00')
preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0)
syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
02:58:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = accept(r1, 0x0, &(0x7f00000000c0))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fffffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000002c00028008000200ac1414aa0400130006000f0001000000080003000000000008000200e00000010400130008000a00", @ANYRES32=r6, @ANYBLOB="9a1fc0277a2d1a80132c93d38c72041983c89df2a121bf3db0b24b8ec92c82012265c23d1f5e3449f645a407e31598cbe67b3f4fd9fc54820dea4ed5794a5e7f621ff130d50a92eeb0a172ca81390f1fd0c51a717711c765fe0901fd66476804931f8284215c91aa2daf3b45b5803a6d61bb4b01e26de05de6f44e0c1097f192e266df383b846b09c52f399a496bfe78dbedcbc1c6"], 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>r6})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@local, @mcast2, @rand_addr="36e0e048548d5b499b3093adee310b84", 0xf79, 0x2, 0xd4, 0x480, 0x809, 0x2000168, r7})
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
[ 677.609361] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 677.616633] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 677.623910] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 677.631185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 677.638680] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000039
02:58:58 executing program 1:
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
read$usbfs(0xffffffffffffffff, 0x0, 0xfe9a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)
02:58:58 executing program 4 (fault-call:1 fault-nth:58):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:58:58 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4082)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r7 = accept$alg(r6, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="2f4b31168282a5346ff691db478a0ff5fd08e4fd3091d288d5a8961ce15cd5f1ef812330c1285f1970ba2092bd073ebb17dbccece10d0219ba1c33b852bf2d15eb3fe405380f59243c6156faf498db1155d6f24e78a00ba97f009f7ad15c7858127d269db7ef147e672368b5b15f5b58379b3dcc581d0c84568461bd3e11404e3faed3188ae41e55d1657631be2d0a8cc1b78d47e7a787cba4d5e8d175f3ac3720dda665106bb67d264b0fa54a1d31c6f97622ee521d662d26675b4c76b26e5d44d809703854533b483ec175d26cac6a8c8f1f33ba912e", 0xd7}, {&(0x7f00000005c0)="c4f501e0148325b031e2786cd36576c4eabcdaa0d7b09901a67dd0c457dffe28d51f1eadbc54c848920442b61046b632", 0x30}], 0x2}}, {{&(0x7f0000000440)=@nfc_llcp={0x27, 0x1, 0x400002, 0x4, 0x6, 0x80, "d7f196cdc94b78707e2dd78b8eee9d353f251fcd2d9c01e009fbeb05e512206b1ec403f74202830911350e029c5774baff46a24a6dda370e719433745964c0", 0x2b}, 0x80, &(0x7f0000007ac0), 0x0, &(0x7f0000007b00)}}], 0x2, 0x0)
close(r1)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
r13 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000002c0)="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", 0xfb, 0xfffffffffffffffb)
keyctl$read(0xb, r13, &(0x7f0000000180)=""/55, 0x37)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
bind$nfc_llcp(r10, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x7, 0xff, 0xa1, "b237864f5721831abe33a18e5c777469c1af9ca50d919acba07d98a08a604df8df64a29858dd445e1cbea8a384cbd22b85c921765f64e7a561184b05a54cee", 0x31}, 0x60)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x25a, 0x4)
02:58:58 executing program 5:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b0600000000000000000000000000002400078005000700000000001800148014000240ff0200000000000000001f0000000001"], 0x38}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000906000000000000000000000000000005000900"], 0x1}}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f15b9409b0d1b849ac00200a578020000", 0x17, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1300000013", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x10f482, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00')
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000000c0)={0x8, [0x4, 0x1, 0x6, 0x4, 0xff, 0x9, 0x8, 0x800, 0x3f, 0x38e, 0x9, 0x401, 0x2, 0xff81, 0x6, 0x8, 0x8, 0x1, 0x8001, 0x7, 0x3, 0x2, 0xff, 0x0, 0x200, 0x7, 0x2ca6, 0x5, 0x1, 0x7fff, 0x9, 0x4, 0x0, 0x101, 0x2, 0x4, 0x6, 0xfffa, 0x7f3d, 0x2, 0x5, 0x9, 0x2, 0x9, 0x55f, 0x6, 0x65, 0x5], 0x63c727e6d1256e60})
02:58:58 executing program 1:
syz_open_procfs(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x7, 0x40000)
r1 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x40a)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9140840}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
recvmsg(r4, &(0x7f00000002c0)={&(0x7f0000000240)=@pppol2tpv3, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/136, 0x88}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/105, 0x69}], 0x3, &(0x7f0000000900)=""/151, 0x97}, 0x10000)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa840}, 0xd2)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x4000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x2000}, {}, {}, {0x2000}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd})
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfc, 0x3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
[ 677.853157] FAULT_INJECTION: forcing a failure.
[ 677.853157] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 677.892528] CPU: 1 PID: 18689 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 677.900454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 677.909823] Call Trace:
[ 677.912423] dump_stack+0x142/0x197
[ 677.916077] should_fail.cold+0x10f/0x159
[ 677.920238] ? __might_sleep+0x93/0xb0
[ 677.924142] __alloc_pages_nodemask+0x1d6/0x7a0
[ 677.928838] ? __alloc_pages_slowpath+0x2930/0x2930
[ 677.933994] ? __lock_is_held+0xb6/0x140
[ 677.938174] ? check_preemption_disabled+0x3c/0x250
[ 677.943207] alloc_pages_current+0xec/0x1e0
[ 677.947542] __get_free_pages+0xf/0x40
[ 677.951439] get_zeroed_page+0x11/0x20
[ 677.955341] get_image_page+0x1c/0x140
[ 677.959357] alloc_rtree_node+0x41/0xa0
[ 677.963344] memory_bm_create+0x3bf/0x530
[ 677.967522] create_basic_memory_bitmaps+0x94/0x130
[ 677.972548] snapshot_open+0x378/0x400
[ 677.976546] ? snapshot_release+0x230/0x230
[ 677.980864] ? snapshot_release+0x230/0x230
[ 677.985186] misc_open+0x34f/0x480
[ 677.988790] ? misc_devnode+0x130/0x130
[ 677.992777] chrdev_open+0x207/0x590
[ 677.996485] ? cdev_put.part.0+0x50/0x50
[ 678.000556] ? security_file_open+0x89/0x190
[ 678.005102] do_dentry_open+0x73b/0xeb0
[ 678.009101] ? cdev_put.part.0+0x50/0x50
[ 678.013163] vfs_open+0x105/0x220
[ 678.016624] path_openat+0x8bd/0x3f70
[ 678.020425] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 678.025801] ? trace_hardirqs_on+0x10/0x10
[ 678.030052] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 678.034716] ? __lock_is_held+0xb6/0x140
[ 678.038800] ? save_trace+0x290/0x290
[ 678.042604] ? __alloc_fd+0x1d4/0x4a0
[ 678.046413] do_filp_open+0x18e/0x250
[ 678.050211] ? __alloc_fd+0x1d4/0x4a0
[ 678.054022] ? may_open_dev+0xe0/0xe0
[ 678.057852] ? do_raw_spin_unlock+0x174/0x260
[ 678.062356] ? _raw_spin_unlock+0x2d/0x50
[ 678.066582] ? __alloc_fd+0x1d4/0x4a0
[ 678.070403] do_sys_open+0x2c5/0x430
[ 678.074110] ? filp_open+0x70/0x70
[ 678.077663] SyS_openat+0x30/0x40
[ 678.081114] ? SyS_open+0x40/0x40
[ 678.084577] do_syscall_64+0x1e8/0x640
[ 678.088461] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 678.093312] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 678.098506] RIP: 0033:0x45b349
[ 678.101696] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 678.109408] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 678.116681] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 678.124064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 678.131349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 678.138623] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000003a
02:58:59 executing program 4 (fault-call:1 fault-nth:59):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 678.419935] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 678.451455] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 678.469688] FAULT_INJECTION: forcing a failure.
[ 678.469688] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 678.482837] CPU: 1 PID: 18715 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 678.490752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 678.500122] Call Trace:
[ 678.502730] dump_stack+0x142/0x197
[ 678.506380] should_fail.cold+0x10f/0x159
[ 678.510542] ? __might_sleep+0x93/0xb0
[ 678.514455] __alloc_pages_nodemask+0x1d6/0x7a0
[ 678.519151] ? __alloc_pages_slowpath+0x2930/0x2930
[ 678.524191] ? __lock_is_held+0xb6/0x140
[ 678.528272] ? check_preemption_disabled+0x3c/0x250
[ 678.533316] alloc_pages_current+0xec/0x1e0
[ 678.537768] __get_free_pages+0xf/0x40
[ 678.541675] get_zeroed_page+0x11/0x20
[ 678.545584] get_image_page+0x1c/0x140
[ 678.550796] alloc_rtree_node+0x41/0xa0
[ 678.554908] memory_bm_create+0x3bf/0x530
[ 678.559092] create_basic_memory_bitmaps+0x94/0x130
[ 678.564152] snapshot_open+0x378/0x400
[ 678.568062] ? snapshot_release+0x230/0x230
[ 678.572406] ? snapshot_release+0x230/0x230
[ 678.576752] misc_open+0x34f/0x480
[ 678.580316] ? misc_devnode+0x130/0x130
[ 678.584318] chrdev_open+0x207/0x590
[ 678.588055] ? cdev_put.part.0+0x50/0x50
[ 678.592135] ? security_file_open+0x89/0x190
[ 678.596568] do_dentry_open+0x73b/0xeb0
[ 678.600563] ? cdev_put.part.0+0x50/0x50
[ 678.604650] vfs_open+0x105/0x220
[ 678.608124] path_openat+0x8bd/0x3f70
[ 678.611940] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 678.617455] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 678.622231] ? __lock_is_held+0xb6/0x140
[ 678.626307] ? save_trace+0x290/0x290
[ 678.630129] ? __alloc_fd+0x1d4/0x4a0
[ 678.633947] do_filp_open+0x18e/0x250
[ 678.637761] ? __alloc_fd+0x1d4/0x4a0
[ 678.641582] ? may_open_dev+0xe0/0xe0
[ 678.645476] ? do_raw_spin_unlock+0x174/0x260
[ 678.650005] ? _raw_spin_unlock+0x2d/0x50
[ 678.654164] ? __alloc_fd+0x1d4/0x4a0
[ 678.657991] do_sys_open+0x2c5/0x430
[ 678.661724] ? filp_open+0x70/0x70
[ 678.665286] SyS_openat+0x30/0x40
[ 678.668746] ? SyS_open+0x40/0x40
[ 678.672212] do_syscall_64+0x1e8/0x640
[ 678.676363] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 678.681226] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 678.686425] RIP: 0033:0x45b349
[ 678.689619] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 678.697340] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 678.704625] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 678.712050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 678.719326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 678.726601] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000003b
02:58:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xfe, 0x5, 0xfd, 0x7, 0x0, 0x8, 0x403, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24c, 0x0, @perf_config_ext={0xa87, 0x5}, 0x19200, 0x9, 0x8001, 0x0, 0x4, 0x5, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:58:59 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfff, 0xff, 0x5, 0x4}, {0x52, 0x7, 0x3f, 0x9}, {0x9a8, 0x40, 0x6, 0x7}]})
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={<r1=>0x0, 0x8, 0x5}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={<r2=>0x0, 0x7}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0x0, 0x7fff, 0x2, 0x3f, 0x2, 0x7f, 0x4d7, {r2, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x40}}, 0xca7, 0x7, 0xc0, 0xffffffff, 0xfffffff9}}, &(0x7f0000000280)=0xb0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x400000, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000300)={0x5, 0x0, 0xff, 0x1, 0x5}, 0xc)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000340))
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8)
getresgid(&(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000600), &(0x7f0000000640))
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x3, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8378d6ddc4af0146}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@seclabel='seclabel'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '/dev/dsp\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ')ppp1self$self+*md5sum['}}, {@obj_type={'obj_type', 0x3d, '/proc/sys/net/ipv4/vs/am_droprate\x00'}}, {@obj_type={'obj_type', 0x3d, 'GPL.^'}}]}})
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x444040, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000800)={0x2, @remote})
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x0, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f0000000880)=0x8, 0x4)
connect$pppoe(r0, &(0x7f00000008c0)={0x18, 0x0, {0x4, @remote, 'bond_slave_1\x00'}}, 0x1e)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000900)={0xffff, 0x8, 0x4, 0x0, 0x321e61a7, {0x77359400}, {0x2, 0xf, 0x1f, 0x6, 0x4c, 0x5, "1ec1f756"}, 0x940, 0x2, @offset=0x6, 0x8, 0x0, <r7=>0xffffffffffffffff})
ioctl$VIDIOC_S_JPEGCOMP(r7, 0x408c563e, &(0x7f0000000980)={0x1, 0x4, 0x1, "a24f03baecf430e3acf6715b50449238c933cae2c8b592f13b7e7b4d5468c4d69287ce86fa82e4892421074f02bceae422371282dc53631c0c938db3", 0xf, "e3426e2adb49c531fff8cb15f42a7abc0f4df56b039a2148cb36ca2a19623924ef34b085de1ef498504d3130a61d1c51c4795033a5b6d877bbe6f45a", 0x80})
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/zero\x00', 0x200000, 0x0)
write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000a80)={0x18, 0x1, 0x0, {0x9}}, 0x18)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x200000, 0x62)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={<r10=>0x0, @multicast1, @initdev}, &(0x7f0000000b40)=0xc)
setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@local, @in6=@dev={0xfe, 0x80, [], 0x41}, 0x4e22, 0x40, 0x4e22, 0x80, 0x2, 0x0, 0x80, 0x2c, r10, r3}, {0x83, 0x9, 0x4, 0xdd5, 0x5, 0x4, 0x523}, {0x7, 0x2, 0x1000, 0x6}, 0x7, 0x6e6bb1, 0x1, 0x1, 0x3, 0x3}, {{@in=@multicast2, 0x4d5, 0x33}, 0x8, @in6=@dev={0xfe, 0x80, [], 0x40}, 0x3502, 0x4, 0x0, 0x7, 0x2, 0x5, 0x502a594f}}, 0xe8)
r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000c80)={0x0, 0x4, 0xa3c, 0x6})
r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000cc0)='/selinux/enforce\x00', 0x240941, 0x0)
ioctl$SIOCRSSL2CALL(r12, 0x89e2, &(0x7f0000000d00)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0})
syz_open_dev$usbmon(&(0x7f0000000d40)='/dev/usbmon#\x00', 0x7, 0x10000)
set_mempolicy(0x4000, &(0x7f0000000d80)=0x2d1, 0x140000)
02:59:00 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000014c80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x23}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000290000004300000000000000000040000a77125f65785a2f122109800bbd10692afcae7462a699dc89e3e8ce8aae8a2e345bfbc50f0b8a95825be272fd3bf340d2a6432f45ea404b890483da63e4de1c9c2d7903e520d5c3f18bb85f72c9c5c61ed6aed189698ad8886a2816cafb4f2a5758bec3248b0ceacad1a7e2a56166b108e2b5b4411ebb428e145b8c77d1088afcec034b1d3e53c62fa1ae0ed09a54d08263090b7f2394410022826bd29294575d0d5211f89390c13750c5cd871d1186ba5f05621a60e944891f64188ecc"], 0xd0}}], 0x1, 0x0)
02:59:00 executing program 5:
syz_open_dev$tty20(0xc, 0x4, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000280)={0x9, 0x80}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0xfffffffd, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
process_vm_readv(r0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x2, 0x100000001)
clock_gettime(0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0x9, &(0x7f0000000300)={0x0, 0xfffffffffffffe6f}, 0x1, 0x0, 0x0, 0x4008054}, 0x200404d5)
write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x7f, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x10100, 0x800, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfdfffffffdffffff, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000800)={0x20000000000002cd, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0xe5}]}, 0xffffffffffffff75)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'syzkaller0\x00'}, 0x18)
02:59:00 executing program 4 (fault-call:1 fault-nth:60):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:00 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000040))
02:59:00 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0x80007c)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="e60300", 0x3, 0x1000, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x5, r4, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x47fa67b654b22350, r2}])
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000200))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12269523a4425758ee956e46", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030b70e0000303030302c757365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020003)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00')
[ 679.329285] FAULT_INJECTION: forcing a failure.
[ 679.329285] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 679.361645] CPU: 0 PID: 18748 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 679.369688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 679.379082] Call Trace:
[ 679.379109] dump_stack+0x142/0x197
[ 679.385337] should_fail.cold+0x10f/0x159
[ 679.389543] ? __might_sleep+0x93/0xb0
[ 679.393467] __alloc_pages_nodemask+0x1d6/0x7a0
[ 679.398203] ? __alloc_pages_slowpath+0x2930/0x2930
[ 679.403256] ? __lock_is_held+0xb6/0x140
[ 679.407342] ? check_preemption_disabled+0x3c/0x250
[ 679.412395] alloc_pages_current+0xec/0x1e0
[ 679.416785] __get_free_pages+0xf/0x40
[ 679.420709] get_zeroed_page+0x11/0x20
[ 679.424624] get_image_page+0x1c/0x140
[ 679.428546] alloc_rtree_node+0x41/0xa0
[ 679.432654] memory_bm_create+0x3bf/0x530
[ 679.436845] create_basic_memory_bitmaps+0x94/0x130
[ 679.441968] snapshot_open+0x378/0x400
[ 679.445898] ? snapshot_release+0x230/0x230
[ 679.450242] ? snapshot_release+0x230/0x230
[ 679.454590] misc_open+0x34f/0x480
[ 679.458234] ? misc_devnode+0x130/0x130
[ 679.462217] chrdev_open+0x207/0x590
[ 679.465944] ? cdev_put.part.0+0x50/0x50
[ 679.470034] ? security_file_open+0x89/0x190
[ 679.474473] do_dentry_open+0x73b/0xeb0
[ 679.478561] ? cdev_put.part.0+0x50/0x50
[ 679.482647] vfs_open+0x105/0x220
[ 679.486141] path_openat+0x8bd/0x3f70
[ 679.489953] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 679.495358] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 679.500533] ? __lock_is_held+0xb6/0x140
[ 679.500549] ? save_trace+0x290/0x290
[ 679.500570] ? __alloc_fd+0x1d4/0x4a0
[ 679.512250] do_filp_open+0x18e/0x250
[ 679.516081] ? __alloc_fd+0x1d4/0x4a0
[ 679.519913] ? may_open_dev+0xe0/0xe0
[ 679.523758] ? do_raw_spin_unlock+0x174/0x260
[ 679.528280] ? _raw_spin_unlock+0x2d/0x50
[ 679.532463] ? __alloc_fd+0x1d4/0x4a0
[ 679.536314] do_sys_open+0x2c5/0x430
[ 679.540056] ? filp_open+0x70/0x70
[ 679.543645] SyS_openat+0x30/0x40
[ 679.547204] ? SyS_open+0x40/0x40
[ 679.550685] do_syscall_64+0x1e8/0x640
[ 679.554604] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 679.559489] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 679.564715] RIP: 0033:0x45b349
[ 679.567918] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
02:59:00 executing program 4 (fault-call:1 fault-nth:61):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 679.575656] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 679.582976] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 679.590264] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 679.597553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 679.604848] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000003c
02:59:00 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20900, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x4, 0x3ff, 0x6, r2, 0x0, &(0x7f00000000c0)={0x9b090f, 0xa35a753, [], @p_u32=&(0x7f0000000080)=0x9}})
02:59:00 executing program 1:
accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x1, 0x70, 0x43, 0xff, 0xc4, 0x3, 0x0, 0x6, 0x100, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x81, 0x9}, 0x4000, 0x0, 0x52f9, 0x0, 0xa01, 0x7ff, 0x80})
r0 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0)
shmdt(r0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x8, 0x9, 0xf801, 0x4, "0221a1ad10a24f9d8489d62bdcedf3dbede6d540ae103ebaf248dc94a373c7ea"})
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7468, 0x4)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@initdev, @multicast2, <r3=>0x0}, &(0x7f0000000300)=0xc)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000340)={@loopback, 0x38, r3})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x400100, 0x0)
getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000540)={0x28, 0x2, 0x0, {0x6, 0x6, 0x8000}}, 0x28)
pipe(&(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
read(r7, &(0x7f00000005c0), 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000600)=0x40, 0x4)
r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$unix(r8, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
r9 = dup3(0xffffffffffffffff, r1, 0x80000)
bind$pptp(r9, &(0x7f00000006c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x20000, 0x0)
ioctl$TIOCSPTLCK(r10, 0x40045431, &(0x7f0000000740))
r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000000b80)={0x1, 0x1, 0x1d, 0xe, 0x171, &(0x7f0000000780)})
r12 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000000)
ioctl$TCSETSF(r12, 0x5404, &(0x7f0000000bc0)={0x5, 0x81, 0x7, 0x800, 0x9, "dca748246455368e224a761e7a3c8981c39178"})
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004984}, 0x800)
[ 679.717191] FAULT_INJECTION: forcing a failure.
[ 679.717191] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 679.752674] CPU: 0 PID: 18767 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 679.760624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 679.770000] Call Trace:
[ 679.772609] dump_stack+0x142/0x197
[ 679.776265] should_fail.cold+0x10f/0x159
[ 679.780542] ? __might_sleep+0x93/0xb0
[ 679.784462] __alloc_pages_nodemask+0x1d6/0x7a0
[ 679.789176] ? __alloc_pages_slowpath+0x2930/0x2930
[ 679.794248] ? __lock_is_held+0xb6/0x140
[ 679.798326] ? check_preemption_disabled+0x3c/0x250
[ 679.803384] alloc_pages_current+0xec/0x1e0
[ 679.807738] __get_free_pages+0xf/0x40
[ 679.811649] get_zeroed_page+0x11/0x20
[ 679.815738] get_image_page+0x1c/0x140
[ 679.820006] alloc_rtree_node+0x41/0xa0
[ 679.824171] memory_bm_create+0x3bf/0x530
[ 679.828376] create_basic_memory_bitmaps+0x94/0x130
[ 679.833507] snapshot_open+0x378/0x400
[ 679.837424] ? snapshot_release+0x230/0x230
[ 679.841772] ? snapshot_release+0x230/0x230
[ 679.846231] misc_open+0x34f/0x480
[ 679.849803] ? misc_devnode+0x130/0x130
[ 679.853801] chrdev_open+0x207/0x590
[ 679.857538] ? cdev_put.part.0+0x50/0x50
[ 679.861628] ? security_file_open+0x89/0x190
[ 679.866068] do_dentry_open+0x73b/0xeb0
[ 679.870077] ? cdev_put.part.0+0x50/0x50
[ 679.874172] vfs_open+0x105/0x220
[ 679.877656] path_openat+0x8bd/0x3f70
[ 679.881476] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 679.886910] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 679.891705] ? __lock_is_held+0xb6/0x140
[ 679.895805] ? save_trace+0x290/0x290
[ 679.899640] ? __alloc_fd+0x1d4/0x4a0
[ 679.903617] do_filp_open+0x18e/0x250
[ 679.907438] ? __alloc_fd+0x1d4/0x4a0
[ 679.911379] ? may_open_dev+0xe0/0xe0
[ 679.915224] ? do_raw_spin_unlock+0x174/0x260
[ 679.919752] ? _raw_spin_unlock+0x2d/0x50
[ 679.923923] ? __alloc_fd+0x1d4/0x4a0
[ 679.927821] do_sys_open+0x2c5/0x430
[ 679.931565] ? filp_open+0x70/0x70
[ 679.935147] SyS_openat+0x30/0x40
[ 679.938612] ? SyS_open+0x40/0x40
[ 679.942089] do_syscall_64+0x1e8/0x640
[ 679.945994] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 679.950867] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 679.956077] RIP: 0033:0x45b349
[ 679.959285] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 679.967017] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 679.974306] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 679.981600] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 679.988890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 679.996182] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000003d
02:59:01 executing program 3:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080))
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r9 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r9, 0xc0386106, &(0x7f0000000040))
pipe2(&(0x7f00000000c0), 0x800)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
r13 = socket$inet(0x2, 0x4000000805, 0x0)
r14 = socket$inet_sctp(0x2, 0x5, 0x84)
r15 = dup3(r13, r14, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r15, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r14, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r16=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r15, 0x84, 0x76, &(0x7f0000000800)={r16}, 0x8)
r17 = socket$inet(0x2, 0x4000000805, 0x0)
r18 = socket$inet_sctp(0x2, 0x5, 0x84)
r19 = dup3(r17, r18, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r18, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r19, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r18, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r20=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r19, 0x84, 0x76, &(0x7f0000000800)={r20}, 0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r21=>0xffffffffffffffff})
close(r21)
r22 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r23=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r21, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r23}}, 0x18)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r21, 0x84, 0x9, &(0x7f0000000340)={<r24=>0x0, @in6={{0xa, 0x4e22, 0x8000, @mcast2, 0x80000001}}, 0x800, 0xfff, 0x10001, 0x2, 0x18, 0xff}, &(0x7f0000000440)=0x9c)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r25=>0xffffffffffffffff})
close(r25)
r26 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r26, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r27=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r25, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r27}}, 0x18)
r28 = socket$inet(0x2, 0x4000000805, 0x0)
r29 = socket$inet_sctp(0x2, 0x5, 0x84)
r30 = dup3(r28, r29, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r29, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r30, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r29, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r29, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r31=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r30, 0x84, 0x76, &(0x7f0000000800)={r31}, 0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r25, 0x84, 0x6d, &(0x7f0000000840)={<r32=>r31, 0xe4, "22b2528d6c188f3c58dae451e1bf834784d01e6d91f8b94ae591bcd6351744abd35d79ec7877dfd87b83335cc9d1a7f9101db2bd120d80e26917b9815f4c322e9ed53b24533c013b3c75e23fb8be3bff4ed0573db5ab1e1cf2d8456ec1325041b88ded416147ea3d1c2dd51bb733cecdd501505b639b41c4039c2c7f7acd25bcc3e923d262de301b8b296d1f54a1812d1066d1f2e4f9b80221af16d03b1dd90c791f5450956b8e40533a0ee8babf5b83d67459324dbf85632938965671ae8845c14d98cebc92d3ea4186478dfa6c403b205bc1d3178d6cdce3fb333c016ebba2ad696b0d"}, &(0x7f0000000940)=0xec)
r33 = socket$inet(0x2, 0x4000000805, 0x0)
r34 = socket$inet_sctp(0x2, 0x5, 0x84)
r35 = dup3(r33, r34, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r34, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r35, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r34, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r34, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r36=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r35, 0x84, 0x76, &(0x7f0000000800)={r36}, 0x8)
sendmmsg$inet_sctp(r10, &(0x7f00000019c0)=[{&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x98, @remote, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="08e23ad13f7db100bef96084a36e913611ee78f902228f636a9bf7cbeede3112dbe590844821939fa59b23d8479f2f39b057dcede8773bebe354c925594669", 0x3f}], 0x1, 0x0, 0x0, 0x20000010}, {&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x101, @remote, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="a5ea96328e9182cd40ca69f94168e8ebd517261904e232300d55f03edebb5b93", 0x20}], 0x1, &(0x7f0000000480)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x8000, 0x0, 0x7, r16}}, @init={0x18, 0x84, 0x0, {0x1, 0xfff, 0x2, 0xc0b7}}, @init={0x18, 0x84, 0x0, {0x0, 0x8, 0x1ff}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x25}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x40}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3b8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x1, 0x10001, 0x278, r20}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x9, 0x8000, 0x6, 0x3, 0x4, 0xc206, 0x4, r24}}, @authinfo={0x18, 0x84, 0x6, {0x9ca}}], 0x120, 0x80}, {&(0x7f00000005c0)=@in6={0xa, 0x4e20, 0x8001, @mcast1, 0x80000000}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000600)="3c4ed4709b06212d6f40198acbec53e902e5f6488ccfa05f563d055d33365aceb156053b0c625505793e81e4475bbb42c977f9550c70ee3d664a4fff5c7a54f959f537a59f50cbd252347537a81fc11e113fec15fa28add906890f92daf45ddbcd30b5b4fec89de63e445a05f452a133cb316c26f72e647061d277fea91fd1dd6a630032414a67c4f3b64fda6a2339e0bb61951300ef8909888bbb7928a153c92ced917dc33e08cde22c0fddf8a709e63177ee0694d115853381741d011b97f05ddda7fd1617eaa1410e1096f0ed1f6d9bf99cd75ced78ea8f81a240f07e06add367f50b61dce651dc0c8df2ac1724f6147250296afbdf5914", 0xf9}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}], 0x18, 0x8001}, {&(0x7f0000000780)=@in6={0xa, 0x4e22, 0x90, @ipv4={[], [], @local}, 0x6}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000007c0)="f67d94d1ff873e79c9fcafe1c1d2c90018a19ecda487d55e316f9d22c07f69712a721ee72a62a40a48", 0x29}], 0x1, &(0x7f0000000980)=[@init={0x18, 0x84, 0x0, {0xff, 0xa46c, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0xb99d, 0x8, 0x4, 0xd7ee, 0x3, 0x1ff, 0x2, 0x9, r32}}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x8000, 0x6, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x1000, 0x7, 0x478, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x400}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x21}}], 0x108, 0x8040}, {&(0x7f0000000ac0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000b00)="50d53d523b038699270a0975e58e11d3c7a29aaf135637ddfff7a80f6a0acd08cc2c81fdd30629e58fbc187a97a73f42e652dd8c02af030c35b82ccb4bd0074a442ac4ee891e58ba25720076487b7d2bd9d4125d90cbad7b4025ac04216dfbaa94d344c320633f", 0x67}, {&(0x7f0000000b80)="67bf17b2306d40315ab752", 0xb}, {&(0x7f0000000bc0)="32cacedd084b516d23440adb5a1b81464c5e8d4db9b9e223b00c76bc787ff1236de544f02b106b53bd0d3064c185cef54c42abe36c8ecd20f320ce3dd0be6e4e72bcb2f9542c78a7c99d358bf70a341b1802e3d085e518639cf7ae6802b33a0847bb30832f4e5a8f81f5fdce04904d1ce3131da6b9b660cbc04b48d01f49cc69656b188d426ceafae0f5c9b27c10b53caa476f033fd966ca3d4431a6375db6d826942298b13d69f625a8611df79727564a91ef625a509b89df0243c5a9a664a2d20733f852122a739fb023848613ccb6c947c5acaeb4e7c0cba476f71c28f494df79ae02b185f0606b92934e5cdf9c04b9f5d1ca20134541", 0xf8}, {&(0x7f0000000cc0)="9505d9f12c", 0x5}, {&(0x7f0000000d00)="51fc33df0589f765298428551c5496660fa20be77dec9d122f971e04a519ae3dbe6944e2504305adf7e989e5c31651defcf34dc08224f92a0a713ba42245e1ae3a23bfc9db09aedf2ac0a633c881c07b375c", 0x52}, {&(0x7f0000000d80)="fd3b4bbdd0b858cde9d594b7bac66b", 0xf}, {&(0x7f0000000dc0)="64efa4230ffcdb5f489d5f134a8ecc8363b871b1fab82ab7ae580e587d3e795994e8e5b94406f2c588c6f18b1b40c0f37b7679d542b78cef8489140d4ae6dc29ecf04be3d9c2c9a1b761734363237984188a931e75e0e4f982d0ed92bb09571d855d7aec7a9ac3a71ebaca24fd85dd34a059a3940181963edf5a4a761b389509f6b1fba3c11b9fe9ef9490c358b8030542a6a594bd9b", 0x96}, {&(0x7f0000000e80)="3bd5ee1c12", 0x5}, {&(0x7f0000000ec0)="d99b2ebe80e9a625eaf83c76c657668468d888348bd48061b1e0aa562ba7b18b9c4df0d92a1719258539e770bc2456623ec2970425e8c256006aeef7555569bd4a6db088ed2dada0c6ec532d0a0d6365327e8d", 0x53}], 0x9, &(0x7f0000001000)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x2, 0x7ff, 0x8001, r36}}], 0x20, 0x20008840}, {&(0x7f0000001040)=@in6={0xa, 0x4e20, 0x16c, @ipv4={[], [], @remote}, 0x8}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000001080)="f6c2339d8c219062a662645bc64776ad1e5aadcb9369890ba0f8d7ecff16c8138e299439c5d530c02f9656c118b91f3cf123811ae9eddddb16a8727fc576cf9159f844e074e27654178d54efbe4bf3520204fa2d6a7f5995f109fb939f8ba1b9256fea3661b999b41879b351044dca6dbf8a808b98d01186ba40a8b65a1678d92645843096b8de022ea0b4f545423587c170edda90680719ebe32490f25bd42342f7d8e379325916bd251556ee69", 0xae}, {&(0x7f0000001140)="eb3be1645c30c95c7ac3468a34a45f51c3215ef07ec502e0b1600b4ff8fd3f8fe186ad536efb1b793668f278d690d5673fbdfbd370610ae0ab7ce3274c24348079b00a7bf50e2a116e3ff1e34c4aea41f1ace8555597b6a590265b7a6a3053c1b32555066da72023c5f27088a1fd59e30df73c", 0x73}, {&(0x7f00000011c0)="208a1e503bbbf3ac61390f9e6ef58616565a94633e07f1d6456de690936dbb89e74a07f0c03f362d29542028cf44d32c86e1f14676463f87a02284b4197271d2687a53515e8c5313e26e81a4c392e0d268337c7a62b7d8571f7aa27738147ae4e68cc2feecad070d", 0x68}, {&(0x7f0000001240)="597092cd0e52f87f6f78661d91ac608e2f274d130a4ea0ea183dc9878a79e00e5066ebff0c8006882f59d273a846a97c78174d0816328a168ed7d3f7acf183413fa41d2e96926aba716bc60caf", 0x4d}, {&(0x7f00000012c0)="f45f8a3b022a949c58c5cd0d463afa37820c58b44a7626db3200727ef708c25187fafb9861dae9588018ab8a44aa354f1fae629ed3e12a51fb9a29b47afc80f17843c1bd4ce695d55790d23afe41c41d83120909106ec78197a1b8a02c0633f529b292b5d2d97b1067196a79e44164989b0aac53af92f0890cbcd9c1e423eb87bdb4f1d435d2e9464c0dbdbdeda6fbcf4f4782fb", 0x94}, {&(0x7f0000001380)="514051755467a20b03bb6999c2a002fe8a3e921bd6144843fbbd6125f155fb8eff42c4627d986611212dcd52082225df4c6f2ec4596f94b05abb99a7a6a9fc579c7eb7c86b40b0e8ca44b21f84b425fabad934a79ce167d1290810e85e8ed073", 0x60}, {&(0x7f0000001400)="ee4cd0d3370872d65cfc30c5331fafb7adfc9470bbc46e85c89255ee0db92c4a21a1308932d31bfc3fb1cb079b3c3221690a2f6af3fd32eb562b61bd55ac9e0b4d4fe9956e57ae0f2c28a1b3938a5d4b9326f30add079fccb2bcd9c51cfec8d06763106681821857826b13f01a4365bfeddcd4ac80e300a5a7a1dfe447ba024b65b56426331080f05f4309542316e486270914a6d710dcc42198f55998dcb7d5afbb17d0b4f30c234beb1b0792b18dfb4422b6a1b1a971b0f0af18fb9662c84583f11b812fd48e2a1cafd99f027ebf81fa90a6ec863af172a07f8f041626c3b66e4cfa921864732d0b", 0xe9}, {&(0x7f0000001500)="4fa9fa0b0bdc4daf328c8ed693f1ece8a2751c900dfebb5b0a48621c8bcc441b93711f", 0x23}, {&(0x7f0000001540)="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", 0xfc}], 0x9, &(0x7f0000001700)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7fff}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x9cc6}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x2}], 0x60, 0x4040040}, {&(0x7f0000001780)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001940)=[{&(0x7f00000017c0)="8bb0722d8c69003da077792202ef7cfdde833dd11fa1ce73bed3cc7876498457c86f88ee2b1dbba420ecb32d8f0d582ebc5da3f4268ebfe5370e37cfdeb900ce22d8d57d76fe6eade16c4fd89430f335279fc7d275dbd320", 0x58}, {&(0x7f0000001840)="cef02562eb0c30e5b8be036a44352dace39c371c065a5a349b89f6c0d4ed20147e5e069088813f4c7426efe840226f1ca9cd978004a645a7d04e0e49e0e924", 0x3f}, {&(0x7f0000001880)="9abb3d7f872065e00d9462a257868ba25008107a3c2fea550238e33c8a2ba7e86e8cf7e245907f20028b3e9216153002249ee7d7b2308a4d3b268b2a83a476d2e6f2c637e780ca51da5731139e75eab1c1c1fe4a9dcaa654386a3faa69d6ecbec4e88f0d71651ee18d63e89aafc28f906ab3c94a789914a2a9fa0d3c5cd2846a640c08ca239ed1433f1cbe702481ed09", 0x90}], 0x3, &(0x7f0000001980)=[@authinfo={0x18, 0x84, 0x6, {0x82}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x30, 0x1}], 0x7, 0x4004000)
02:59:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0xc0002, 0x0)
bind$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00')
syz_genetlink_get_family_id$tipc2(0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r1, 0x9)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0)
fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0185879, 0x0)
ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000001c0)=0x1)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={<r5=>0x0, 0x6, 0x1800, 0x1, 0x4, 0x8, 0x1, 0x401, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x7b05, 0xfffffff7, 0x3ff, 0x7, 0x40}}, &(0x7f00000003c0)=0xb0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)={r5, 0xc3, "a08c0033d8e8080c6e509ded325dc19887b9be6f6d80168e6ade81e8ecd779a52c6eaf097b6d73677e1fffb332d7d79f09762c680d071220c1c0849e8628d412803f382fb4e6d6bf5e3a3d63298575cf37e32a4f5353fa2beb1095a47f113a315aebcf0c67cc2c6c41f94d465a61501497705922e6b4418a62fb0d47d39e20eae650122a1cd6ea9235242fc395c9cbd1ce2e52588bf3cdbe2f0fe19287dbaaa4b7f2595c0fcd45aa12bca7a8f5469577520e5a0541dec29361cc79761c60bd2f8048f8"}, &(0x7f0000000400)=0xcb)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r7 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000240)={0x3, 'ip6erspan0\x00', {0x4}, 0x9})
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r9, @ANYRESDEC=0x0, @ANYRES32=r9, @ANYBLOB="100006000000000020000000"], 0x5, 0x3)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000800)={0x8, 0x888d, 0x0, 0x0, [], [], [], 0x8ed, 0x2, 0x1, 0x1b, "13cc6a7a45751f58c3e11dc3da0213a7"})
renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00')
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x40a0)
02:59:01 executing program 0:
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=<r1=>0x0)
sched_setparam(r1, &(0x7f0000000080)=0xffffffff)
r2 = request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='wlan0\x85!*&self//+\'{{*bdev/]eth0nodevvboxnet0lo\x00', 0xffffffffffffffff)
keyctl$get_keyring_id(0x0, r2, 0x80)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
syz_read_part_table(0x5, 0x3, &(0x7f0000000340)=[{&(0x7f0000000180)="2d4f5471e6704d1dc33ab0cab457ab4ace29cabfea29b57d1744fb91049a22bdb1b6853b01ee504b2b70e6eac1a5389f8defd8c0c9bec89d1aae9c240e7c3eaf8e43738a08046a96259631a9a3166bda8e804b9e03481f58cd21aff43a803eec63489065a0417d69c4958a24834b90eb9becb1d144e086f31ee60dd5e9dde9cd0094394756243f8bc0335aeff8761905fb0bcdf3b8412e502306ade3d204e22a6523850eb650bef7e4137dc16120bf3c7bde0501a5846914f1169bfc70f022f402d0e15c3f1d063381f7fbc34f9893f3c4f6356943cf5ac051a44e9cb0a5ea18b8df52de2464aac8af4e2cd116effded6272608dcb7c", 0xf6, 0x80000001}, {&(0x7f0000000280)="69e5bf0dd6d58e896258c25d6eabfe4529093fc0791c053fa7660368915e721502d2303c2306baebfb5e3559e8a6c3ef431808ad3808e9b265f3b92f", 0x3c, 0x6}, {&(0x7f00000002c0)="302af9ec3da1e630a960288c7ee55e71d1b17c711346edf1516d55bceb92f608c6bf11a9ce4a25316c2b677d5aa83e961618384776af57c75bb7a77f23ee89240d74f45ba8a8c5976aed95893a2afc585ee561d5ce162e56d88d9516e07ef5ae751a95b26686f60074545c45233285c015307902c26f", 0x76, 0x1}])
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x89011, r3, 0x81000000)
02:59:01 executing program 4 (fault-call:1 fault-nth:62):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 680.159549] FAULT_INJECTION: forcing a failure.
[ 680.159549] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 680.176310] CPU: 0 PID: 18791 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 680.184243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 680.193633] Call Trace:
[ 680.196251] dump_stack+0x142/0x197
[ 680.199932] should_fail.cold+0x10f/0x159
[ 680.204114] ? __might_sleep+0x93/0xb0
[ 680.208033] __alloc_pages_nodemask+0x1d6/0x7a0
[ 680.212734] ? __alloc_pages_slowpath+0x2930/0x2930
[ 680.217796] ? __lock_is_held+0xb6/0x140
[ 680.221930] ? check_preemption_disabled+0x3c/0x250
[ 680.226986] alloc_pages_current+0xec/0x1e0
[ 680.231335] __get_free_pages+0xf/0x40
[ 680.235243] get_zeroed_page+0x11/0x20
[ 680.239219] get_image_page+0x1c/0x140
[ 680.243141] alloc_rtree_node+0x41/0xa0
[ 680.247154] memory_bm_create+0x3bf/0x530
[ 680.251352] create_basic_memory_bitmaps+0x94/0x130
[ 680.256391] snapshot_open+0x378/0x400
[ 680.260297] ? snapshot_release+0x230/0x230
[ 680.264644] ? snapshot_release+0x230/0x230
[ 680.268991] misc_open+0x34f/0x480
[ 680.272563] ? misc_devnode+0x130/0x130
[ 680.276563] chrdev_open+0x207/0x590
[ 680.280311] ? cdev_put.part.0+0x50/0x50
[ 680.284403] ? security_file_open+0x89/0x190
[ 680.288845] do_dentry_open+0x73b/0xeb0
[ 680.292846] ? cdev_put.part.0+0x50/0x50
[ 680.296943] vfs_open+0x105/0x220
[ 680.300428] path_openat+0x8bd/0x3f70
[ 680.304254] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 680.309673] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 680.314560] ? __lock_is_held+0xb6/0x140
[ 680.318653] ? save_trace+0x290/0x290
[ 680.322491] ? __alloc_fd+0x1d4/0x4a0
[ 680.326459] do_filp_open+0x18e/0x250
[ 680.330289] ? __alloc_fd+0x1d4/0x4a0
[ 680.334115] ? may_open_dev+0xe0/0xe0
[ 680.337958] ? do_raw_spin_unlock+0x174/0x260
[ 680.342478] ? _raw_spin_unlock+0x2d/0x50
[ 680.346652] ? __alloc_fd+0x1d4/0x4a0
[ 680.350505] do_sys_open+0x2c5/0x430
[ 680.354249] ? filp_open+0x70/0x70
[ 680.357830] SyS_openat+0x30/0x40
[ 680.361308] ? SyS_open+0x40/0x40
[ 680.364787] do_syscall_64+0x1e8/0x640
[ 680.368702] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 680.373599] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 680.378814] RIP: 0033:0x45b349
[ 680.382023] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 680.389768] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 680.397151] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:59:01 executing program 4 (fault-call:1 fault-nth:63):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 680.404533] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 680.411913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 680.419207] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000003e
02:59:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000300)={r7, 0xffffffff, 0x2, "14cdfbd0f881aa7f4149a74d0c085a3696d4d701f9171cd27627228d62bd13b20d10ff89f290f4d2951693a636f5a66ae05efc363f39d5ea603db4306415dfb2f39cbae2698cdace1db0983ff1fdf8f146aeea9e445b796fb11f81f6bd2455e2e05b741dbc9ead17a5bc297bc57d9f6c66f0e666405e8ceafb6caa868e0c09de64b784e8cf24a135ee258157b8869f8dc3"})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010067726574617000000c00020008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x44}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = socket(0x10, 0x80002, 0x0)
ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x2511, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0)
[ 680.570986] FAULT_INJECTION: forcing a failure.
[ 680.570986] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 680.621635] CPU: 1 PID: 18811 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 680.629565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 680.638930] Call Trace:
[ 680.641532] dump_stack+0x142/0x197
[ 680.645178] should_fail.cold+0x10f/0x159
[ 680.649339] ? __might_sleep+0x93/0xb0
[ 680.653245] __alloc_pages_nodemask+0x1d6/0x7a0
[ 680.657937] ? __alloc_pages_slowpath+0x2930/0x2930
[ 680.662971] ? __lock_is_held+0xb6/0x140
[ 680.667045] ? check_preemption_disabled+0x3c/0x250
[ 680.672083] alloc_pages_current+0xec/0x1e0
[ 680.676422] __get_free_pages+0xf/0x40
[ 680.680338] get_zeroed_page+0x11/0x20
[ 680.684236] get_image_page+0x1c/0x140
[ 680.687285] Unknown ioctl -1054845647
[ 680.688135] alloc_rtree_node+0x41/0xa0
[ 680.688150] memory_bm_create+0x3bf/0x530
[ 680.688172] create_basic_memory_bitmaps+0x94/0x130
[ 680.705082] snapshot_open+0x378/0x400
[ 680.708980] ? snapshot_release+0x230/0x230
[ 680.713317] ? snapshot_release+0x230/0x230
[ 680.717657] misc_open+0x34f/0x480
[ 680.721220] ? misc_devnode+0x130/0x130
[ 680.725298] chrdev_open+0x207/0x590
[ 680.729049] ? cdev_put.part.0+0x50/0x50
[ 680.733121] ? security_file_open+0x89/0x190
[ 680.737657] do_dentry_open+0x73b/0xeb0
[ 680.741647] ? cdev_put.part.0+0x50/0x50
[ 680.745720] vfs_open+0x105/0x220
[ 680.749187] path_openat+0x8bd/0x3f70
[ 680.752998] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 680.757503] bond1: Enslaving gretap1 as an active interface with an up link
[ 680.758377] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 680.758390] ? __lock_is_held+0xb6/0x140
[ 680.758401] ? save_trace+0x290/0x290
[ 680.758417] ? __alloc_fd+0x1d4/0x4a0
[ 680.758430] do_filp_open+0x18e/0x250
[ 680.787055] ? __alloc_fd+0x1d4/0x4a0
[ 680.790871] ? may_open_dev+0xe0/0xe0
[ 680.794716] ? do_raw_spin_unlock+0x174/0x260
[ 680.799252] ? _raw_spin_unlock+0x2d/0x50
[ 680.803424] ? __alloc_fd+0x1d4/0x4a0
[ 680.807253] do_sys_open+0x2c5/0x430
[ 680.810980] ? filp_open+0x70/0x70
[ 680.814652] SyS_openat+0x30/0x40
[ 680.818117] ? SyS_open+0x40/0x40
[ 680.821584] do_syscall_64+0x1e8/0x640
[ 680.825488] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 680.830361] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 680.835556] RIP: 0033:0x45b349
[ 680.838798] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 680.846529] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 680.853817] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 680.861100] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
02:59:02 executing program 0:
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0x0, r0)
r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0x0, r1)
request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00', r1)
request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x044\t\a\x83\xe8\x91y\x8a\xf0\x8bN\r\"\x11r4z\x95K@\xe5\xc3g\xe6I\xc9\r\xad\xbf\x81\x90Q e;\x89T\x8f\xff\x03Bf]\xdb\xc9\xb6\x1fie\xf1D\xb8\xf6zj\xf8\\\x87\xdc\n\x16\xf2\n\xfb\x9c\v\f\xf2\x85\x97\xfc\xf1\x17\xa2=\xa3l\xba\x02c\xaa\xa8\x81\x93_(\xda \x98\x058s\xd9SpT\xde\xef\x81l\t\xd65T\xb4\xc6', r1)
add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="ebe37b23d7f257b977a2453ea16a1648299a88bb211475d2f8edc214a54e6c72621bc7be7be048286d565869e21680e0f7cdb3175ac7ab5673719841d01a7efd41f13c9b14212aa7e72b7f306c1c86297bb99708b34b401e8df71c28eb28c081f35973ad0309eb2882911a8ef730e620855c02a7e14182ab35b3e2b822ca8ed7819ebc05c40006babbc1c7b1e9c727e58e21c270c68a3b0c5fc4d117078993a2203db21c5ce01fb1de61e4d732bdf8c35761bb786ad439c86d70e266eacc", 0xbe, r0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r2, 0x81000000)
[ 680.868380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 680.875662] R13: 00000000000007be R14: 00000000004c92f7 R15: 000000000000003f
[ 680.887037] bond1 (unregistering): Releasing backup interface gretap1
02:59:02 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000001c0)=""/2)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x910000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20004890)
[ 680.933018] bond1 (unregistering): Released all slaves
02:59:02 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000240)=""/211)
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:59:02 executing program 4 (fault-call:1 fault-nth:64):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:02 executing program 0:
syslog(0x4, &(0x7f0000000040)=""/236, 0xec)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x0, 0x30, r0, 0x81000000)
[ 681.181660] overlayfs: filesystem on './file0' not supported as upperdir
[ 681.219221] Unknown ioctl -1054845647
[ 681.246617] audit: type=1400 audit(1579834742.324:461): avc: denied { syslog } for pid=18844 comm="syz-executor.0" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
[ 681.276384] FAULT_INJECTION: forcing a failure.
[ 681.276384] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 681.297644] CPU: 0 PID: 18845 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 681.305583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 681.315113] Call Trace:
[ 681.317731] dump_stack+0x142/0x197
[ 681.321398] should_fail.cold+0x10f/0x159
[ 681.325684] ? __might_sleep+0x93/0xb0
[ 681.329607] __alloc_pages_nodemask+0x1d6/0x7a0
[ 681.334317] ? __alloc_pages_slowpath+0x2930/0x2930
[ 681.339371] ? __lock_is_held+0xb6/0x140
[ 681.343457] ? check_preemption_disabled+0x3c/0x250
[ 681.348515] alloc_pages_current+0xec/0x1e0
[ 681.352870] __get_free_pages+0xf/0x40
[ 681.356917] get_zeroed_page+0x11/0x20
[ 681.360827] get_image_page+0x1c/0x140
[ 681.364738] alloc_rtree_node+0x41/0xa0
[ 681.368782] memory_bm_create+0x3bf/0x530
[ 681.372978] create_basic_memory_bitmaps+0x94/0x130
[ 681.378023] snapshot_open+0x378/0x400
[ 681.381932] ? snapshot_release+0x230/0x230
[ 681.386305] ? snapshot_release+0x230/0x230
[ 681.390655] misc_open+0x34f/0x480
[ 681.394211] ? misc_devnode+0x130/0x130
[ 681.398200] chrdev_open+0x207/0x590
[ 681.401938] ? cdev_put.part.0+0x50/0x50
[ 681.406023] ? security_file_open+0x89/0x190
[ 681.410454] do_dentry_open+0x73b/0xeb0
[ 681.414455] ? cdev_put.part.0+0x50/0x50
[ 681.418550] vfs_open+0x105/0x220
[ 681.422033] path_openat+0x8bd/0x3f70
[ 681.425853] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 681.431270] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 681.435951] ? __lock_is_held+0xb6/0x140
[ 681.440151] ? save_trace+0x290/0x290
[ 681.443982] ? __alloc_fd+0x1d4/0x4a0
[ 681.447806] do_filp_open+0x18e/0x250
[ 681.451748] ? __alloc_fd+0x1d4/0x4a0
[ 681.455584] ? may_open_dev+0xe0/0xe0
[ 681.459432] ? do_raw_spin_unlock+0x174/0x260
[ 681.463952] ? _raw_spin_unlock+0x2d/0x50
[ 681.468122] ? __alloc_fd+0x1d4/0x4a0
[ 681.471979] do_sys_open+0x2c5/0x430
[ 681.475725] ? filp_open+0x70/0x70
[ 681.479306] SyS_openat+0x30/0x40
[ 681.482778] ? SyS_open+0x40/0x40
[ 681.486257] do_syscall_64+0x1e8/0x640
[ 681.490263] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 681.495138] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 681.500348] RIP: 0033:0x45b349
[ 681.503554] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 681.511286] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 681.518574] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 681.525872] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 681.533168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 681.540453] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000040
02:59:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000c8030000e8010000e8010000980000009800000030010000300300003003000030030000300300003003000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280054544c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000000000000000000e0000002ac1414aa00000000000000000000000000000000000000000000000065727370616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff0200000000000000000000000000016772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9035ba85ce5842f0000000000000000000000000000000000000000000000000000000000000000000000007000b0000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280045434e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x428)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_yield()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f0000000480)=[{}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r3, 0x9}, 0x8)
02:59:02 executing program 4 (fault-call:1 fault-nth:65):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 681.759770] FAULT_INJECTION: forcing a failure.
[ 681.759770] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 681.807996] CPU: 0 PID: 18855 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 681.815937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 681.825313] Call Trace:
[ 681.827921] dump_stack+0x142/0x197
[ 681.831583] should_fail.cold+0x10f/0x159
[ 681.835755] ? __might_sleep+0x93/0xb0
[ 681.839671] __alloc_pages_nodemask+0x1d6/0x7a0
[ 681.844375] ? __alloc_pages_slowpath+0x2930/0x2930
[ 681.849423] ? __lock_is_held+0xb6/0x140
02:59:02 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_FONTX(r0, 0x4b6b, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000280)={0x9, 0x400})
r8 = socket(0x400020000000010, 0x2, 0x0)
dup2(r4, r8)
r9 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x2, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='K\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000827bd7000fbdbd82501002000000000000141000100230c4b0000000b00008b45b414f1d612007d7e0f9a657b"], 0x34}, 0x1, 0x0, 0x0, 0x8085}, 0x841)
r10 = syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800802}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000004951ca49df78cc20ab5eb91cfd2a227d9fb6821d8eb33fb8f2716fdf802cad0b834edccae0d26084df21a61f9d6fcd0d2eeaaed5a67957c867a462f98940dfe65ac66aa0790c4b7b42798d047621aeb41a41cce4c1fd54a4cf00cb2fe3d1c9efe34a84e5df22d520d519f03ec086d9f5592c519d31ff51e006b1a65b58121f9e9df194a08bdf266463bf363332c1e8ea417fc5f28a6258978b70eda8fb4eb272540b26472070831223cd7157ad662b2204658ea1252a58a9b3038b5f9a9b26d", @ANYRES16=r10, @ANYBLOB="040000000000fbdbdf250200000014000900ff0200000000000000000000000000011400090000000000000000000000ffffffffffff05000200000000000400050008000600ac1414aa06000a004e20000008000800ac1414bb04000500"], 0x64}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0xf0}, 0x0)
add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="4c8cb7d747ed887de7347675dbe6af4211790a893fac047e2477c66527ace8", 0x1f, 0xfffffffffffffffe)
[ 681.853623] ? check_preemption_disabled+0x3c/0x250
[ 681.858674] alloc_pages_current+0xec/0x1e0
[ 681.863031] __get_free_pages+0xf/0x40
[ 681.866945] get_zeroed_page+0x11/0x20
[ 681.870856] get_image_page+0x1c/0x140
[ 681.874764] alloc_rtree_node+0x41/0xa0
[ 681.878764] memory_bm_create+0x3bf/0x530
[ 681.882953] create_basic_memory_bitmaps+0x94/0x130
[ 681.888014] snapshot_open+0x378/0x400
[ 681.888028] ? snapshot_release+0x230/0x230
[ 681.888044] ? snapshot_release+0x230/0x230
[ 681.888062] misc_open+0x34f/0x480
[ 681.888079] ? misc_devnode+0x130/0x130
02:59:03 executing program 4 (fault-call:1 fault-nth:66):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 681.888092] chrdev_open+0x207/0x590
[ 681.888115] ? cdev_put.part.0+0x50/0x50
[ 681.888133] ? security_file_open+0x89/0x190
[ 681.888152] do_dentry_open+0x73b/0xeb0
[ 681.888169] ? cdev_put.part.0+0x50/0x50
[ 681.888192] vfs_open+0x105/0x220
[ 681.888212] path_openat+0x8bd/0x3f70
02:59:03 executing program 4 (fault-call:1 fault-nth:67):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 681.888224] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 681.888265] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 681.888277] ? __lock_is_held+0xb6/0x140
[ 681.888290] ? save_trace+0x290/0x290
[ 681.888311] ? __alloc_fd+0x1d4/0x4a0
[ 681.888328] do_filp_open+0x18e/0x250
[ 681.888338] ? __alloc_fd+0x1d4/0x4a0
[ 681.888351] ? may_open_dev+0xe0/0xe0
[ 681.888382] ? do_raw_spin_unlock+0x174/0x260
[ 681.888397] ? _raw_spin_unlock+0x2d/0x50
[ 681.888410] ? __alloc_fd+0x1d4/0x4a0
02:59:03 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xffffffffffffffff}, 0x15628, 0x0, 0x0, 0x5, 0xffffffffffffffff}, r1, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, [], [{0x300000, 0x400, 0x1, 0x1f, 0x400, 0xa667}, {0xaa, 0x0, 0x3, 0x80, 0x0, 0xf135}], [[], [], [], [], [], [], [], []]})
pwritev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000380)="150987b9de9a9d5f39556abb1117fbe0daaedcfdc25c", 0x16}, {&(0x7f00000003c0)="7c87924cfe3d630bf4aae1622f835b2a4c14ec1ae892f5b9a67ac21447d39b513c67ba5cee51440e826220a2d4b722326e9b102b34cfd5e5d5f7dbe7a4ef56fbab88704bad8e8238cf494aa27a39544726c1a78f6ae058ab3d856d0ca9e6b7a3610043ba1037b56770785848af3bd588590e321e", 0x74}, {&(0x7f0000000440)="ee25d033c2acb95a0b6d83bc99752be0f0172f18a89274df9a4aa4e1ba5dd5f584bf6b41b9deca18ae2b1c3a8a7b555c78cbeed651", 0x35}, {&(0x7f0000000480)="8856f8fc47e5b39550549b967969a6b7c420707705f8a0b14e0992b36a96cc65cd438c62cf4a5130944bd2a9570a83c49458fceea0f7b3df91b76eef15f19753d23937b01e4504876b18426bf668c64548a8e1629d57a87a01dd3a1b90d9714909981b6e6aff2ec8b1461b360be6d3fa2d103edb2302695d4793feacd5b3bcbe4d12fd6504f9b8f89846ed", 0x8b}, {&(0x7f0000000540)="aba4e1f6572b1e9c99eeb772", 0xc}], 0x5, 0x7)
ioctl$IOC_PR_PREEMPT(r3, 0xc0386106, &(0x7f0000000040))
02:59:03 executing program 4 (fault-call:1 fault-nth:68):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 681.888446] do_sys_open+0x2c5/0x430
[ 681.888464] ? filp_open+0x70/0x70
[ 681.888493] SyS_openat+0x30/0x40
[ 681.888503] ? SyS_open+0x40/0x40
[ 681.888519] do_syscall_64+0x1e8/0x640
[ 681.888530] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 681.888554] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 681.888565] RIP: 0033:0x45b349
[ 681.888572] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 681.888587] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 681.888595] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
02:59:03 executing program 4 (fault-call:1 fault-nth:69):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 681.888602] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 681.888609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 681.888616] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000041
[ 682.075815] FAULT_INJECTION: forcing a failure.
[ 682.075815] name fail_page_alloc, interval 1, probability 0, space 0, times 0
02:59:03 executing program 4 (fault-call:1 fault-nth:70):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 682.075829] CPU: 1 PID: 18866 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 682.075836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 682.075841] Call Trace:
[ 682.075858] dump_stack+0x142/0x197
[ 682.075874] should_fail.cold+0x10f/0x159
[ 682.075886] ? __might_sleep+0x93/0xb0
[ 682.075902] __alloc_pages_nodemask+0x1d6/0x7a0
[ 682.075917] ? __alloc_pages_slowpath+0x2930/0x2930
[ 682.075931] ? __lock_is_held+0xb6/0x140
[ 682.075940] ? check_preemption_disabled+0x3c/0x250
02:59:03 executing program 4 (fault-call:1 fault-nth:71):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 682.075955] alloc_pages_current+0xec/0x1e0
[ 682.075970] __get_free_pages+0xf/0x40
[ 682.075980] get_zeroed_page+0x11/0x20
[ 682.075990] get_image_page+0x1c/0x140
[ 682.076002] alloc_rtree_node+0x41/0xa0
02:59:03 executing program 4 (fault-call:1 fault-nth:72):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 682.076016] memory_bm_create+0x3bf/0x530
[ 682.076040] create_basic_memory_bitmaps+0x94/0x130
[ 682.076053] snapshot_open+0x378/0x400
[ 682.076063] ? snapshot_release+0x230/0x230
[ 682.076075] ? snapshot_release+0x230/0x230
[ 682.076088] misc_open+0x34f/0x480
[ 682.076100] ? misc_devnode+0x130/0x130
[ 682.076110] chrdev_open+0x207/0x590
[ 682.076131] ? cdev_put.part.0+0x50/0x50
02:59:03 executing program 4 (fault-call:1 fault-nth:73):
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 682.076146] ? security_file_open+0x89/0x190
[ 682.076161] do_dentry_open+0x73b/0xeb0
[ 682.076173] ? cdev_put.part.0+0x50/0x50
[ 682.076188] vfs_open+0x105/0x220
[ 682.076203] path_openat+0x8bd/0x3f70
[ 682.076215] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.076229] ? trace_hardirqs_on+0x10/0x10
[ 682.076251] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 682.076260] ? __lock_is_held+0xb6/0x140
[ 682.076271] ? save_trace+0x290/0x290
[ 682.076286] ? __alloc_fd+0x1d4/0x4a0
[ 682.076299] do_filp_open+0x18e/0x250
[ 682.076307] ? __alloc_fd+0x1d4/0x4a0
[ 682.076317] ? may_open_dev+0xe0/0xe0
[ 682.076337] ? do_raw_spin_unlock+0x174/0x260
[ 682.076348] ? _raw_spin_unlock+0x2d/0x50
[ 682.076358] ? __alloc_fd+0x1d4/0x4a0
[ 682.076387] do_sys_open+0x2c5/0x430
[ 682.076400] ? filp_open+0x70/0x70
[ 682.076419] SyS_openat+0x30/0x40
[ 682.076428] ? SyS_open+0x40/0x40
[ 682.076440] do_syscall_64+0x1e8/0x640
[ 682.076450] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 682.076466] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.076474] RIP: 0033:0x45b349
[ 682.076479] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 682.076490] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 682.076497] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 682.076502] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 682.076508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 682.076515] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000042
[ 682.202425] FAULT_INJECTION: forcing a failure.
[ 682.202425] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 682.202440] CPU: 1 PID: 18873 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 682.202447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 682.202454] Call Trace:
[ 682.202473] dump_stack+0x142/0x197
[ 682.202491] should_fail.cold+0x10f/0x159
[ 682.202504] ? __might_sleep+0x93/0xb0
[ 682.202522] __alloc_pages_nodemask+0x1d6/0x7a0
[ 682.202531] ? retint_kernel+0x2d/0x2d
[ 682.202546] ? __alloc_pages_slowpath+0x2930/0x2930
[ 682.202557] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 682.202573] ? retint_kernel+0x2d/0x2d
[ 682.202589] alloc_pages_current+0xec/0x1e0
[ 682.202605] __get_free_pages+0xf/0x40
[ 682.202616] get_zeroed_page+0x11/0x20
[ 682.202627] get_image_page+0x1c/0x140
[ 682.202641] alloc_rtree_node+0x41/0xa0
[ 682.202655] memory_bm_create+0x3bf/0x530
[ 682.202682] create_basic_memory_bitmaps+0x94/0x130
[ 682.202697] snapshot_open+0x378/0x400
[ 682.202708] ? snapshot_release+0x230/0x230
[ 682.202721] ? snapshot_release+0x230/0x230
[ 682.202735] misc_open+0x34f/0x480
[ 682.202749] ? misc_devnode+0x130/0x130
[ 682.202760] chrdev_open+0x207/0x590
[ 682.202774] ? cdev_put.part.0+0x50/0x50
[ 682.202788] ? security_file_open+0x89/0x190
[ 682.202802] do_dentry_open+0x73b/0xeb0
[ 682.202816] ? cdev_put.part.0+0x50/0x50
[ 682.202834] vfs_open+0x105/0x220
[ 682.202848] path_openat+0x8bd/0x3f70
[ 682.202857] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.202872] ? trace_hardirqs_on+0x10/0x10
[ 682.202895] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 682.202904] ? __lock_is_held+0xb6/0x140
[ 682.202916] ? save_trace+0x290/0x290
[ 682.202932] ? __alloc_fd+0x1d4/0x4a0
[ 682.202946] do_filp_open+0x18e/0x250
[ 682.202956] ? __alloc_fd+0x1d4/0x4a0
[ 682.202967] ? may_open_dev+0xe0/0xe0
[ 682.202989] ? do_raw_spin_unlock+0x174/0x260
[ 682.203000] ? _raw_spin_unlock+0x2d/0x50
[ 682.203011] ? __alloc_fd+0x1d4/0x4a0
[ 682.203036] do_sys_open+0x2c5/0x430
[ 682.203051] ? filp_open+0x70/0x70
[ 682.203080] SyS_openat+0x30/0x40
[ 682.203091] ? SyS_open+0x40/0x40
[ 682.203104] do_syscall_64+0x1e8/0x640
[ 682.203116] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 682.203136] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.203146] RIP: 0033:0x45b349
[ 682.203152] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 682.203166] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 682.203173] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 682.203181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
02:59:04 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x82800)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = msgget(0x3, 0x8de5e447c4e03e58)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0)
msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/39)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xfffa, 0x40, 0x3, 0x5}, {0x1ff, 0x81, 0x43, 0x6}, {0x0, 0x2f, 0x2, 0xfffffffe}]})
msgctl$MSG_STAT(r1, 0xb, &(0x7f00000004c0)=""/148)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/121)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x41}, 0x587}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e23, 0x5, @rand_addr="33b7a7a31b445767495004289be19b7d"}, @in6={0xa, 0x4e20, 0x803, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x1f, @ipv4={[], [], @empty}, 0x9}, @in6={0xa, 0x4e22, 0x80000001, @mcast2, 0x6a14556f}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xdc)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000001c0))
02:59:04 executing program 5:
syz_open_dev$tty20(0xc, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008054}, 0x200404d5)
write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
connect(r6, &(0x7f00000000c0)=@in={0x2, 0x4e21, @remote}, 0x80)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x8}, 0x10)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000002a80)={0xf000000, 0x0, 0x7, <r16=>r15, 0x0, &(0x7f0000002a40)={0x9f0901, 0x100, [], @ptr=0x8}})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f0000002ac0), 0x46)
sendto$inet(r9, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x1)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="cba5a14fba5500949feb31aabccb13ad6c17a34b788827f76ee4b95e6a7e243f243cb16cc106fc57479b3b2f9d9105fe987ce69faa1d54fa613212fc91e199e2cf0376c7836536da7a26645d6a5decc30b6e6762e9a34fe99356812be30653f01b0f1d347deef486ba6a272726a06f7b0572c33a8d428093eef81f0216338c0e50c793d0a413047cddba07c153b1f393a4b6ae4ab07c88ecd2747b9be52b00f3ac1b2f83fd86b818a447f2783cfd2f2b3a7ffe8e912e78a0ea2d2a941b107ef7d491c1262533aebb09b4dc102f069753e6979e8884fe3234563923487fd13a7f62b78613857436fc892d51b077c0374afc5a21abe8196780910933f2e45aff46b0f3e051c3b470141f0004ebe7f0d18ed8c34fc2f08fb15f35270ebadb846ef7c8cba0759792f78da5657979006d6541081169f2487c61fc", @ANYRES32=0x0, @ANYRES32=<r17=>0x0], &(0x7f0000a8a000)=0xfdcf)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x70, &(0x7f000059aff8)={r17}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x0, 0x4, 0x7fffffff, 0xcc6b, 0xffffff81, 0x20, 0x0, r17}, 0x20)
r18 = dup(r5)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r18, 0x4010ae74, &(0x7f0000000380)={0x1, 0x1f, 0x7fff})
add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0)
[ 682.203188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 682.203195] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000043
[ 682.279131] FAULT_INJECTION: forcing a failure.
[ 682.279131] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 682.279146] CPU: 1 PID: 18878 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 682.279153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 682.279157] Call Trace:
[ 682.279175] dump_stack+0x142/0x197
[ 682.279192] should_fail.cold+0x10f/0x159
[ 682.279203] ? __might_sleep+0x93/0xb0
[ 682.279219] __alloc_pages_nodemask+0x1d6/0x7a0
[ 682.279237] ? __alloc_pages_slowpath+0x2930/0x2930
[ 682.279254] ? __lock_is_held+0xb6/0x140
[ 682.279264] ? check_preemption_disabled+0x3c/0x250
[ 682.279281] alloc_pages_current+0xec/0x1e0
[ 682.279296] __get_free_pages+0xf/0x40
[ 682.279306] get_zeroed_page+0x11/0x20
[ 682.279317] get_image_page+0x1c/0x140
[ 682.279330] alloc_rtree_node+0x41/0xa0
[ 682.279343] memory_bm_create+0x3bf/0x530
[ 682.279366] create_basic_memory_bitmaps+0x94/0x130
[ 682.279380] snapshot_open+0x378/0x400
[ 682.279390] ? snapshot_release+0x230/0x230
[ 682.279402] ? snapshot_release+0x230/0x230
[ 682.279415] misc_open+0x34f/0x480
[ 682.279428] ? misc_devnode+0x130/0x130
[ 682.279438] chrdev_open+0x207/0x590
[ 682.279451] ? cdev_put.part.0+0x50/0x50
[ 682.279464] ? security_file_open+0x89/0x190
[ 682.279479] do_dentry_open+0x73b/0xeb0
[ 682.279491] ? cdev_put.part.0+0x50/0x50
[ 682.279507] vfs_open+0x105/0x220
[ 682.279521] path_openat+0x8bd/0x3f70
[ 682.279532] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.279546] ? trace_hardirqs_on+0x10/0x10
[ 682.279568] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 682.279576] ? __lock_is_held+0xb6/0x140
[ 682.279587] ? save_trace+0x290/0x290
[ 682.279602] ? __alloc_fd+0x1d4/0x4a0
[ 682.279614] do_filp_open+0x18e/0x250
[ 682.279623] ? __alloc_fd+0x1d4/0x4a0
[ 682.279633] ? may_open_dev+0xe0/0xe0
[ 682.279654] ? do_raw_spin_unlock+0x174/0x260
[ 682.279665] ? _raw_spin_unlock+0x2d/0x50
[ 682.279675] ? __alloc_fd+0x1d4/0x4a0
[ 682.279700] do_sys_open+0x2c5/0x430
[ 682.279714] ? filp_open+0x70/0x70
[ 682.279734] SyS_openat+0x30/0x40
[ 682.279743] ? SyS_open+0x40/0x40
[ 682.279756] do_syscall_64+0x1e8/0x640
[ 682.279766] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 682.279783] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.279791] RIP: 0033:0x45b349
[ 682.279797] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 682.279809] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 682.279815] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 682.279821] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 682.279826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 682.279833] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000044
[ 682.355834] FAULT_INJECTION: forcing a failure.
[ 682.355834] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 682.355849] CPU: 1 PID: 18881 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 682.355858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 682.355862] Call Trace:
[ 682.355883] dump_stack+0x142/0x197
[ 682.355908] should_fail.cold+0x10f/0x159
[ 682.355919] ? __might_sleep+0x93/0xb0
[ 682.355936] __alloc_pages_nodemask+0x1d6/0x7a0
[ 682.355951] ? __alloc_pages_slowpath+0x2930/0x2930
[ 682.355970] ? __lock_is_held+0xb6/0x140
[ 682.355980] ? check_preemption_disabled+0x3c/0x250
[ 682.355996] alloc_pages_current+0xec/0x1e0
[ 682.356013] __get_free_pages+0xf/0x40
[ 682.356023] get_zeroed_page+0x11/0x20
[ 682.356043] get_image_page+0x1c/0x140
[ 682.356059] alloc_rtree_node+0x41/0xa0
[ 682.356073] memory_bm_create+0x3bf/0x530
[ 682.356097] create_basic_memory_bitmaps+0x94/0x130
[ 682.356111] snapshot_open+0x378/0x400
[ 682.356123] ? snapshot_release+0x230/0x230
[ 682.356133] ? snapshot_release+0x230/0x230
[ 682.356146] misc_open+0x34f/0x480
[ 682.356159] ? misc_devnode+0x130/0x130
[ 682.356170] chrdev_open+0x207/0x590
[ 682.356183] ? cdev_put.part.0+0x50/0x50
[ 682.356197] ? security_file_open+0x89/0x190
[ 682.356210] do_dentry_open+0x73b/0xeb0
[ 682.356223] ? cdev_put.part.0+0x50/0x50
[ 682.356240] vfs_open+0x105/0x220
[ 682.356254] path_openat+0x8bd/0x3f70
[ 682.356263] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.356278] ? trace_hardirqs_on+0x10/0x10
[ 682.356299] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 682.356307] ? __lock_is_held+0xb6/0x140
[ 682.356319] ? save_trace+0x290/0x290
[ 682.356334] ? __alloc_fd+0x1d4/0x4a0
[ 682.356347] do_filp_open+0x18e/0x250
[ 682.356356] ? __alloc_fd+0x1d4/0x4a0
[ 682.356367] ? may_open_dev+0xe0/0xe0
[ 682.356387] ? do_raw_spin_unlock+0x174/0x260
[ 682.356399] ? _raw_spin_unlock+0x2d/0x50
[ 682.356409] ? __alloc_fd+0x1d4/0x4a0
[ 682.356433] do_sys_open+0x2c5/0x430
[ 682.356447] ? filp_open+0x70/0x70
[ 682.356468] SyS_openat+0x30/0x40
[ 682.356477] ? SyS_open+0x40/0x40
[ 682.356490] do_syscall_64+0x1e8/0x640
[ 682.356501] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 682.356518] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.356526] RIP: 0033:0x45b349
[ 682.356532] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 682.356544] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 682.356551] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 682.356557] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 682.356563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 682.356569] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000045
[ 682.437608] FAULT_INJECTION: forcing a failure.
[ 682.437608] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 682.437622] CPU: 1 PID: 18883 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 682.437629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 682.437633] Call Trace:
[ 682.437651] dump_stack+0x142/0x197
[ 682.437669] should_fail.cold+0x10f/0x159
[ 682.437681] ? __might_sleep+0x93/0xb0
[ 682.437697] __alloc_pages_nodemask+0x1d6/0x7a0
[ 682.437718] ? __alloc_pages_slowpath+0x2930/0x2930
[ 682.437735] ? __lock_is_held+0xb6/0x140
[ 682.437746] ? check_preemption_disabled+0x3c/0x250
[ 682.437764] alloc_pages_current+0xec/0x1e0
[ 682.437779] __get_free_pages+0xf/0x40
[ 682.437789] get_zeroed_page+0x11/0x20
[ 682.437799] get_image_page+0x1c/0x140
[ 682.437812] alloc_rtree_node+0x41/0xa0
[ 682.437824] memory_bm_create+0x3bf/0x530
[ 682.437848] create_basic_memory_bitmaps+0x94/0x130
[ 682.437860] snapshot_open+0x378/0x400
[ 682.437870] ? snapshot_release+0x230/0x230
[ 682.437881] ? snapshot_release+0x230/0x230
[ 682.437894] misc_open+0x34f/0x480
[ 682.437907] ? misc_devnode+0x130/0x130
[ 682.437916] chrdev_open+0x207/0x590
[ 682.437928] ? cdev_put.part.0+0x50/0x50
[ 682.437941] ? security_file_open+0x89/0x190
[ 682.437954] do_dentry_open+0x73b/0xeb0
[ 682.437966] ? cdev_put.part.0+0x50/0x50
[ 682.437982] vfs_open+0x105/0x220
[ 682.437996] path_openat+0x8bd/0x3f70
[ 682.438006] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.438020] ? trace_hardirqs_on+0x10/0x10
[ 682.438047] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 682.438057] ? __lock_is_held+0xb6/0x140
[ 682.438071] ? save_trace+0x290/0x290
[ 682.438088] ? __alloc_fd+0x1d4/0x4a0
[ 682.438100] do_filp_open+0x18e/0x250
[ 682.438110] ? __alloc_fd+0x1d4/0x4a0
[ 682.438119] ? may_open_dev+0xe0/0xe0
[ 682.438137] ? do_raw_spin_unlock+0x174/0x260
[ 682.438147] ? _raw_spin_unlock+0x2d/0x50
[ 682.438158] ? __alloc_fd+0x1d4/0x4a0
[ 682.438179] do_sys_open+0x2c5/0x430
[ 682.438193] ? filp_open+0x70/0x70
[ 682.438212] SyS_openat+0x30/0x40
[ 682.438221] ? SyS_open+0x40/0x40
[ 682.438234] do_syscall_64+0x1e8/0x640
[ 682.438243] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 682.438259] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.438267] RIP: 0033:0x45b349
[ 682.438273] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 682.438284] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 682.438291] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 682.438297] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 682.438304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 682.438311] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000046
[ 682.517152] FAULT_INJECTION: forcing a failure.
[ 682.517152] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 682.517168] CPU: 1 PID: 18885 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 682.517175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 682.517181] Call Trace:
[ 682.517198] dump_stack+0x142/0x197
[ 682.517216] should_fail.cold+0x10f/0x159
[ 682.517228] ? __might_sleep+0x93/0xb0
[ 682.517245] __alloc_pages_nodemask+0x1d6/0x7a0
[ 682.517261] ? __alloc_pages_slowpath+0x2930/0x2930
[ 682.517278] ? __lock_is_held+0xb6/0x140
[ 682.517287] ? check_preemption_disabled+0x3c/0x250
[ 682.517303] alloc_pages_current+0xec/0x1e0
[ 682.517318] __get_free_pages+0xf/0x40
[ 682.517328] get_zeroed_page+0x11/0x20
[ 682.517339] get_image_page+0x1c/0x140
[ 682.517352] alloc_rtree_node+0x41/0xa0
[ 682.517365] memory_bm_create+0x3bf/0x530
[ 682.517390] create_basic_memory_bitmaps+0x94/0x130
[ 682.517404] snapshot_open+0x378/0x400
[ 682.517414] ? snapshot_release+0x230/0x230
[ 682.517426] ? snapshot_release+0x230/0x230
[ 682.517440] misc_open+0x34f/0x480
[ 682.517452] ? misc_devnode+0x130/0x130
[ 682.517462] chrdev_open+0x207/0x590
[ 682.517475] ? cdev_put.part.0+0x50/0x50
[ 682.517494] ? security_file_open+0x89/0x190
[ 682.517511] do_dentry_open+0x73b/0xeb0
[ 682.517525] ? cdev_put.part.0+0x50/0x50
[ 682.517542] vfs_open+0x105/0x220
[ 682.517559] path_openat+0x8bd/0x3f70
[ 682.517569] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.517583] ? trace_hardirqs_on+0x10/0x10
[ 682.517605] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 682.517613] ? __lock_is_held+0xb6/0x140
[ 682.517625] ? save_trace+0x290/0x290
[ 682.517638] ? __alloc_fd+0x1d4/0x4a0
[ 682.517651] do_filp_open+0x18e/0x250
[ 682.517660] ? __alloc_fd+0x1d4/0x4a0
[ 682.517671] ? may_open_dev+0xe0/0xe0
[ 682.517690] ? do_raw_spin_unlock+0x174/0x260
[ 682.517701] ? _raw_spin_unlock+0x2d/0x50
[ 682.517711] ? __alloc_fd+0x1d4/0x4a0
[ 682.517736] do_sys_open+0x2c5/0x430
[ 682.517748] ? filp_open+0x70/0x70
[ 682.517766] SyS_openat+0x30/0x40
[ 682.517774] ? SyS_open+0x40/0x40
[ 682.517786] do_syscall_64+0x1e8/0x640
[ 682.517796] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 682.517812] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.517820] RIP: 0033:0x45b349
[ 682.517825] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 682.517836] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 682.517842] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 682.517848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 682.517853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 682.517859] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000047
[ 682.606333] FAULT_INJECTION: forcing a failure.
[ 682.606333] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 682.606349] CPU: 1 PID: 18887 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 682.606356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 682.606360] Call Trace:
[ 682.606382] dump_stack+0x142/0x197
[ 682.606401] should_fail.cold+0x10f/0x159
[ 682.606412] ? __might_sleep+0x93/0xb0
[ 682.606428] __alloc_pages_nodemask+0x1d6/0x7a0
[ 682.606443] ? __alloc_pages_slowpath+0x2930/0x2930
[ 682.606452] ? retint_kernel+0x2d/0x2d
[ 682.606467] ? preempt_schedule_notrace+0xa0/0x130
[ 682.606484] alloc_pages_current+0xec/0x1e0
[ 682.606500] __get_free_pages+0xf/0x40
[ 682.606510] get_zeroed_page+0x11/0x20
[ 682.606521] get_image_page+0x1c/0x140
[ 682.606543] alloc_rtree_node+0x41/0xa0
[ 682.606559] memory_bm_create+0x3bf/0x530
[ 682.606586] create_basic_memory_bitmaps+0x94/0x130
[ 682.606600] snapshot_open+0x378/0x400
[ 682.606611] ? snapshot_release+0x230/0x230
[ 682.606624] ? snapshot_release+0x230/0x230
[ 682.606638] misc_open+0x34f/0x480
[ 682.606651] ? misc_devnode+0x130/0x130
[ 682.606661] chrdev_open+0x207/0x590
[ 682.606674] ? cdev_put.part.0+0x50/0x50
[ 682.606687] ? security_file_open+0x89/0x190
[ 682.606702] do_dentry_open+0x73b/0xeb0
[ 682.606715] ? cdev_put.part.0+0x50/0x50
[ 682.606731] vfs_open+0x105/0x220
[ 682.606746] path_openat+0x8bd/0x3f70
[ 682.606755] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.606769] ? trace_hardirqs_on+0x10/0x10
[ 682.606790] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 682.606800] ? __lock_is_held+0xb6/0x140
[ 682.606811] ? save_trace+0x290/0x290
[ 682.606825] ? __alloc_fd+0x1d4/0x4a0
[ 682.606838] do_filp_open+0x18e/0x250
[ 682.606848] ? __alloc_fd+0x1d4/0x4a0
[ 682.606859] ? may_open_dev+0xe0/0xe0
[ 682.606880] ? do_raw_spin_unlock+0x174/0x260
[ 682.606891] ? _raw_spin_unlock+0x2d/0x50
[ 682.606902] ? __alloc_fd+0x1d4/0x4a0
[ 682.606926] do_sys_open+0x2c5/0x430
[ 682.606940] ? filp_open+0x70/0x70
[ 682.606960] SyS_openat+0x30/0x40
[ 682.606970] ? SyS_open+0x40/0x40
[ 682.606983] do_syscall_64+0x1e8/0x640
[ 682.606993] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 682.607009] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 682.607023] RIP: 0033:0x45b349
[ 682.607031] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 682.607043] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 682.607050] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 682.607057] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 682.607065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 682.607071] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000048
[ 682.719229] FAULT_INJECTION: forcing a failure.
[ 682.719229] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 684.434004] CPU: 1 PID: 18890 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0
[ 684.441933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 684.451292] Call Trace:
[ 684.453885] dump_stack+0x142/0x197
[ 684.457499] should_fail.cold+0x10f/0x159
[ 684.461647] ? __might_sleep+0x93/0xb0
[ 684.465627] __alloc_pages_nodemask+0x1d6/0x7a0
[ 684.470342] ? __alloc_pages_slowpath+0x2930/0x2930
[ 684.475412] ? __lock_is_held+0xb6/0x140
[ 684.479472] ? check_preemption_disabled+0x3c/0x250
[ 684.484483] alloc_pages_current+0xec/0x1e0
[ 684.488800] __get_free_pages+0xf/0x40
[ 684.492699] get_zeroed_page+0x11/0x20
[ 684.496602] get_image_page+0x1c/0x140
[ 684.500493] alloc_rtree_node+0x41/0xa0
[ 684.504457] memory_bm_create+0x3bf/0x530
[ 684.508613] create_basic_memory_bitmaps+0x94/0x130
[ 684.513627] snapshot_open+0x378/0x400
[ 684.517627] ? snapshot_release+0x230/0x230
[ 684.522061] ? snapshot_release+0x230/0x230
[ 684.526373] misc_open+0x34f/0x480
[ 684.529917] ? misc_devnode+0x130/0x130
[ 684.533898] chrdev_open+0x207/0x590
[ 684.537612] ? cdev_put.part.0+0x50/0x50
[ 684.541706] ? security_file_open+0x89/0x190
[ 684.546104] do_dentry_open+0x73b/0xeb0
[ 684.550101] ? cdev_put.part.0+0x50/0x50
[ 684.554212] vfs_open+0x105/0x220
[ 684.557653] path_openat+0x8bd/0x3f70
[ 684.561445] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 684.566875] ? path_lookupat.isra.0+0x7b0/0x7b0
[ 684.571540] ? __lock_is_held+0xb6/0x140
[ 684.575595] ? save_trace+0x290/0x290
[ 684.579387] ? __alloc_fd+0x1d4/0x4a0
[ 684.583224] do_filp_open+0x18e/0x250
[ 684.587022] ? __alloc_fd+0x1d4/0x4a0
[ 684.590807] ? may_open_dev+0xe0/0xe0
[ 684.594596] ? do_raw_spin_unlock+0x174/0x260
[ 684.599074] ? _raw_spin_unlock+0x2d/0x50
[ 684.603261] ? __alloc_fd+0x1d4/0x4a0
[ 684.607056] do_sys_open+0x2c5/0x430
[ 684.610756] ? filp_open+0x70/0x70
[ 684.614288] SyS_openat+0x30/0x40
[ 684.617753] ? SyS_open+0x40/0x40
[ 684.621196] do_syscall_64+0x1e8/0x640
[ 684.625068] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 684.629919] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 684.635094] RIP: 0033:0x45b349
[ 684.638268] RSP: 002b:00007fe5cb704c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 684.645973] RAX: ffffffffffffffda RBX: 00007fe5cb7056d4 RCX: 000000000045b349
[ 684.653236] RDX: 0000000000004101 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 684.660490] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 684.667745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 684.674998] R13: 00000000000007be R14: 00000000004c92f7 R15: 0000000000000049
02:59:05 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_FONTX(r0, 0x4b6b, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000280)={0x9, 0x400})
r8 = socket(0x400020000000010, 0x2, 0x0)
dup2(r4, r8)
r9 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x2, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='K\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000827bd7000fbdbd82501002000000000000141000100230c4b0000000b00008b45b414f1d612007d7e0f9a657b"], 0x34}, 0x1, 0x0, 0x0, 0x8085}, 0x841)
r10 = syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800802}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000004951ca49df78cc20ab5eb91cfd2a227d9fb6821d8eb33fb8f2716fdf802cad0b834edccae0d26084df21a61f9d6fcd0d2eeaaed5a67957c867a462f98940dfe65ac66aa0790c4b7b42798d047621aeb41a41cce4c1fd54a4cf00cb2fe3d1c9efe34a84e5df22d520d519f03ec086d9f5592c519d31ff51e006b1a65b58121f9e9df194a08bdf266463bf363332c1e8ea417fc5f28a6258978b70eda8fb4eb272540b26472070831223cd7157ad662b2204658ea1252a58a9b3038b5f9a9b26d", @ANYRES16=r10, @ANYBLOB="040000000000fbdbdf250200000014000900ff0200000000000000000000000000011400090000000000000000000000ffffffffffff05000200000000000400050008000600ac1414aa06000a004e20000008000800ac1414bb04000500"], 0x64}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0xf0}, 0x0)
add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="4c8cb7d747ed887de7347675dbe6af4211790a893fac047e2477c66527ace8", 0x1f, 0xfffffffffffffffe)
02:59:05 executing program 2:
shutdown(0xffffffffffffffff, 0x1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)={<r9=>0x0, 0x80000, r6})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r9, 0x0, r10})
02:59:05 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xa10000, 0x2ac, 0x8a1, <r1=>r0, 0x0, &(0x7f0000000100)={0x9b0960, 0x1ff, [], @value=0x9}})
listen(r1, 0xefc3)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {r2, r3/1000+10000}}, &(0x7f00000000c0))
02:59:05 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x3, 0x3, 0x5, 0x0, 0x0, {0x9294c14407c7656, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x95}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x200}}, @NFQA_MARK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r3, 0xc0386106, &(0x7f0000000040))
02:59:05 executing program 5:
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000200))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000580)=""/269)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x100901, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000740)="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", 0xa2f}], 0x1)
r4 = socket$inet6(0xa, 0x80003, 0x3)
dup2(r4, r3)
02:59:05 executing program 4:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x100, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:05 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x6, 0x1, 0x4, 0x20000000, 0x66d, {0x0, 0x2710}, {0x1, 0x0, 0x9c, 0x7, 0x4, 0x8, "907d1f1b"}, 0x2, 0x3, @planes=&(0x7f0000000080)={0x97, 0x81, @fd=r2, 0x5}})
02:59:05 executing program 2:
write$snddsp(0xffffffffffffffff, &(0x7f0000000000)="38177e25", 0x4)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
02:59:06 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
getdents(r1, &(0x7f0000000040)=""/4096, 0x1000)
02:59:06 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf000000, 0x6, 0x3, <r1=>r0, 0x0, &(0x7f0000000040)={0x9e0902, 0x401, [], @p_u32=&(0x7f0000000000)=0x2}})
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00')
shutdown(r0, 0x0)
02:59:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
r3 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x10000110)
inotify_rm_watch(0xffffffffffffffff, r3)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18)
ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000100))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:06 executing program 2:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
alarm(0x6b)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/130, 0x82})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r3, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10200, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100, 0x1})
02:59:06 executing program 1:
getpid()
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
dup3(r1, r2, 0x0)
dup2(r0, r3)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r10=>0x0, &(0x7f0000000080)=0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={r10, 0x4}, 0xc)
02:59:06 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x0)
shutdown(r0, 0x0)
02:59:06 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xb3, 0x10002)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3, 0x13, r3, 0x81000000)
02:59:06 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0xc0}, 0x14}}, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)=""/255, &(0x7f00000001c0)=0xff)
ioctl$IOC_PR_PREEMPT(r2, 0xc0386106, &(0x7f0000000040))
02:59:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x500}}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x140500, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'team0\x00', @broadcast})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x121000, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000040)=""/61, &(0x7f0000000080)=0x3d)
02:59:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000029c0), 0x1d}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
recvmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f00000000c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/83, 0x53}, {&(0x7f00000011c0)=""/3, 0x3}], 0x3, &(0x7f0000001240)=""/51, 0x33}, 0x9}, {{&(0x7f0000001280)=@sco, 0x80, &(0x7f0000001580)=[{&(0x7f0000001300)=""/90, 0x5a}, {&(0x7f0000001380)=""/252, 0xfc}, {&(0x7f0000001480)=""/235, 0xeb}], 0x3, &(0x7f00000015c0)=""/247, 0xf7}, 0x4}, {{&(0x7f00000016c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001740)=""/104, 0x68}, {&(0x7f00000017c0)=""/254, 0xfe}, {&(0x7f00000018c0)}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x4}, 0x7}, {{&(0x7f0000002940)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000002a00)=""/198, 0xc6}], 0x2, &(0x7f0000002b40)=""/44, 0x2c}, 0xc175}, {{&(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/128, 0x80}], 0x2, &(0x7f0000002d00)=""/14, 0xe}, 0x4}], 0x5, 0x40000000, &(0x7f0000002e80)={0x0, 0x1c9c380})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002ec0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xd0, 0xd0, 0x0, 0x0, 0xd0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x4, &(0x7f0000002c00), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x9, 0xd, [0x18, 0x1b, 0x3d, 0x17, 0x1b, 0x33, 0x14, 0x19, 0x35, 0x1, 0x2a, 0xe, 0x33, 0x9, 0x6, 0x26], 0x1, 0xfff, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'sit0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xd8ccdfc2e205a839, 0x1, 0x20}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x4, 0x0, 0x1}}, @common=@unspec=@connbytes={{0x38, 'connbytes\x00'}, {[{0x3f}, {0x7ff}], 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x6}, {0x2, 0x2, 0x3}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x3}}, @common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x0, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
02:59:06 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4d4182, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{&(0x7f0000001740)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000017c0)=""/221, 0xdd}, {&(0x7f00000018c0)=""/80, 0x50}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000001940)=""/44, 0x2c}, {&(0x7f0000001980)=""/198, 0xc6}, {&(0x7f0000001a80)=""/178, 0xb2}], 0x6}, 0x7}, {{0xfffffffffffffffe, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/223, 0xdf}], 0x2, &(0x7f0000001d40)=""/88, 0x58}, 0x1}, {{&(0x7f0000001dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)=""/13, 0xd}], 0x1, &(0x7f0000001ec0)=""/230, 0xe6}, 0x6}, {{&(0x7f0000004040)=@nl=@proc, 0x80, &(0x7f0000004300)=[{&(0x7f00000040c0)=""/211, 0xd3}, {&(0x7f00000041c0)=""/78, 0x4e}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/128, 0x80}], 0x4, &(0x7f0000004340)=""/11, 0xb}, 0x1}, {{&(0x7f0000004380)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004400), 0x0, &(0x7f0000004440)=""/1, 0x1}, 0x7}, {{&(0x7f0000004480)=@nfc_llcp, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004500)=""/75, 0x4b}, {&(0x7f0000004580)=""/2, 0x2}], 0x2, &(0x7f0000004600)=""/32, 0x20}, 0xff}, {{&(0x7f0000004640)=@un=@abs, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000046c0)=""/254, 0xfe}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)}, {&(0x7f0000005800)}, {&(0x7f0000005840)=""/154, 0x9a}, {&(0x7f0000005900)=""/17, 0x11}, {&(0x7f0000005940)=""/41, 0x29}, {&(0x7f0000005980)=""/82, 0x52}, {&(0x7f0000005a00)}, {&(0x7f0000005a40)=""/66, 0x42}], 0xa, &(0x7f0000005b80)=""/248, 0xf8}, 0xffffff81}, {{0x0, 0x0, &(0x7f0000006200)=[{&(0x7f0000005c80)=""/169, 0xa9}, {&(0x7f0000005d40)=""/98, 0x62}, {&(0x7f0000005dc0)=""/46, 0x2e}, {&(0x7f0000005e00)=""/2, 0x2}, {&(0x7f0000005e40)=""/149, 0x95}, {&(0x7f0000005f00)=""/182, 0xb6}, {&(0x7f0000005fc0)=""/149, 0x95}, {&(0x7f0000006080)=""/221, 0xdd}, {&(0x7f0000006180)=""/111, 0x6f}], 0x9, &(0x7f00000062c0)=""/195, 0xc3}, 0x6}], 0x8, 0x21, &(0x7f00000065c0)={0x77359400})
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000006600)=r3)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x76, &(0x7f0000000800)={r9}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x20, 0x9, 0x2, 0x6abe, 0x0, 0xfffffffa, 0xbc}, &(0x7f0000000180)=0x9c)
02:59:06 executing program 2:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
write$UHID_INPUT(r0, &(0x7f0000000000)={0x8, {"846eec1f07d191e0b474e5b9a87230e10ea50244cb4b809bb2f0f586db8631858ebe59dea45b0df6e0acafd61fade176d40b7c91e5f269bee316ef2838470d7d1327fc21071a5690033f7414a76efd27ba0d4f22be5618869c1f3926ebec4ecc0cafb2fa19753e19289c9eaa2adfb48d68712623ab5b29d2718b18ea98cbdd5bdf95d5f7b53e59c8a7aa388d17a1229a51f2875edc244245ad0f94aa8254d57f19e4825b3bc3b668cf7e822c3281ecd7cdaf4dd3491c0c0c39df9ac303639f41290701b52fe9b5a5cc4400ca558e7590c2961db28587e9965b38068585bf14385706688ccc51a464bffa6fc0ebae85e294bdb859fb4664c752e882b42db096f2a6df536169f0c7c8e435eee0bcff8487bd90c1b9dca7b281dbd75ac75eacb39ce2d3016b73447ec0ea3a53311ad62a1fce1ae0e22a9758261f4d7eb081aac3e86a1133fd46ddfa082524dc1bb37537f707e4aa67b22795ec324280f1648aaffcab9cfe6dcf43a13b7fdb20d1e7b1e0b2a0000c15bf25b9d2f6f2e614953b705f6e35dbde05c5b9b37383d9f84721dee89f3421743686e5b2aea10b4fca6b4dd9cc0c8b2e9cdd6127afe7e5ae583124269a044f6eee784488bc3428139cd0d49e422bd3b12626b021c454785903671b2ab08fec0590d97d4e961334619cbdff438f48fb435c723f2da386ad51fa30f979c2588fc235e3a53a078773549fd64e4c58a7d4cfb0bc45dae44e43a888107bfcd363b61234dec8df09dab7165aed0c8d6aba068dbdb69dc9799ec1a5a413e4209addc780c0af3d57982cf032e24cce1e9cc5519b7d77791c0760aa12ff3e4a81c627f6be4751c2165b87832f60e6c4bb65f303b1394308496118fc2864956cbea1ade1c9b84fdf532b7462fb5819366e71fadfb170cc1c997fa5c906c277b1446aeac6c0d16e839dca62ab123f559ef1109c56288f8d17e8f122b5b3bec89308e61b2e4a85b564fe47e90ed09ba6fe30d64dff68e32c916d245bdf52f2505e3c0f684e7f0c4ff821acdd3e1124e1c2fbc08586a144e9a125f8cea04c03bf58503617a7d8689fb8ec3d37312fa6d0af135e45b3cb85ec4c75b989b4a5d68bae1cfca67a1eebbcc87fb97f12470c2752a503d519e5fbe984942309a50ca5cf7ecf24886c8c15a74df90280234765b94b3b26036993d26413fd5208ecdce1682e63dc551f4ce1e13fcc058a14d7c39631f06019895faf0e19a74c4967402fe56d814c27ace059ecc4e421bbdf5ad517324e91a218540e3710c98d7ea67cd28238058951dc0a48c9f33ce7fd554bb0865f1c569de80c9ecc77a9c1a67e5e88774ca6d5ba04085024794a2b71141a3d6dc43ea4e588fd8e26f0e3d967baf6827b589e31e263be8e9cff88600a70758e62afcc72eb475344c6036ca486d5863303ca6230e2fabd28299b4fc6041e6bb85198245dc24544b5cac768d423e68961caf64a18adb3a243ca7408aae19d5075aa2af047d057a0449bde8dd332d816ae27520334f0daaabe79371aa7586b41caa4130e171fcbc9fe54d4f07fafd21e775f330e93b6c59f76789f1b84c55c8bb32fb5870ab124d00927bb241a49339ce83e920554172bbe3e78ed23810360c12d3b72d83c53b56a97f7b63e82e361836db937cc2c5823d8044b8ea8f57eb188c8a1a1d5cbdaed5981c2e5fa9c91105589fb0725444c5c2f5e60e2d23045d5df454d33b299d96c3e4c596dda62279a78b0aa2b66ec86ae404d6d7a1b583c63120fb9eac9981094d38baa367e2e291032ec40a719b738ac18c2c863cecf509815dbd2f4daff860b894a40128d727cb8dc334b597f3f8c0dcbf919c80e51e3f481305ffacd98171597ced53799638a348fa1d4e73a59964f64f03dbd8b6b1243fdf870221389bb921e93609e30e847a46e0022f54925bef73469b7411227b1df78ee2772915347814b8cc2ed59a4396a3217614bb12d85cf0f8cd2a674a32d903fc43ae496da6dfc26a7c20c112c260f0591ac0a9661a8dfcb11e4f0b8bfa62ac63db9f45ed096ecf63d1749e1b0e25b92f0f7047e2aeb27cf3bc18eea85b169d3ebbbeb673eceac0c3e78072f1c988504c4b3cf7fd946bac62a103d8e9642827090e2f8bd0804dbbd785e37089afeb9359548be731b751adc9c7ee61d7c8474c1b84b5cfdb7a0454ae53a7225744daf218c2878ca95038e5badc48a3efe8696f64af88afe64c78a9bf1e9fda2760cda76fd88fd2bb0fbd6a433ce5e97a4d3ffc2f250a05925a1e9942bf4a9621141997600c2d352f58378bb482faf643507b25cbf9846530c6b02adfe311f16350e3a4042e5728a3e06e9c51500cb983a4289e0dd41529381852613ab6a607aa67c433e67163e1986b517bb9fdfddb4699768daaaa4ba22b62c72dd20e6d4706891c4a22570c788149536636edd32cda60d6d0ec2a57f0f2f4fbb31f6f6e5a933b84e51127ec0407e6a8cea842c9b89327d5ab340378b0bd28fb151bde14fc072f7c6f029c7af25152cdddf0807062c874c8781d7371e8a4e09cf9c9f827983af8ddafebcc071a14914d0a4aac80da26a4a2cf46ec0da12a30142dab41b9eed6599ff46a0755e76841308d8096c0555ded91ee92fe852963c44cf624e6a4d8cc1b506ec029a6a5892d1b9ac5c8fc278b2aa567548f59dd2d8000dc3fb5bbc22e0ede3e6a8191786df1936fcc6c73f70f929906a9f3db20aa2549eb89b4d9a2f226fd22ab4c47cac29d1ea165068f5cb8cea7a3baf892ac7d418d4ab1b3e10c6fc0e0568fc9feddfe1ad61dc9561f9fc21470ab2ca98011bcf95e1c2265c36d706104085700e57ad95ff5e47049d6b89d6c3f8128cf7149bad7b9134ad913dc7b04282eb5f4bcdecb4b15ac335ae990f669cbe03aa1e257fbb02221bf751e8b70ee2de7879dcb5487676d80a5d2d6cfe341861c5baa827b06ff5210e1cb2f7293bf04ff1a83d3fb4585dc76cebf2aa342fe8098f299833677a5fd081364074a054970fb432ee5c6e0b57216be03587c9113676bf385f9722f9d81c9fe6ceb437c662cbe39dc0bf32d6675cbb888699bba977e32ede32177b4e6ab528e5c369b67dd3a08ef39c69630579f8d186f9e53e032231c47b551da14d1365150bfaca070c26617afe82dc1f4a4dd41ddbcba245cdaf6bc50143f3fa4ae35a5f0db4782e0a5b874c973c234022b95af7c2f1f4711a90f11dc7c3a1d833bb1209b2641712051a025f29cb109b50c53731138a46a75e181c2c8f1a6e8419278f7aa9091e02a02b3fe37372a73a15f16590f82a1f8ec57cf1a11df9ebe59831a7cf0143d6a0b7826a73447be8a61afbe0a63ab73c29a695a39028334811440aae854e3bb21c2cf6d83357d8be4993583fd9883d6cfbecdb19e6eb5078ab78dbf4c0ed5ab93657eb35337fa900e137c97cc667f4711f81f35739a478d26334184211d62673ff55a8be83a33ca89c8f5642be94eb19478f9bbdcf774633a5a7d4dc473cd386a7f3090f345ee6aeb07307c0c2a4cd727db1639ba9709b55b51f5711cf7898ed8333b19513de18cad21381df21264d2572589bc6268a4a46c694c071f6445d2116e0ecbaa5e2436fcba91dd16372a830a4fc7f55b1e95392e5b42570536f245042b6648119cc7df94f327b0324dca2053f49aade0a7c758d76cff7b38ced2e02269f050262af74a680e4f679ab6c6cccad64b095f76b59169622ab308e37787fec6c298003dcf620fcc39ecde433e84a19b9eaf982517d58794bb673362b70f47bdecb5393c2a199ee2151e652ee5a59ed4fb8b0efdba75970d758d798795e1dad0fd1e4ff77e32d2bc1fb852e03815ba3e75e38e71cd7a323fb5fd779fe098b6ddf9e50f0bdd3b53ffcc940bd7dc39d97dd6ac94794f608a7888fa6a691590439df7d47386a30ce2c1c7b139955125396fa16df7345f594183dc9a9c5e58f03a246f82abac3f3ad4c408d92f8ef2a9b243912b036fb00e5bddf0f32dd5d3daf3dca5efa5434c573dd3388424b1e12691df12129825dbf7744338dda10d954d10f9bd1f775469fb5af302aee767ee19f1cb79023c925514dd93bf7002c10837fd2c7660fbfc27bf5675b5add43187e20de058956101d4a7a3a23531977ed52eaeb44f9ce6df4f8b76d6bb1476b614affb9f8d06c718cad863120c920e795c5fa1070b92cf56ac44e746cb7fe1250b688c442b3610d32bff571357081d369b69e8899bf918fc0da20377c3b3860b66b047749f8853b40367e2d1af1892e1736faf482139d48f194d7407004560d9a0378862d36b7ebb13d9402445e8de9c0c912a93eb99a82b0ee92246e80873db1fed7933e03c8a100f69854201cd5cecb75d18f2e48460f1ca9b058c49fd1d7aad0ba61a165086bef8a7a93354458bbe30b959dce8734089b27928bc613ae015efec62aab62f881c08d65496fa12033d39ff87f087236050c951df7f60d5a73d440277c521d18f8125461a98cccad4c6769c0d64286a3238d1799adb52777f51af292349623034ae2826f87651f3d349a63719fbffa321ce6322e6b289a758d5462725ec106b1974f815a71209c46368bcfa2f5eec3b63e0353bcb9100354b5bbb3d057739342e30d18546bedf07163d1abe6e3429d8b47dcd925a07e0043778870244aad330379f04b05ae99489dd06cb8b0875712352ecfde6955fdca8c906b1c6cf90776a0b75954128d8346f985463c6cb6318ef38675b535951d61d95292690caff9f790da05255038e86a466230af0a9adee89e739bbdb6970f48deadcd37a290b4adfb7afe303fd0546fd8939161a10c23d51cbb746dd9a5d7019a105d6fc33191b9a83105f153fc0629ebb8b0837df2da4d724cbe85329432ce18cb5ed187b2f76c0800e3055ccc3a9038514aeb022d058d9849ea97319fb25396bb15397f282fe2c3586e340c6a6229c68510d3353ac5d0c5731344e8b5cbfde05fb5acaea77e44d3d4887e8ee00c297a4107a69f1550410037dcc486c01c355cd3aed165dfb3af0f18f5630b46699ee8d83d83819504d9286d3d3ebf7166975aed86f57df23ab91f68eec54f9fc67f9ef64709a506b999066192798b8fc9bca7b0f14bb3b5afb6c934bcf4e35086a78ff0898c5e8ec29740816fdd65c13c3f78e066a93637d195d44fb02fbffbf59c319f77dfe1e0494e30ab699054ae50dcac899269f4df10eb761cb20dc2fac2accf65852efef17ad8c8c4dab54a179bd80195896be41e57e2b861d7381867d88a89fcd7f46e563a2c75a328769022dfe89196501116ad8ffd0f58d750e1a141d3866a5a0eb9889a65e8d0ee8b2b0378bd9c9ac5384f8858ddc9d7c874ed7482784a47c87582f02e216861ec222b4307841f943499da3538548ce3b94c4cebe05a69f636207024dae6cbf54a24cf33e0df2c3c3bafe2429bb57177ee97afdf0daccee6bd29ea6bb6f1f723bcaa7e5fa21b345aaa1760189afb7d1379e6e5797f3b1f785bd82ef6533bfea60ee2946151c91f1861aed60bc2c61030cc748cfe0ada0fe49916308e4907c3a42e1a85bdc5822c9dbbe3d9e857ea058a007c1ed7f44962f3c6fe1f266e0471ebd2e8a3e05b9bff61cf92def8e90ab2cee92bee3382e13b32459306c207f655541f8dcf27afb73857347984220435a673d46746e591b87c22f7f11d3983acb984c6b0f6b8a2dbe3e3d91e3f4b414397eec24188322d63764d1e432a29d5ca2a875dfa0820439a43a81950287a5d36224b6648ef65d33fd5698036c7e0c3d09d767aeaebfe3e76157f30b6489f079d3f3a2a578e32", 0x1000}}, 0x1006)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r3, 0x0)
02:59:06 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
socket$inet(0x2, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
r1 = syz_open_procfs(0x0, &(0x7f0000000640)='environ\x00')
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)
ioctl$BLKIOMIN(r1, 0x1278, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r3=>0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000100)='user\x00', r2}, 0x30)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0x3, 0x7f, 0xfffffffe, 0x3f47e01b, 0xb30, r3})
02:59:06 executing program 1:
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0)
02:59:06 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000))
shutdown(r0, 0x0)
[ 685.680310] selinux_nlmsg_perm: 6 callbacks suppressed
[ 685.680320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pig=19031 comm=syz-executor.3
02:59:06 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x171202)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000f, 0x89011, r0, 0x81000000)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xd5, 0x3, 0xffffff00, 0x8, 0x100})
02:59:06 executing program 1:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
socketpair(0x2b, 0x80000, 0x1, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000004", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_MAC={0xa, 0x6, @random="580db8fbccfc"}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x41)
accept$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6158ae95, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfd6e, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400400d}, 0x10040000)
02:59:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x80000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000240)={0xc025, 0x3})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000cc67fb929d6e6cd2b33fe91db3b9e1f0fc64d1ff65cd29e0a31daffeb0318e05cf05c848472fdc8c8640817e3892b41bc1dbe3abc12a8269c7781aa0d9750b8d3e29f24926499c64b8e9a9d30d7c1be8b0fb97353531fdd0e27dee8f2f3ad34a184c291d4d15bd27da2ff0084676a77c080a522fa59a80422ba83ce4b872a0f496b12d48e8c4e84ef4e34143a84efebbc2887209bb9ffca6989c6c8158e221b36013440caa2747bf26feea951eabfa5626228fe581fd5083ce", @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf250200000008003f0080ffffff08003f000500000005003e003f0000007fc818e3c175c3182b8c7fdac7ba06531f0aebc927c420aa577a80f0188a51793e6f9dea38b322b4906d4bb5fadeb4fdd01732b0d175a54770b3407397cda343f01a14397990c47c5917d4da670dda5e8498c65ca6315980417c699c85d5b789a33c1c4f8ee065a598f9a949b46f2a2ca54cca0d5d238f704d232c5a7534000ea5ad414ea98e1fd73bb7"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000180))
02:59:06 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
[ 685.851384] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 685.947715] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
02:59:07 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000100)=0x401, 0x4)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@default)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
chmod(&(0x7f0000000140)='./file0\x00', 0x20)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x100)
ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000040))
02:59:07 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2400, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/75)
02:59:07 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC])
chdir(&(0x7f00000002c0)='./bus\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
truncate(&(0x7f0000000000)='./bus\x00', 0x1000)
r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r1, 0x0, 0x40d09)
02:59:07 executing program 1:
r0 = creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1})
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)=0x1dfc)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff)
r4 = socket(0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x0, 0x3f}, 0xc)
pipe(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'ip6erspan0\x00', {0x2, 0x4e24, @local}})
r6 = socket(0x2, 0x2, 0x4)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
02:59:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000100), 0x45ca44436bdf6bf3}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x1, 0x9, 0x2, 0x88, 0xaa, 0xffff, 0x100000000, 0x4, 0x3, 0x1f, 0x80000001, 0x2, 0x2, 0x7, 0x7, 0x5], 0x0, 0xa8001})
[ 686.464402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pig=19073 comm=syz-executor.3
02:59:07 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0))
02:59:07 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xa, 0x301100)
mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2, 0x89011, r0, 0x81000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x80000, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r13=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r11, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r13}}, 0x18)
r14 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xea, 0xc0, 0x6, 0x7, 0x0, 0x5, 0x1040, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x5}, 0x22c0, 0x0, 0xa0e, 0x0, 0x80000000, 0x834, 0xea6}, r11, 0x7, 0xffffffffffffffff, 0xd)
ppoll(&(0x7f0000000140)=[{r3, 0x100}, {r4, 0x71a}, {r5, 0x11}, {r6, 0x100}, {r7, 0xa208}, {r10, 0x2}, {r14, 0x2438}], 0x7, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x9]}, 0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40100, 0x0)
02:59:07 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
02:59:07 executing program 4:
socket$inet(0x10, 0x2, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0)
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
syncfs(r1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6756b308}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 686.736713] overlayfs: unrecognized mount option "18446744073709551615" or missing value
02:59:07 executing program 2:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r0=>0x0})
ptrace$getregs(0xc, r0, 0x1, &(0x7f00000002c0)=""/4096)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r1, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x492142, 0x0)
r2 = socket$kcm(0x29, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
splice(r2, &(0x7f0000000000)=0x10000, r3, &(0x7f0000000040)=0x7, 0x80, 0x7)
[ 686.855155] overlayfs: unrecognized mount option "18446744073709551615" or missing value
[ 686.875161] audit: type=1804 audit(1579834747.964:462): pid=19114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir021630377/syzkaller.xmIVjZ/1219/bus/bus" dev="sda1" ino=16754 res=1
02:59:08 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
02:59:08 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
chmod(&(0x7f0000000000)='./file0\x00', 0x4)
shutdown(r0, 0x0)
02:59:08 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0))
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r3, 0xc0386106, &(0x7f0000000040))
02:59:08 executing program 5:
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = getpid()
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3f, @null, @bpq0='bpq0\x00', 0x2, [@default, @null, @bcast, @default, @null, @default, @null, @default]})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
socketpair(0x2b, 0x80000, 0x1, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
r15 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000004", @ANYRES32=r16, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r16, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r11, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x38, r12, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="580db8fbccfc"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x40041)
r17 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r17, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
accept$inet6(r17, &(0x7f0000000a80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000ac0)=0x1c)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000c40)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r18 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r18, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r19 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r19, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r20 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r20, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r20, 0x29, 0x22, &(0x7f0000000b40)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xf6)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c08000000171d222e7180391f3f19904232112c39b6182e36d3158dce0000", @ANYRES16=r12, @ANYBLOB="0eca2cbd7000fedbdf251d00000008000300", @ANYRES32=r21, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20010000)
accept4$packet(r4, &(0x7f0000002ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002f00)=0x14, 0x800)
syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00')
r22 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x200, 0x0)
ioctl$UI_DEV_CREATE(r22, 0x5501)
sched_setattr(r3, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000000)={0xf31f})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0fff0000000000001800128008000100736974000c00028008000300", @ANYRES32=r2, @ANYBLOB="ced2b2f3454caa78de7cbf8c22ade6a2a1594402776cc57361f050f812ed2001549e814f327ef1960713b400ee14f252810451c6f1ad00e2f0cebe32412bc2ae62137246fbdc413726b8b3d6c9a20a0e4012dc28a530c79f769428e213aacf0790cd969b200c8edf08a9bbb58209707d44aa1bef41a97a32819496d4fe7feb63af5b9b9baeb7c44013cf1987ff0c701b4d28426b703e097109b6d5c50c072685e1264fcd185938ee98d73117deae0814e05f11096c8a53968f842730ffbf69cc5b35d3327f25c9960837e5c41baf9531517403077eb110c8f72d78"], 0x38}}, 0x0)
ioctl(r0, 0x1ff, &(0x7f0000000380)="5e59b770acfd4d51c5c72d13e75ca36d64ccf8506e5267b137c342fa3d88f2a00246e57558b49bff5d8c9a400950d3fb059645dc4423bbbb80a911aeeb83214d7463eadd6af3039fb33496667a71c0546e7fd91027161f2adb2ab5aadb622f906e9eb296e6013d03827971e12ae6b57f9c085e319d060c86d2763bf40d625d40c622dfd1ee76e3ceea99f7bec7c325fe0aa61a53651a187a61")
02:59:08 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0xbbce, 0xd58, @value=0x200})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080))
r6 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x2880)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x300000d, 0x89011, r6, 0x81000000)
02:59:08 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00000000c0)='7', 0x1, 0x45, &(0x7f0000000100)={0x2, 0x4e28, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x76, &(0x7f0000000800)={r7}, 0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r7, 0x3f}, 0x8)
02:59:08 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)
prctl$PR_SVE_SET_VL(0x32, 0x3f38a)
02:59:08 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x402, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x100000c, 0x110, r0, 0x81000000)
02:59:08 executing program 1:
socket$inet(0x10, 0x2, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0)
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
syncfs(r1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6756b308}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 687.501271] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'.
02:59:08 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000180))
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x126effc1, 0x4)
02:59:08 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x76, &(0x7f0000000800)={r7}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={r7, 0x65, "0063bc1367920f7f521c7032cb36d3a7ecab647aa13739be37d195acb8501cbf978eb3cdd527ea1affce6593266ed6e428ff626debb253602ff7a73d2c0d173a62590cb7c0ab2f00d095005954587f3301be81459120aad31d44d5c72f4e3efa2f7deb7b35"}, &(0x7f0000000100)=0x6d)
02:59:08 executing program 1:
socket$inet(0x10, 0x2, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0)
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
syncfs(r1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6756b308}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:08 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 687.876249] Unknown ioctl 21761
02:59:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x2500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = getpid()
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101802, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000200)=0x8000000, 0x4)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240))
r4 = getpgid(r2)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r5=>0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12)
r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r14=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r12, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r14}}, 0x18)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000440)={<r15=>0x0, @in6={{0xa, 0x4e22, 0x1fe105cc, @loopback, 0x8000}}}, &(0x7f0000000300)=0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000340)={r15, 0x7fff, 0x6}, 0x8)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
close(r16)
r17 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r17, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r18=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r16, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r18}}, 0x18)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r8, &(0x7f0000000100)={r16, r1, 0x7c0})
fcntl$getown(r0, 0x9)
r19 = socket$rxrpc(0x21, 0x2, 0x2)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0)
shutdown(r19, 0x0)
r20 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r20, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r20, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28)
[ 687.994150] device sit1 entered promiscuous mode
02:59:09 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000000c0)={0x3, 'syz0\x00'})
02:59:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x309}, 0x2c}, 0x1, 0x0, 0x0, 0x9040}, 0x0)
syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x200440)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101, 0x105)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', <r3=>0x0})
connect$packet(r2, &(0x7f0000000300)={0x11, 0xf8, r3, 0x1, 0x1, 0x6, @random="4e04acc46d5a"}, 0x14)
close(r2)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001a)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
bind$ax25(r2, &(0x7f0000000080)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
02:59:09 executing program 1:
socket$inet(0x10, 0x2, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0)
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
syncfs(r1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6756b308}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:09 executing program 4:
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0x0, r0)
request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00', r0)
keyctl$clear(0x7, r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000680)=""/185)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47)
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x4]}}, r11}}, 0x48)
write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0x1ff, "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", 0x8, 0x9, 0x9, 0x0, 0xfd, 0x4d, 0x1a}, r11}}, 0x128)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0)
02:59:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
bind$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @empty, 0x3}, 0x10)
[ 688.611446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
02:59:09 executing program 4:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 688.749072] tc_dump_action: action bad kind
02:59:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xd9, 0x4, 0x7f, "5c8fb916ea7123ab2c2f702394dca3d5", "93351741ae7ebbd56621aa32849ea307bcd8f4a0312c687a08f02578e410ec81273deefec1125ba775204926d7f65ad95176f737d0f09f128219a3985a05beadb629a7d09ea5595cee2e27e4a45565061a9c927f6ed43f97ef845280358fd525e8b3bbeec9adead2ff4217a7b5c523fe92e83534003e97a63fb0d9be3aebd6a436c8e2be9cf7ce2aa5994a928e8e6d40bd47143ce10dafd239c6483d2c364c1de0e59b11b7aeaea89547580e53d1d710cfa40710b43c5cc7bfccd3450fd05dd1571bae49"}, 0xd9, 0x1)
[ 688.920739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 689.072079] tc_dump_action: action bad kind
02:59:10 executing program 4:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000180)={0x6, 0x81})
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x8]}, &(0x7f0000000100), 0x8)
02:59:10 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0))
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000040))
02:59:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00')
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
fanotify_mark(0xffffffffffffffff, 0x1, 0x0, r3, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x80000000, 0x411100)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
dup(0xffffffffffffffff)
02:59:10 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r0, 0x0)
02:59:10 executing program 4:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000000c0))
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r5=>r4, r0, 0x0, 0xe, &(0x7f0000000100)='/dev/snapshot\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x96}, 0x6108, 0x3, 0xfffffffe}, r5, 0x5, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @rand_addr=0x8747}}, 0x0, 0x0, 0x21, 0x0, "03c95716c5ed540309bb46b62edbb017a09586784713481aea04e330fc1db1960558c4b2cff71008da208859f51d08cdfb59b49067e1ff5fd85e0e62218d6b7b520c30cbac41438db4d139bdbda752f7"}, 0xd8)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000200)={0x9, 0x6, 0x4, 0x5f001, 0x2, {0x77359400}, {0x3, 0x8, 0x20, 0x8, 0x8, 0x1, "361c14ae"}, 0x3, 0x3, @userptr=0xfffffffffffff33c, 0xffffffb8, 0x0, <r12=>r2})
ioctl$FBIO_WAITFORVSYNC(r12, 0x40044620, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:10 executing program 1:
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x5c, 0xff, 0x3})
02:59:10 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80000, 0x0)
shutdown(r0, 0x0)
02:59:10 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010000100013070000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x8000, 0x0)
clock_adjtime(0x0, &(0x7f0000000000))
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0xa10000, 0x9, 0x9, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0960, 0x7, [], @value=0x8}})
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xcc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c040}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000075c0)={0x1c, r4, 0x400, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40000)
r5 = request_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='netdevsim', 0xfffffffffffffff8)
keyctl$setperm(0x5, r5, 0x100)
02:59:10 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x13)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)
02:59:11 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010000100013070000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000aaf0e46500000000000000000a000400000000000000000049000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000007400000081334c6a3f0c4218378b52593348b35823f210a8bcd51e829753fd3731448334a827aa59441a419a3d0dee5382f78207fa488582a7168504b9fdb5dad910b8d4567ec78336e7224ee7a803260411a68b8ef7f7282a08fc51fd3863aa1b2187364375103d19408875cf5457dfad1b784c9596af17b3739a52021dce0c4f3edef0ae429bdcf09d13091b7fab861b73b9ddd6d5eabfbba168a826f1895411c6f2a7ba8c08f4cf62f3753b2f40d4b282483d5eff248b84a0c5ec9b7379353663de"], 0x13c}}, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x8000, 0x0)
clock_adjtime(0x0, &(0x7f0000000000))
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0xa10000, 0x9, 0x9, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0960, 0x7, [], @value=0x8}})
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xcc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c040}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000075c0)={0x1c, r4, 0x400, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40000)
r5 = request_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='netdevsim', 0xfffffffffffffff8)
keyctl$setperm(0x5, r5, 0x100)
02:59:11 executing program 1:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000010800, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]})
umount2(&(0x7f0000000040)='./file1\x00', 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/relabel\x00', 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8)
getresuid(&(0x7f0000000340), &(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0))
statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x80, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getuid()
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r9, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x28, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@posixacl='posixacl'}, {@uname={'uname', 0x3d, 'eth0^'}}, {@nodevmap='nodevmap'}], [{@smackfsfloor={'smackfsfloor'}}, {@uid_gt={'uid>'}}, {@uid_gt={'uid>', r6}}, {@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, r7}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r8}}, {@fowner_lt={'fowner<', r10}}, {@obj_type={'obj_type', 0x3d, 'nfs=nostale_ro'}}]}})
02:59:11 executing program 3:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x21a}, 0xa0, 0x400000000000, 0x101, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0x990000, 0x4, 0x1, r4, 0x0, &(0x7f0000000140)={0x990905, 0x95ed, [], @p_u16=&(0x7f0000000100)=0x3b}})
ioctl$IOC_PR_PREEMPT(r2, 0xc0386106, &(0x7f0000000040)={0x80000000000e754, 0x4, 0x0, 0x59f})
02:59:11 executing program 3:
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0x1000004, 0xffffffffffffffff, 0x0)
rt_sigsuspend(&(0x7f00000000c0)={[0x3ba]}, 0x8)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040)={0x0, 0x4, 0x3})
02:59:11 executing program 5:
r0 = socket(0x40000000002, 0x3, 0x0)
clock_gettime(0x0, &(0x7f00000046c0)={0x0, <r1=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1, &(0x7f0000000280)=""/215, 0xd7}, 0x8}, {{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/117, 0x75}], 0x3}}, {{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000700)=""/189, 0xbd}], 0x3}, 0x20}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/190, 0xbe}, {&(0x7f0000000940)=""/247, 0xf7}, {&(0x7f0000000a40)=""/185, 0xb9}, {&(0x7f0000000b00)=""/113, 0x71}, {0x0}], 0x5, &(0x7f0000001300)=""/4096, 0x1000}, 0xd5a3}, {{&(0x7f0000000c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d80)=""/160, 0xa0}, {&(0x7f0000002300)=""/208, 0xd0}, {0x0}, {&(0x7f0000000f40)=""/164, 0xa4}, {&(0x7f0000001000)=""/149, 0x95}], 0x5, &(0x7f00000011c0)=""/224, 0xe0}, 0x1}, {{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000004500)=""/51, 0x33}}], 0x6, 0x0, &(0x7f0000004700)={0x0, r1+30000000})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x7f, 0x3, 0x3, 0x3f}, {0x5, 0x1, 0x5, 0x101}, {0x7fff, 0x33, 0x3, 0x8000}, {0x8, 0x2, 0x7f, 0x1000}, {0x9, 0x1, 0x5, 0x7955}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x80000, 0x40)
r2 = socket$inet6(0xa, 0x2, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
02:59:11 executing program 2:
socket$rxrpc(0x21, 0x2, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$TIOCSTI(r2, 0x5412, 0x1)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/251)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
getpid()
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000700)={'vlan0\x00', @random="904d00d8c8b9"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @empty, 0x433}, @ib={0x1b, 0x8001, 0x8, {"a46f8723d526606f511eeb658f5fb36c"}, 0x5, 0x8, 0x7}}}, 0x118)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000700)={'vlan0\x00', @broadcast})
shutdown(r0, 0x0)
[ 690.771118] device vlan0 entered promiscuous mode
02:59:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0x4, 0x6, {0x56, 0xa8, 0x1513, {0x5, 0xa7a7}, {0x4, 0x4a}, @rumble={0x6, 0x3}}, {0x53, 0x7, 0x800, {0x81, 0x80}, {0x1, 0x800}, @period={0x5c, 0x200, 0x0, 0x91, 0x2, {0x0, 0x5, 0x8, 0x3ff}, 0x3, &(0x7f0000000100)=[0x6, 0x9f, 0x3]}}})
syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2)
[ 690.792402] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 690.810258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
02:59:12 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = open(0x0, 0x141042, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x200, 0x101000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
preadv(r5, &(0x7f00000017c0), 0x315, 0x800000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40200, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x8, 0x1, 0x404, 0x2, 0x13, "0ed068d6705297d4990a3634dde61982aadb2e"})
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000600)={0x1, 0x4, 0x3, {0xa, @pix_mp={0x6, 0xfffff801, 0x0, 0x6, 0x0, [{}, {0x8000, 0x5}, {0x8, 0x7}, {0x3, 0x5}, {0x5c1}, {0xfffffffc, 0xc6}, {0x2, 0x2}, {0xffff, 0x2}], 0x9f, 0x6, 0x3, 0x94ec06aa675323ad, 0x1}}, 0xce1e})
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7d, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x8}, 0x0)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000040)={0xb, @raw_data="75e77e61f5ef82cc4ebbf7c4c91a9d5fb73ccdaddfbd467e9a7e108f51cc806f784ebbac88e4a0ec41d329e335890a01cce0e883651a2737e210a8d2aa111d751ffc4721f67c53c329e2cf76e192dc7019444535d1918fcfad25aefebcdfd9731960c409ca8a1d7ef067c7e96c236ab97d0216006b9c3dfd8df2a53aba4a284d8d794dc7440e45e7fd157d2e110f098365179c15be3b500cc0976f1622520a6459d8788e548cdefb8463edeaab70c48fb18c6d1bf5c8368a09fee1186cc32274afdbdf11af6c5e8b"})
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40200, 0x0)
02:59:12 executing program 2:
r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r3 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r3, 0x0)
shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x2000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/29, 0x1d})
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={<r5=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84)
syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb5, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r5, 0x2}, 0x8)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/171)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0x6, 0x6, 0x4, 0x400, 0x0, {0x77359400}, {0x5, 0x1, 0x7, 0x5, 0x4, 0x40, "34e06e10"}, 0xb5e5, 0x1, @fd=r7, 0x1, 0x0, <r10=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @local, 0x1ff}, r4}}, 0x30)
shmctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/39)
shutdown(r6, 0x0)
02:59:12 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7, 0x402)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000440)="1a9a278f34a4fcef54ecd9a4392fb75a7eac7fbcf903b050e90cba8c965e8c1df5cecc9b19c660e7221c4041ca969bb1854ff732f838caced7c605803eafde3e3a99cce34c090daaa4e0053d0392f413e6f9ece23bb241ab86814193a3b1457e2f94f02a5fd0c822f9ce63983f3f5ab448a92d854154d19c4cccacef1bbc6cdc23be9a54da35637a5e8cabdbab0b36a491ad0e48584614e9a4a17acc53777e1efd37a52f00009110f79dee326f1b54b478bc3b4774507411d6a23c5096a282700c28580e915f470e7e59c595489fd741020a548551893a5be16d2959f1e87f06c90a460f8f62ba80706fd45c152771e9bec400"/252, 0xfc}, {&(0x7f00000005c0)="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", 0x15a}], 0x2, 0x4ec6)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x1, 0x70, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x5, 0x12, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x82cb, 0x2, @perf_config_ext={0x9fab, 0x924}, 0x1, 0x1, 0x7, 0x1c, 0x8000, 0x80, 0xff})
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000180))
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
ioctl$KDGKBMODE(r8, 0x4b44, &(0x7f0000000140))
ioctl$IOC_PR_PREEMPT(r5, 0xc0386106, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000})
02:59:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/102, 0x66}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000300)=""/225, 0xe1}], 0x5, 0x8001)
02:59:12 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x240000, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000040)={0x6, 'veth0_to_bridge\x00', {0x200}, 0x3})
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7)
02:59:12 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x2}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r1 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x1000)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bridge\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x28044000}, 0x8000)
02:59:12 executing program 2:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[])
02:59:12 executing program 3:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r0=>0x0)
perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0xda, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x20890, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0xa)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r2 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000380)='vlan1\x00')
getpeername(r2, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000002c0)=0x80)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fcdbdf252a4200002400228018b2e36ffa579dedbf000100c7ef000008000300ff7f000008000100af00"/60], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000)
ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000040)={0x4})
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080))
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0x0, 0x6, 0x8, <r5=>r1, 0x0, &(0x7f0000000140)={0xa00964, 0x0, [], @p_u8=&(0x7f0000000100)=0x31}})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5000000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fbdbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x28008051}, 0x44000)
02:59:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 691.334207] 9pnet_virtio: no channels available for device ./file1
02:59:12 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = getpid()
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
rt_tgsigqueueinfo(r3, r3, 0x4000000000000016, &(0x7f00000004c0))
ptrace(0x4206, r3)
rt_tgsigqueueinfo(r3, r3, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffbfffffffc58e})
open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x40)
wait4(0xffffffffffffffff, 0x0, 0x8, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000200)={{0x87, @rand_addr=0x5, 0x4e23, 0x3, 'lblc\x00', 0x4, 0x1, 0x4a}, {@multicast2, 0x4e23, 0x2, 0xfffffff8, 0x1, 0x7}}, 0x44)
02:59:12 executing program 1:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00')
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x480, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f00000001c0)="2f209e1b1941a8a8edf2c6d38f3677fd627b47cdd8555ac3c033c9c4136ecb3c3db643611f5309376953636016b332129d0b0c643ed92d9ed3bb68627ce591e4f0e40eaff3503206960d32abe3976093349d2b66fa3d347cc53de74063232ab3dfcb56186485559ad5ff7390a14e59884f9787f4337d60b9f84e6eeb9cdfb5ad89dc4e7683d105233646fbbce94ad5993ca98234c9e85047bbed82893a1383726e81251f", 0xa4})
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x0)
02:59:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x0)
02:59:12 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x5, 0x94, 0x80, 0x5, 0x58a1})
accept4$netrom(r2, &(0x7f0000000080)={{0x3, @default}, [@bcast, @null, @null, @null, @null, @default, @null, @netrom]}, &(0x7f0000000100)=0x48, 0x800)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000180)={0x7fff, 0xd106, 0x1, 0x0, 0x200, 0x7ff})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000001c0))
02:59:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lchown(&(0x7f00000000c0)='./file0\x00', 0xee00, r2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x100, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000002c0)=0xf845, 0x4)
r7 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff)
accept4$nfc_llcp(r7, 0x0, &(0x7f0000000000), 0x80800)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3ffe, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
02:59:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sysfs$3(0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = getpgid(0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005e000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="67640f01c3f30fb8880800baf80c66b85a495a8f66efbafc0cedba6100ed0f01f0640f01c9baf80c66b87027968c66efbafc0c66edbaf80c66b816c8228a66efbafc0cec36f30fc7720cf20f5cc2", 0x26}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
semget$private(0x0, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0x4, @mcast2, 0x6}, {0xa, 0x4e20, 0xb0, @local, 0x1}, 0x5, [0x1, 0xcee, 0x0, 0x7, 0x8, 0x0, 0xcb, 0x8]}, 0x5c)
02:59:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d0000c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x46}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet(0x2, 0x80001, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x9e, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x58840, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
02:59:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r5, 0x0})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r5, 0x10})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)='>')
02:59:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x109003, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000280)=0xfffffffa)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0xf0, 0x10001])
02:59:13 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
finit_module(r1, &(0x7f00000000c0)='/dev/cec#\x00', 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000380)={0x2, 0x2, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil})
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000000102010300000000000000000700000a08000940000040000080000800054000000003000000000000000000000000009f9788bf92b5ac5997b639f2956bb255946151ff4354741624bbd4472870d3b78d350948bcac0f81c75413bdee3cbdc6b79c53a06a6e760b2c380b982bc2ea33dfda050c00d36bdf7c03e1d7a7e06ea8d5192a07e1f67db4019b6b6a4257482e065e5fdbd4795f3fc197b498034d2a35fea1ecdb1f57a39766d707463080468b52a71a49bc2843b53297b0173f76c866f39b20dc0a2fc6947d04c10175ecdcc8c45b4260e944068fdbf17968"], 0x34}}, 0x20000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0xfeb, 0xffff8001, <r9=>r3, 0x0, &(0x7f0000000100)={0x9a0904, 0x7, [], @ptr=0x2}})
pipe(&(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r13=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r11, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r13}}, 0x18)
write$FUSE_INTERRUPT(r11, &(0x7f0000000180)={0x10, 0xffffffffffffffda, 0x8}, 0x10)
setns(r9, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, &(0x7f0000000340))
02:59:13 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x81, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r4=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
write$P9_RCLUNK(r5, &(0x7f0000000440)={0x7, 0x79, 0x1}, 0x7)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]})
r8 = socket(0x18, 0x0, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0x5)
setresuid(0x0, r9, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000380)}}, 0x18)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12)
r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r14=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r12, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r14}}, 0x18)
ioctl$KVM_HYPERV_EVENTFD(r11, 0x4018aebd, &(0x7f0000000340)={0x4, r12, 0x1})
lchown(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
02:59:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x101, 0x103000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0xed2, 0x5, 0x5, 0x5, 0x3, 0xfc, 0x6}, 0xc)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0xcf, 0x6, 0x7, 0x5bba108b, 0xf, "c7f835f15284216b1adeb51b2d3528acc91082"})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x101100, 0x100)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x4040, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0xfffffffffffffeba, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
02:59:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000d40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000100)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}]}})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$KDADDIO(r2, 0x4b34, 0x9a)
02:59:13 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80401)
poll(&(0x7f0000000380)=[{r0}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$addseals(r1, 0x409, 0x0)
02:59:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r5, 0x0})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r5, 0x10})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)='>')
02:59:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r5, 0x0})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r5, 0x10})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)='>')
02:59:13 executing program 4:
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x4, {0x7ff, 0x6, 0x200, 0x918a}})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
read(0xffffffffffffffff, &(0x7f00000011c0)=""/21, 0x15)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001200)='/dev/autofs\x00', 0x109101, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000001280))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001240)={0x3, 'macvlan1\x00', {0x80000000}, 0x3})
getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000)
02:59:13 executing program 1:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r3=>0x0]}, &(0x7f0000a8a000)=0xc)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
sendto$inet(r4, &(0x7f0000000000)="31d0788b5bc8232c305efc907199953ea98f2aed6556d82301c95c25bea5850b934e7db6b5ea77ea91babfc5bebd1b7b960b8d1dd1efe7d128c0996768bb804d4a68a540d70459f63a8f5480c7c905d95bc16fb7da9279ea49e05fecd0b21257569642565641cca5ff0ec1bdebc1b7fd0baaa61651153c8434a6ba84b0932e70ff588b5e46f5dd363fb0e8b17a247a2c77dbb67dccc61527a99c024ccecc7c61002acac8498d658e38240c7121a61cd2908f1ef8a299f808a37b288db2c89982d307b3d5da2e52fd4f4fd02fd3c8f837d75d9d72f91258fb8780e5776319", 0xde, 0x4040080, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x76, &(0x7f0000000800)={r3}, 0x8)
02:59:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r5, 0x0})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r5, 0x10})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)='>')
02:59:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r5, 0x0})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000000)={r5, 0x10})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)='>')
02:59:14 executing program 1:
msgget$private(0x0, 0x48a)
socket$inet(0x10, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00')
mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0xd000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x6, 0x1)
sendto$inet6(r2, &(0x7f0000000080)="4653e18029ad13102ad8a80c78cc543286b60518dea983e1005d1113f3f819be726b0ecc661b275d7283d88c72cd0c5e839f27602a3cfd1d6b053b1e9d143ac0f3f87798f03a74da1c287d486b783303287e24f2dbb624fbcd109cf5d4f216bb5e78532ca2f1492f", 0x68, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr="ef6039ca8a496a18b55454d27bc38872"}, 0x1c)
ioctl$sock_ifreq(r2, 0x8948, &(0x7f0000000100)={'ip6_vti0\x00', @ifru_addrs=@generic={0xe6038ddae6b352ae, "3dfd59ce4e88d21bd1e64b6cb8dd"}})
02:59:14 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x489}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x9, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$phonet(r0, &(0x7f0000000100)="cf4f38c95f144b62a1e16f51570585eba9d76a79bb5c3556077b9d4f7f2282c7cd9fdb1b7586b9f832df522e3784ea08bda4968307a3c350d27b1ee77e6d01625578a4b6a1cb2269daca53bfde22874242576e11f066e06bb56b50ae8ee25c6b4f6d053f", 0x64, 0x4040, &(0x7f0000000180)={0x23, 0x0, 0x2, 0x5}, 0x10)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={@any, 0x2, 0x3f, 0x8, 0x8, 0x7bd4, "72e91ca581252c4607eac8d97c9ba9c3fd3cd6eabe409ba752837c0d599c7d7a3407eec192fc6c1f40e44611f91c02d43c23e91bf1fda5cfd7f1af16207c4400c388a2d06a79037f6408b07812e6653c5e0ceabc0f0034a583a04a1e9d97c0e74ed25c1f7f8ebcf915491b06aad32b0fa8bbdc0228ee54ee3914f268826d9aa2"})
ioctl$IOC_PR_PREEMPT(r2, 0xc0386106, &(0x7f0000000040))
02:59:14 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000001, 0x8002)
accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001000010800000000004e6f20a95d070d", @ANYRES32=0x0, @ANYBLOB="f702000000100000bf7a9e11def8ca08000d00", @ANYRES32, @ANYBLOB="08001b0000000000359bfd69fbea16969ff7de50e440e52df0b5de39307d427f859696b3f0cd22c97765b85a5e72796d022713bb1974ec0bf70e053760116694b335c093f581f03cdcb2f300172bad1d686bf370fae5729b1eace63067b9b98bcef6a2318bcac01a58cde76083aedf6b9f79330d36fd41a83ed79bc66e4253e6c1cbd619085dbb703a056a975a4b2739f33b59718fa9286c9d32a56ced57de417566830e93dd9b62049844"], 0x30}}, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0xff, 0x3, 0x0, 0x0, @msi={0xf8a, 0x1, 0xc1f, 0x4}}, {0x1, 0x4, 0x0, 0x0, @sint={0x7f, 0x34b7cd62}}]})
02:59:14 executing program 5:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000002e80)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x200001fb)
socket(0x10, 0x80002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r0)
[ 693.186263] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
02:59:14 executing program 2:
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0)
close(0xffffffffffffffff)
pipe(&(0x7f0000000080))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000040))
getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000280))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x3cc, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b00170002000000000004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0)
02:59:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
openat$zero(0xffffffffffffff9c, 0x0, 0x408381, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
gettid()
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
02:59:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d913260f780266baf80cb82a75aa8bef66bafc0c66b8629666ef66660f3a219a750000000d66b8b5000f00d8c4e1d573f30066baf80cb8a8e75383ef66bafc0cb802000000efc4e145de143166ba4100edea08000000e200", 0x58}], 0x1, 0x0, 0x0, 0xfffffffffffffe75)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x500000c, 0x11, r3, 0x0)
02:59:14 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000031003b050000000000000009000000001c0001001800010004006f1825b4bb7f40eb8c010073586d706c6500000000028004000600"], 0x30}}, 0x0)
[ 693.570782] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
02:59:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfffffffc, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:14 executing program 2:
syz_emit_ethernet(0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002ffffffffffff88470000000000000000db40a64caee2de4348f8308a88e6cbebd9b976940872267e985ddf92e30b29c4aa18025f46d8076adc6fafa0052b01d14d4dd85f3d886ca11c830b65877709b9d602a7ab774d1646c53e9f5f527300e80fd29739088f73f13bc46aa81042044234ccd0932ba878d47e3abf320a36d2780796bdc44d2dd410eeb27340c4a89e880e57d6d93d9b767ce4fc80b6f6025c5862af364df84919"], &(0x7f0000000180)={0x0, 0x1, [0x736, 0x6f1, 0x68d, 0x202]})
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on='index=on'}, {@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_off='xino=off'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/nvram\x00'}}, {@fowner_gt={'fowner>'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@appraise='appraise'}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00')
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
02:59:14 executing program 4:
sysinfo(&(0x7f0000000000)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2afcb540e40000000000000000020001d3000000000900d61c633327d5490000000000006d70365f767669300000000000"], 0x2a)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x259, 0x0)
write$vhci(r3, &(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xc43cb162b96b479, 0xd, 0x1, 0x7, 0x1, 0x6, 0x5c, 0x8, 0x7, 0x6, 0x1}, {0x2, 0x100000, 0x0, 0x20, 0x1, 0x6, 0xc8, 0x20, 0x17, 0x68, 0x3f, 0x20}, {0x4000, 0x0, 0x3, 0x7, 0x0, 0x1, 0x5, 0x9, 0x80, 0x0, 0x1, 0x5}, {0xd000, 0x2, 0x3, 0x2, 0x2, 0xa5, 0xe4, 0x0, 0xff, 0x1, 0x8, 0x98}, {0x5, 0x1, 0xb, 0x2, 0x8, 0xfe, 0x40, 0x81, 0x7b, 0x20, 0xf7}, {0x1, 0x4, 0xa, 0x8, 0x8, 0x5, 0x20, 0x4, 0x7, 0x8, 0x6, 0x6}, {0x4000, 0x2000, 0xe, 0xb5, 0x1, 0x6, 0x1, 0x90, 0x0, 0x1, 0x9, 0x7c}, {0x5000, 0x3000, 0xc, 0xaf, 0x4, 0x8, 0x20, 0x1, 0x1, 0x9, 0x7, 0xb6}, {0x1000, 0x2000}, {0x0, 0x6000}, 0x20040028, 0x0, 0x2000, 0x40004, 0x8, 0xc100, 0x6000, [0x20, 0x3, 0x400, 0xfff]})
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000000c0))
02:59:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
semget(0x3, 0x5, 0x310)
semctl$GETVAL(0x0, 0x0, 0xc, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
select(0x40, &(0x7f0000000140)={0x1, 0x800000000040, 0x2, 0x9, 0x7, 0x10000, 0x200, 0x1}, &(0x7f0000000240)={0x5, 0x5, 0x7fffffff, 0x2, 0x2, 0x1, 0xffffffffff7ffffb, 0xc9b}, &(0x7f00000003c0)={0x100, 0x4000000000200006, 0x4, 0x200000, 0x80000801, 0xfffffffffffffffc, 0x4a5ac95b, 0x1}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000340)='./bus/file0\x00', 0x410101, 0x10)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000100)={0x2, 'veth0_virt_wifi\x00', {0x4}, 0x1})
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
dup2(r10, r9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000000300)=0x8)
sendfile(r4, r4, &(0x7f00000000c0), 0x8080fffffffe)
02:59:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001380)='net/raw\x00')
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000013c0)=""/236)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="c1825a85d8a2b1221d5c095d35365fd4b59966e109a4dda5619d013bf0f8a39d89a37c71e6b996d4616a2b19fc10561838ae684a9ea2fef1386e05b7e5380fc6015c4cc015161ad92fd3ff9990dc7320da9c16ce0f37fa11a0390755c2f7d788380e5fd0f6676a6abaf75aeaf2a24467bee9b92ff0c7ba4c795bb9d0f8575706aaec96b09464f5e4047b832fef6a5b71eff689afb4f845141c16a444bf00f6d2a30d2759ef0cf92abd4d746652e82f86f8786559a470e91dd74f919b098c8c2c6cbe091506", 0xc5}, {&(0x7f0000000200)="26462a1a13485d9d616b2cc8702b6f6b0a0157c1ab0f9f88a97746232ef096ba8f3288e6a2861e3d7b7ef55e6580579f920d698e85037093d4bcd624b172f50803edac2801373d66c0e69be17186e68932d17ccf14071bd4f07458ddcf6159a6d969eff7f1979779bb62c1d554a613f7dd3e368cbee53d3865275069fde930dc787ffa499f6e42c34022eef6bcca79cd77051fff78069b61e98e92224bd6a6ad82601cf5f099446a728b1b70b29d29e4c847e12be00aaea1506df9abf6d9c1", 0xbf}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="901d2bbf9df3153de52f52a15ab0f11e90fec97781b106316ab6a0140caabd181fe51dfe95beddbdad642544c359b93c00ef5dccaa386395e8af8923f952ef76d9925ba714272aa5eb03fef39af6facf1e6b5d5a12317bd404b758e8cf31c43181ed8e139ef489db6abc312d0d836d72cbed8aa6ab31d681d4c3b7e70a8d1718fbcdc25723b5a6d8940600000000000000bf75b1711f786eeadb25eb5f5a7ae39b8665850638a29455e421d5f75394c720", 0xb1}], 0x10000124, 0x4)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000})
02:59:16 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x5, 0x2})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:59:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x4a}}, 0x10)
r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe02be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
write$P9_RREAD(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="520000007501004700000073778561803b30b47abd0f5acbc1e18f0873fb7f389e0972bc923eaaa87ea7521923b648c7097757287cd445a9b088419b7d3340499650d7486a0600518f3febe7aae5e0ad2ac9a190fc4f92234acb3c1307d53bde74ee42276eb42e71666375de0f47e70234aa2ecbc41f5f38e030acd20056170dd2231d0f27df414c7e4a2023a1e4cb369a55e7e32b7484d747ab84df4065a6e6f408efb189b3fbdd14d3f82e8a0000000000001cb73a79b84ca9bf08f79372cf5cbb594a5dec2547f6804f81012a698232f22774c3f61f7e4e269593c73896d4a0752b3d05eb5b5307ce4a14530bf98870db0f22a1f6023bb59ed5"], 0x52)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r6)
sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2)
02:59:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f00000000c0)})
02:59:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x127}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9889}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c)
listen(r4, 0x10001)
r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={<r11=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r11, 0x0})
ioctl$DRM_IOCTL_UNLOCK(r8, 0x4008642b, &(0x7f00000004c0)={r11})
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x7)
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="1d0294d46790ec71ae1c1bd0dc883a431fd9164d9016445c4250cac37df12aebe4ba4a9a5d9fa5621a", 0x29, 0x65d000000000}, {&(0x7f00000000c0)="2cab6e2b038b854b157c9307a46f37da74fc7161e8ea", 0x16, 0x8}, {&(0x7f0000000100)="34aad7b1527a40ced20bf2230d51eab7f14a2806a51360f620a9a4025426b4e2087516a6b1d6ffc81951d14d6d13df044ce46eff299b8966887fe8db07e7dc54b5745a83bae74b752d6d", 0x4a, 0x195d}], 0x10, &(0x7f0000000280)={[{@sbsector={'sbsector', 0x3d, 0x6}}, {@utf8='utf8'}, {@map_normal='map=normal'}, {@nocompress='nocompress'}, {@check_strict='check=strict'}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@dmode={'dmode', 0x3d, 0x6}}, {@nocompress='nocompress'}, {@map_acorn='map=acorn'}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
02:59:16 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000050700000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0308000000000000380012000b00010067656e65766500002800020005000300050000001400070000000000000000000000ffff7f00000105000d0002000000050027003200000008000a00", @ANYRES32, @ANYBLOB="2465a8acd83c51aa16fda7af7ed3c8757ddbb2391c46629a350c8bb64996368bee4f33b9484e620700a5e62ba835f10e55eda80b3cde367724f1f796bac69e31b7433b"], 0x68}}, 0x0)
02:59:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=<r1=>0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1)
02:59:16 executing program 1:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x141, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
r3 = accept4$inet6(r2, 0x0, &(0x7f0000003d80), 0x0)
recvmmsg(r3, 0x0, 0xfffffffffffffde1, 0x100, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpid()
get_robust_list(r6, &(0x7f0000000380)=0x0, &(0x7f00000003c0))
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x3}, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
fallocate(r7, 0x10, 0x4004, 0x200)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10)
sendto$inet(r8, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
write$binfmt_script(r8, &(0x7f00000009c0)=ANY=[], 0x378)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
sendto$inet(r8, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7514bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
preadv(r8, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000000400)=""/47, 0x2f}], 0x3, 0x3)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r9, 0x40044900, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0xfd, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cfb2e76, 0x0, @perf_config_ext={0x101, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xb, r9, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
io_setup(0x3, &(0x7f00000001c0))
socket$inet6(0xa, 0x2, 0x0)
02:59:16 executing program 4:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:16 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
poll(&(0x7f00000000c0)=[{r2, 0xc004}, {r0, 0x9091}, {r4, 0x8000}, {r0, 0x20}, {r6, 0x8}], 0x5, 0xb59)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:16 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r1 = dup(0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r8=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x76, &(0x7f0000000800)={r8}, 0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, [], 0x16}, 0x85}}}, 0x84)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f00000002c0)=0x6, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
02:59:17 executing program 2:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbe90, 0x5}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x610080, 0x7)
write(r3, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f", 0xe00)
fallocate(r3, 0x11, 0x0, 0x0)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x101000, 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x1c1041, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000240)={0x3f, 0x2, "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"})
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x4000)
sendfile(r3, r4, 0x0, 0x12000)
r7 = creat(&(0x7f0000000380)='./file0\x00', 0x140)
accept$netrom(r7, 0x0, &(0x7f00000003c0))
02:59:17 executing program 4:
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000140)=0xea7a, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84101, 0x0)
02:59:17 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200a2, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000002c0)={0x4dc9, 0x6, @value=0x3f})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fremovexattr(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="757365722e76626f786e657431002ce473887223d136260a6a"])
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setxattr$security_capability(&(0x7f0000000040)='./bus/file1\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [], r7}, 0x18, 0x0)
stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$afs(&(0x7f0000000200)='afs\x00', &(0x7f0000000340)='./file0\x00', 0x7, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000440)="b34c55f1583e350bc7b9f6d6ed40919f6670e9a69b775bd20583e4372d5785281eb103728e240b34c567c830ad56c0088e00eecf9e9c6ea2398b7733063d3824f48fe18f53ca66722a4af1cce9082e71c44c618816480342b7d813f84a5822274ef45fe041739013fa506b3425b197be1f7a3fdd97dd0f7939f541ba74a8cf4900b55c52e9bee72fe2c79550ed044df19c54649d9d6e64e7a1f1d60c8ba09c74063ba5dbb48fe692010cf6f1061db0bd687bca58eca907309325951a2ae7b4aa72c0896cd8ae7195ff638e63e81d285053ed2553", 0xd4, 0x3f}, {&(0x7f0000000380)="eabbfa07701318a4719c944a9e50ff66b489881cef8e", 0x16, 0x9}, {&(0x7f0000000540)="e7b67e88b2f089d415648e8874111b9507a839d354345fc28216d89f72f91fb32587b264e6a4c93a62df81dd6314a030f612d55301335fa1fc7ac94f798ccf54ed380ea45b1218e908480a3be2e6e5a2fc7c96006d5685c4760bd919b960a8f92a1af7a42dfc2777f12435359219afd184ffcb5b715bd2e7652222cc4ab0c1b632c9e0f565b2e1f2d896b8807a669b0d142efbab77530f0e5071c867f3218bf18b2c30aeae167f8a817ce4", 0xab, 0x7fffffff}, {&(0x7f00000003c0)="105ba3467e11a654b967c577165291f65a34c6b79e2acf7b3c4ddfcc4ab8bd7ac40e2d2c090c8efb4b80224d56c44762ee93d6084836ac", 0x37, 0x3}, {&(0x7f0000000600)="3d7fb0f18c3c6976f0cc48964964520d1a804c32b0b3d22b0986d6dc5023df5639353749dc9c6e30e17d48c4f058ac2398f1c21ff07227544d99fb13280b1960cab70fe15cf5d5c5bf885479db8a20a075177fe5a6e8131f4cff7683f782e2520fab90bbadbeb2a9c7196a5ef96099e5c16fd420a2dbb6cf490e2580199fcf175a8944936c101d8c9c9107989c9308b2565084900dd55af3472d000f1889e6e01fa1fdf3b3d0c276322623b4f212401a6b34cf6ce2f19da33c2eda1e6c7cbe74355f", 0xc2}, {&(0x7f0000000700)="3e8c24f56d93625e5f500326bf853768b4b830ab3b0429b479ae06953607dff475422087be608cc4c5c38a7ff2ca762b2d48b79d43c895548ae73aa6e6a411f03ea411b2ca63d9f3b72d32181e05d65e49a34056592bcb3db4ad7b0bbfd510b66902e63d093eeedfa909650847de521347287ebb9540c141150c15c5a33c8e71aa43cc2e2f4b86b11751700d79375b1d9f172c8a8655fe9f9bd5352fed1d27045c2ede3861dbc29c198fc22340313c2a85f30009d2b915a334e225f1", 0xbc}], 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="666c6f636b3d6c6f63616c2c666c6f636b3d6f70656e6166732c666c6f636b3d12726974652c7569643e", @ANYRESDEC=r7, @ANYBLOB=',euid<', @ANYRESDEC=r8, @ANYBLOB=',rootcontext=user_u,\x00'])
readv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1)
[ 696.038184] audit: type=1800 audit(1579834757.116:463): pid=19648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17042 res=0
02:59:17 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x5, 0x2})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:59:17 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x5, 0x2})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:59:17 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x5, 0x2})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:59:17 executing program 2:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x5, 0x2})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:59:17 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x230000, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:17 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
02:59:17 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
02:59:17 executing program 2:
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000440)='security.evm\x00', 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x4785, 0x0, 0x1798})
r0 = memfd_create(&(0x7f0000000040)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000240))
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_mr_vif\x00')
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0)
listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0)
r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0xffffff8c)
getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={<r9=>0x0, 0x5}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000300)={r9, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000280)=0x84)
r10 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r10, r5, r10}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
02:59:18 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x800000000000}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:59:18 executing program 4:
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0xbb2, 0x40100)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@srh={0x2, 0x4, 0x4, 0x2, 0x80, 0x8, 0x6, [@local, @dev={0xfe, 0x80, [], 0x39}]}, 0x28)
02:59:18 executing program 2:
syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='IkeepE\x00'])
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000)=""/24, 0x18, 0x2000, &(0x7f0000000080)={{0x3, @default, 0x4}, [@bcast, @null, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
02:59:18 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x5, 0x2})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:59:18 executing program 0:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={<r3=>0x0, 0x0, 0x3})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r3, 0x0, 0x4})
r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1fffffffd, 0x68003)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r4, 0x81000000)
02:59:18 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000600)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x81, 0x1, 0x0, 0x0, "101d8ba2"}, 0x0, 0x0, @planes=0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r15 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0)
r16 = dup2(r12, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
02:59:18 executing program 2:
r0 = socket$inet6(0xa, 0xb, 0x6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
syz_open_dev$dri(&(0x7f0000000940)='/dev/dri/card#\x00', 0x0, 0x400000)
r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
r4 = getpid()
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x4, 0x4, 0x0, 0x0, 0x20424, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xff}, 0x230, 0xe0c, 0x0, 0x4}, r4, 0x0, r5, 0x0)
listen(r1, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
accept(r1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9)
sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80)}}], 0x1, 0x0)
02:59:18 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200008d4)
02:59:18 executing program 4:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x1, 0xffffff, "bedb690c6b1e97c848f5788f9600b948aa3c7c7cb40cd6ab", {0x0, 0x5}, 0x6})
02:59:19 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:19 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000009, 0x40010, r0, 0x81000000)
02:59:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x14, 0x40, 0x1, 0x6, 0x6, 0x2, 0x9, 0x1c}, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x194)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000003c0)=""/4096)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:19 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
clock_gettime(0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000240))
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x8, 0x7, 0x4, 0x0, 0x4, {r4, r5/1000+30000}, {0x3, 0xc, 0x9, 0x3, 0xd4, 0x64, "ecf63545"}, 0x3, 0x3, @offset=0x3000000, 0xffff, 0x0, <r7=>r6})
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = dup3(r8, r9, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r11=>0x0]}, &(0x7f0000a8a000)=0xc)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x6, 0x9, 0x28, 0x800})
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x76, &(0x7f0000000800)={r11}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={r11, 0xfff, 0x5}, 0x8)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000", 0x25, 0x400}], 0x4801, 0x0)
write$UHID_SET_REPORT_REPLY(r10, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x100c)
02:59:19 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
set_thread_area(&(0x7f0000000040)={0x0, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1})
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:19 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x5, 0x2})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r4, 0xc0386106, &(0x7f0000000040))
02:59:19 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0xa921, 0x11, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3})
02:59:19 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0xc0)
ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d0d, &(0x7f00000001c0))
02:59:19 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x6, 0x1})
02:59:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20000, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000100), 0x4)
close(r3)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f4", @ANYRES32=<r9=>0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e21, @empty}}, [0x5, 0xfffffffffffffff7, 0x3, 0x9, 0x4b, 0x4, 0x0, 0x5, 0x3, 0x50ad1bbe, 0x7, 0x7, 0x3, 0x81, 0x9]}, &(0x7f00000000c0)=0x100)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r11, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
02:59:20 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x2c4401)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:20 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000040))
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x10801, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x7, 0x5, 0x6, 0x7, '\x00', 0x10000}, 0x1, [0x5, 0x3f, 0x80000001, 0x4, 0x9d49, 0x100000000, 0x4, 0xfffffffffffffff9, 0x10f, 0x5, 0x0, 0xffffffffffff9c43, 0x7fff, 0x9, 0x4, 0x8, 0x101, 0x9, 0x10000, 0x1, 0x1000, 0xd18e, 0x1, 0x40, 0x5, 0x81, 0x1000, 0x9, 0x2, 0x3, 0xc45b, 0x6, 0x4, 0x9, 0x800, 0x80000001, 0x9, 0x0, 0xd768, 0x5, 0x1, 0x8001, 0x2, 0x9, 0x7f, 0x4, 0x50f7, 0x0, 0x2, 0x0, 0xe5, 0x0, 0x100, 0xd5ff, 0x3f, 0x6, 0x20, 0x7, 0x6, 0x401, 0x800000000, 0x5, 0xfc, 0x101, 0x3, 0x1, 0x6, 0x66d, 0x1ff, 0x9ff4, 0x4, 0x30, 0x8, 0x6, 0x40, 0x1ff, 0x8, 0x8264, 0x8, 0x1, 0xe86d, 0x3, 0xfffffffffffff360, 0x7, 0x9, 0xc991, 0x2, 0x3, 0x81, 0x7, 0x1, 0x2, 0xd6, 0x6, 0x5, 0x5, 0x8001, 0x8, 0x7, 0x800, 0x8000, 0x6, 0x80, 0x1, 0x3, 0x28, 0x8, 0x4, 0x2, 0x80000001, 0x6bde4f94, 0xffff, 0x4, 0x1ff, 0x1f, 0x5, 0xffffffff, 0x0, 0x7, 0x80, 0xffffffffffff0001, 0x4, 0x8001, 0x3, 0x0, 0x1, 0xfffffffffffffffa, 0xff]})
mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/95)
02:59:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:20 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2dc4c6)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x2, &(0x7f0000000100)={[0xfffffffffffffff9]}, 0x8)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:20 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x40002, 0x0)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000004c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x51}, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x9, @local, 0x100}}, [0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x80, 0x3, 0xffff]}, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3}, 0x8)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
listen(r4, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)=ANY=[], 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x3, 0x8, 0x0, 0x200000}, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0xfffffffffffffd70, 0x6, 0xc, 0x2, 0x5, 0x0, 0x2, 0x0, 0x9}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000000))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000340)=""/86)
socket$unix(0x1, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
connect(r6, &(0x7f0000000600)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$dupfd(r7, 0x80c, 0xffffffffffffffff)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @rand_addr="6ca88961e086eedd37591dd48f75a920", @loopback, 0x0, 0x0, 0xfffe, 0x0, 0xffffffffffffffff, 0x4000200})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
02:59:20 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
timer_create(0x7, &(0x7f0000000180)={0x0, 0x3e, 0x4, @tid=r1}, &(0x7f00000001c0)=<r2=>0x0)
timer_gettime(r2, &(0x7f0000000200))
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
close(0xffffffffffffffff)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x200000000, &(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={0x2, 0x80000001, 0x1ff, 0xe064, [], [], [], 0x5, 0x9, 0x0, 0x760f4c7e, "a2f081e40c3c78327e3e4807dbbcc9d3"})
02:59:20 executing program 5:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = dup2(r2, r0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x6)
02:59:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x1, @win={{0x81, 0x7f, 0x20, 0x9}, 0x4, 0x2, &(0x7f00000002c0)={{0x3, 0x81, 0x3ff, 0x1000}, &(0x7f0000000240)={{0x80, 0x81, 0x1f, 0x20}, &(0x7f0000000200)={{0xd0, 0x9, 0x3}}}}, 0x4, &(0x7f0000000300)="71b40d409b3d8469fe2ff02297bb1ffd29f6e3bef44de112c65820f3e2e7", 0x5}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0xb, 0x4, 0x70000, 0x7, {0x77359400}, {0x5, 0x2, 0x1f, 0x7, 0x3d, 0xfa, "a7f0cf12"}, 0x6, 0x2, @planes=&(0x7f00000000c0)={0x8, 0x1, @mem_offset=0x8001, 0x5e7}, 0xfffffffb, 0x0, <r8=>r7})
ioctl$KVM_GET_PIT(r8, 0xc048ae65, &(0x7f0000000180))
02:59:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f000063a000)=0x7fff, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
getpeername(r4, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000340)=0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
r7 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x180)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x28fa9, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="01100000000000002c00120009000100766c616e000000001c000200100002000c0001000900000000000000060001000000000008000500", @ANYRES32=r12, @ANYBLOB], 0x54}}, 0x0)
sendmsg$FOU_CMD_GET(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0xe8217246c7a99b03, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x1)
sendmsg$FOU_CMD_ADD(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r8, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
fsetxattr$security_evm(r1, &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)=@md5={0x1, "355e6006ee0e43bb1fc0b39d880bb91f"}, 0x11, 0x0)
02:59:21 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa450000700000000000019078ac1e0001ac1414aa0c00907800000000450000000000000000060000ffffffffac1414000002443c0003e000000200000000ac14140000000000e0000001000000007f00000100000000ac141400000000000000000000000000ffffffff00"/126], 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/tcp6\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x8, {0x2, 0x7fff, "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", 0x0, 0x1f, 0x9, 0x7, 0x6a, 0x2, 0x7f, 0x1}, r7}}, 0x128)
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000140)={0x0, 0x80, 0x8001, &(0x7f0000000080)=0x8})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/126)
02:59:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 700.106489] sp0: Synchronizing with TNC
[ 700.170779] [U] �
02:59:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3, 0x301)
write$cgroup_int(r0, &(0x7f00000000c0)=0x6, 0x12)
dup(r0)
02:59:21 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
socketpair(0x2b, 0x80000, 0x1, &(0x7f0000000080))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000004", @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0)
r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001880)='/dev/sequencer\x00', 0x8400, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r12, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000018c0)={0x34, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xffffffffffffffab, 0x6, @broadcast}, @NL80211_ATTR_MAC={0x0, 0x6, @dev={[], 0x15}}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x17, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4044041)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00fcff5b627eec03573a4400000004000801080026000000ff0104000801"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40480d0)
r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r14=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r14}}, 0x18)
ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000380)={0x7, 0x7ff})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
close(r15)
r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r17=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r15, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r17}}, 0x18)
ioctl$EVIOCGSND(r15, 0x8040451a, &(0x7f0000000440)=""/196)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r18 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r18, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x2, 0x7, 0x15a}, &(0x7f00000001c0)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x9}}, 0x10)
r19 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
02:59:21 executing program 5:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = dup2(r2, r0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x6)
[ 700.377635] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
02:59:21 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
getpgrp(0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
close(0xffffffffffffffff)
pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r4, 0x20, 0x0, 0xfffffeff000)
epoll_create1(0x80000)
lseek(0xffffffffffffffff, 0x0, 0x3)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="2233fb2d445966e0512d8460f23a835b3789f99cebccc12bf16265a57af6c8f1371381861389eaa5ca7a3bfcdbe41784f433f68450a1ae8817d0c9786a0408beee8c6e6535d372244b43053a00f4d35cba408834e7181025652c418ab7cb21d608829ab28e696bc33e6cdbd386317ace78735f4c1cd32abd68c025c019d2b6d676b41ac1492dbf2ba4ac3a7130ed66aed801a8f2ffffff000000000000000000000000000000000000001f000000", 0xae}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
fallocate(r5, 0x0, 0x0, 0x10000101)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
syz_open_dev$dmmidi(0x0, 0x5, 0x0)
[ 700.456287] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
02:59:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x7fffffff})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x3)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:22 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x1000, 0x6, 0x1, 0x1, 0x0, 0x6, 0x80000000, 0x2, 0x101, 0x5, 0x9, 0x6, 0x3, 0x10001, 0x8, 0x20, {0x2, 0xfffffffc}, 0x0, 0x67}})
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$TCFLSH(r0, 0x540b, 0x2)
02:59:22 executing program 5:
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2)
ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000240)={0x4, @capture={0x0, 0x0, {0x7, 0x67a9}, 0xd80, 0xd942}})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d913260f780266baf80cb82a75aa8bef66bafc0c66b8629666ef66660f3a219a750000000d66b8b5000f00d8c4e1d573f30066baf80cb8a8e75383ef66bafc0cb802000000efc4e145de143166ba4100edea08000000e200", 0x58}], 0x1, 0xcffa808b513f9dfd, 0x0, 0xfffffffffffffe75)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0)
02:59:22 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
getpgrp(0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
close(0xffffffffffffffff)
pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r4, 0x20, 0x0, 0xfffffeff000)
epoll_create1(0x80000)
lseek(0xffffffffffffffff, 0x0, 0x3)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="2233fb2d445966e0512d8460f23a835b3789f99cebccc12bf16265a57af6c8f1371381861389eaa5ca7a3bfcdbe41784f433f68450a1ae8817d0c9786a0408beee8c6e6535d372244b43053a00f4d35cba408834e7181025652c418ab7cb21d608829ab28e696bc33e6cdbd386317ace78735f4c1cd32abd68c025c019d2b6d676b41ac1492dbf2ba4ac3a7130ed66aed801a8f2ffffff000000000000000000000000000000000000001f000000", 0xae}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
fallocate(r5, 0x0, 0x0, 0x10000101)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
syz_open_dev$dmmidi(0x0, 0x5, 0x0)
02:59:22 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
getpgrp(0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
close(0xffffffffffffffff)
pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r4, 0x20, 0x0, 0xfffffeff000)
epoll_create1(0x80000)
lseek(0xffffffffffffffff, 0x0, 0x3)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="2233fb2d445966e0512d8460f23a835b3789f99cebccc12bf16265a57af6c8f1371381861389eaa5ca7a3bfcdbe41784f433f68450a1ae8817d0c9786a0408beee8c6e6535d372244b43053a00f4d35cba408834e7181025652c418ab7cb21d608829ab28e696bc33e6cdbd386317ace78735f4c1cd32abd68c025c019d2b6d676b41ac1492dbf2ba4ac3a7130ed66aed801a8f2ffffff000000000000000000000000000000000000001f000000", 0xae}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
fallocate(r5, 0x0, 0x0, 0x10000101)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
syz_open_dev$dmmidi(0x0, 0x5, 0x0)
02:59:22 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = gettid()
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r3)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r1, 0xffffffffffffffff, r3}, 0xc)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r4, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = dup3(r8, r9, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r11=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x76, &(0x7f0000000800)={r11}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={r11}, 0xc)
02:59:22 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
getpgrp(0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
close(0xffffffffffffffff)
pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r4, 0x20, 0x0, 0xfffffeff000)
epoll_create1(0x80000)
lseek(0xffffffffffffffff, 0x0, 0x3)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="2233fb2d445966e0512d8460f23a835b3789f99cebccc12bf16265a57af6c8f1371381861389eaa5ca7a3bfcdbe41784f433f68450a1ae8817d0c9786a0408beee8c6e6535d372244b43053a00f4d35cba408834e7181025652c418ab7cb21d608829ab28e696bc33e6cdbd386317ace78735f4c1cd32abd68c025c019d2b6d676b41ac1492dbf2ba4ac3a7130ed66aed801a8f2ffffff000000000000000000000000000000000000001f000000", 0xae}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
fallocate(r5, 0x0, 0x0, 0x10000101)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
syz_open_dev$dmmidi(0x0, 0x5, 0x0)
02:59:22 executing program 1:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x3dd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc)
syz_open_procfs(0x0, &(0x7f00000027c0)='net/nf_conntrack_expect\x00')
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x3, 0x10001, 0x0, 0xff, 0x10000, 0x9}, 0x1c)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, &(0x7f0000001600)="9ce57940718e44e59aaddfd1be6ff7fe7c8fbc3bdaa606b42b56d725f08b35ee802894461cf9fbabed4c319df9edff0a635f8331664863fb4ffbf825002697dd98e7e5892c64a923bff6a0ea21df1550347191ddff93f0f186bb879bd26621e3"}}, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
munlock(&(0x7f00007a6000/0x4000)=nil, 0x4000)
r5 = semget$private(0x0, 0x0, 0x0)
semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000080)=""/5)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000002700)=[0x8001, 0x0, 0xba])
socket(0xa, 0x801, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
02:59:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0)
02:59:22 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x630a80, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080))
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x800, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x76, &(0x7f0000000800)={r6}, 0x8)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r10=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x76, &(0x7f0000000800)={r10}, 0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={r6, 0x10002, 0x20f93ce1, 0x2, 0x1, 0x7, 0x3, 0xe6, {r10, @in={{0x2, 0x4e27, @multicast2}}, 0x8000, 0x3, 0x7, 0xffffffff, 0x1ff}}, &(0x7f00000001c0)=0xb0)
02:59:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x6}, 0x10)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x7, 0x3ff, 0x10001, 0x101, 0x4, 0x7, 0x7d5172c4, 0x3ff, 0x1, 0x8, 0x3, 0x2, 0x4, 0x3, 0x2, 0x6, 0x0, 0xe60, 0x8, 0x6, 0x7fff, 0x401, 0x3, 0x401, 0x80, 0x10001, 0x18000000, 0x3, 0x1c000000, 0xfff, 0x0, 0xc6]})
02:59:22 executing program 1:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x3dd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc)
syz_open_procfs(0x0, &(0x7f00000027c0)='net/nf_conntrack_expect\x00')
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x3, 0x10001, 0x0, 0xff, 0x10000, 0x9}, 0x1c)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, &(0x7f0000001600)="9ce57940718e44e59aaddfd1be6ff7fe7c8fbc3bdaa606b42b56d725f08b35ee802894461cf9fbabed4c319df9edff0a635f8331664863fb4ffbf825002697dd98e7e5892c64a923bff6a0ea21df1550347191ddff93f0f186bb879bd26621e3"}}, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
munlock(&(0x7f00007a6000/0x4000)=nil, 0x4000)
r5 = semget$private(0x0, 0x0, 0x0)
semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000080)=""/5)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000002700)=[0x8001, 0x0, 0xba])
socket(0xa, 0x801, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
02:59:22 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
getpgrp(0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
close(0xffffffffffffffff)
pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r4, 0x20, 0x0, 0xfffffeff000)
epoll_create1(0x80000)
lseek(0xffffffffffffffff, 0x0, 0x3)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="2233fb2d445966e0512d8460f23a835b3789f99cebccc12bf16265a57af6c8f1371381861389eaa5ca7a3bfcdbe41784f433f68450a1ae8817d0c9786a0408beee8c6e6535d372244b43053a00f4d35cba408834e7181025652c418ab7cb21d608829ab28e696bc33e6cdbd386317ace78735f4c1cd32abd68c025c019d2b6d676b41ac1492dbf2ba4ac3a7130ed66aed801a8f2ffffff000000000000000000000000000000000000001f000000", 0xae}], 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
fallocate(r5, 0x0, 0x0, 0x10000101)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000)
syz_open_dev$dmmidi(0x0, 0x5, 0x0)
02:59:22 executing program 0:
migrate_pages(0xffffffffffffffff, 0xfffffffffffff801, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x8001)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000080)={0x7620, 0x4})
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r1, 0x81000000)
02:59:22 executing program 5:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x3dd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc)
syz_open_procfs(0x0, &(0x7f00000027c0)='net/nf_conntrack_expect\x00')
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x3, 0x10001, 0x0, 0xff, 0x10000, 0x9}, 0x1c)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, &(0x7f0000001600)="9ce57940718e44e59aaddfd1be6ff7fe7c8fbc3bdaa606b42b56d725f08b35ee802894461cf9fbabed4c319df9edff0a635f8331664863fb4ffbf825002697dd98e7e5892c64a923bff6a0ea21df1550347191ddff93f0f186bb879bd26621e3"}}, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
munlock(&(0x7f00007a6000/0x4000)=nil, 0x4000)
r5 = semget$private(0x0, 0x0, 0x0)
semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000080)=""/5)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000002700)=[0x8001, 0x0, 0xba])
socket(0xa, 0x801, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
02:59:22 executing program 1:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x3dd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc)
syz_open_procfs(0x0, &(0x7f00000027c0)='net/nf_conntrack_expect\x00')
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x3, 0x10001, 0x0, 0xff, 0x10000, 0x9}, 0x1c)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, &(0x7f0000001600)="9ce57940718e44e59aaddfd1be6ff7fe7c8fbc3bdaa606b42b56d725f08b35ee802894461cf9fbabed4c319df9edff0a635f8331664863fb4ffbf825002697dd98e7e5892c64a923bff6a0ea21df1550347191ddff93f0f186bb879bd26621e3"}}, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
munlock(&(0x7f00007a6000/0x4000)=nil, 0x4000)
r5 = semget$private(0x0, 0x0, 0x0)
semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000080)=""/5)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000002700)=[0x8001, 0x0, 0xba])
socket(0xa, 0x801, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
02:59:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x80801, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
02:59:22 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7fff, 0x10000)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x5, {{0x2, 0x4e20, @broadcast}}}, 0x88)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x120)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000080)={0xffff0000, 0x1, 'client0\x00', 0xffffffff80000002, "9dcb61615ea29ad0", "a5b45260046b510b6e24ff88b9bd403e62b800003963a0725b58e4fcfe3db4be", 0x7, 0xf6})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
write$selinux_user(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a733020756e636f000200000000000000"], 0x38)
02:59:23 executing program 1:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x3dd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc)
syz_open_procfs(0x0, &(0x7f00000027c0)='net/nf_conntrack_expect\x00')
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x3, 0x10001, 0x0, 0xff, 0x10000, 0x9}, 0x1c)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, &(0x7f0000001600)="9ce57940718e44e59aaddfd1be6ff7fe7c8fbc3bdaa606b42b56d725f08b35ee802894461cf9fbabed4c319df9edff0a635f8331664863fb4ffbf825002697dd98e7e5892c64a923bff6a0ea21df1550347191ddff93f0f186bb879bd26621e3"}}, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
munlock(&(0x7f00007a6000/0x4000)=nil, 0x4000)
r5 = semget$private(0x0, 0x0, 0x0)
semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000080)=""/5)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000002700)=[0x8001, 0x0, 0xba])
socket(0xa, 0x801, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
02:59:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x80000, 0x5)
recvmmsg(r1, &(0x7f0000002380)=[{{&(0x7f0000000340)=@pppoe, 0x80, 0x0}}, {{&(0x7f0000001b00)=@generic, 0x80, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002580)=""/249, 0xf9}], 0x1}}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto(0xffffffffffffffff, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f0000003700)={0x77359400})
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000000906000000000000000000000a0000087c00e24008801c0007801800168014000240fe880000000000000000000000000001100007800a001100f63bb2b946440000100007800c00194000000000000000050c00078005001500eb0000000c00078008000a40000000010c000780060004404e240000180007801400170076657468305f766c679700bb49534e75280007801800028014000240000000000000000000000000000000010c001b4000000000000000020500010007000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4004005}, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000680))
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000003c0))
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x7)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaaaaaaaaaaad7, &(0x7f0000000480)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7086270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2026d91af0d12789000000000006b539d54b89d0ecf21c9025a7f0e6019b3fe58c30961d2967701cfb336f76ee4cfa43571d23fa3a7a2d6128236d2a01ad19bb8e2ce4f84e6831919f1cbaed9939d22b88e1dc81064f2ced336c4323efd44f3d3267a3d7028b45c0790ecb5ce6a306efeee700000000000000"])
ptrace$getsig(0x4202, r0, 0x10000, &(0x7f00000002c0))
getpid()
02:59:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
timerfd_gettime(r0, &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:23 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xff, 0x4}, 0x1, 0xb, 0x4, {0x7, 0x9}, 0xc4, 0x3})
02:59:23 executing program 1:
syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000086dd6000000800383c00fe8000000000000100000000000000bbff02000000000000000000000000000100000102000000000402907800000000605d4f0400000000fe88000000000000000000000000000100000000000000000000ffffac1414bb"], 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/4096)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001180)={0x43, 0x9, 0x1, {0x5, 0x8309, 0x7fff, 0x6, 0x9, 0x1, 0x2, 0x5a11, 0x80}}, 0x43)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000080)={0x3, 0x3, 0x0, [{0x4, 0x4, 0x23d0, 0x5, 0x9, 0xcb, 0x8}, {0xf89, 0x6, 0x7, 0xfb, 0xff, 0xff, 0x7}, {0x2a, 0x1, 0xfffffffffffffbff, 0x5, 0x78, 0xc0, 0x6}]})
02:59:23 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000040))
02:59:23 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, 0x4, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000140))
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f00000005c0)={0x4, "723190f57ee1762d14a21d759dc02255dfe3088f035b18725b454e5c49766132", 0x4, 0x400, 0x4, 0x1, 0x8, 0x0, 0x9})
close(r5)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000580)={0x0, 0x58cf, 0xff}, 0x8)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r13=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r11, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r13}}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000380)={&(0x7f0000000440)=""/155, 0x9b, <r14=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x1, 0x1, 0x0, 0x10, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0x7, 0x8, 0xfffffffffffffffe}], &(0x7f00000002c0)='GPL\x00', 0x8e, 0x0, 0x0, 0x40f00, 0x6, [], 0x0, 0x0, r11, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x5, 0x7}, 0x10, r14}, 0x78)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0xfffe, 0x5, 0x5, 0x7ff}, {0x400, 0x93, 0x20, 0x9}, {0x1, 0x10, 0x8, 0x32ad}, {0x4, 0x3, 0x20, 0x6}, {0x8, 0x2, 0x9}, {0x5, 0x8d, 0x7, 0x7}, {0x1f, 0x80, 0x2, 0x15cc}, {0x9, 0x4, 0x6}, {0x80, 0x9, 0x1, 0x5}, {0x9, 0x3, 0x1, 0x401}]})
02:59:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
flistxattr(r1, &(0x7f00000004c0)=""/4096, 0x1000)
close(r0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
sendmsg$nfc_llcp(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x27, 0x0, 0x2, 0x7, 0xb5, 0x9, "885ac51bc74d7272d12e1aaad56b585c2084d0569224211659448700d184f7341c6cf0aa5a0a65e197dfa8635e48a8b9746b3f0a45596f035b95dfc0ffbcb4", 0x9}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c346ad057bf1f01c9c8a3d3715495f350160219956e3467bd5b7268e3db8b778d4f817fecbd095c9cf9553b54ecc7675de25c7cc7984d02a749aec5ba0fb22d7d1f0b6fd35ee4f16eb3a95b81c2298048de5d4299ae12d17e34ef3cca97bb470da9ece37bd6810c1ac888fca63ca275e0ce30f2400f72ac2495e1a13003246d5feca84eb3b051687837853497286635379351d105dff6639e53c8c90be69ba71ee438eb3ccf220a2c589ede1d36f428c056eb5f943b40efd314787f01b1859d33fcdfed43dcbbedb93abc72", 0xcc}, {&(0x7f0000000240)="ef34d1f6fa8f19b3032faa79bbafa271a87729b01507510a23f990a24ca3e5bc7e", 0x21}, {&(0x7f0000000280)="97c404db5d89f2eb200cbd81f53a7ab4d78d58d15a9c22d7f9b6", 0x1a}, {&(0x7f00000002c0)="8a2671a00a153c2de36b0e127c25e804b6a2e990cf4cca59c20b620c8d65df2c67df2d3e3145b29360a5d6b644e373292cb7681963cec4e22cf97470c790f8005d52e7bd4441b4f83505b0a63c779d0a8b1112d41381b44d76c67b8c5dbff72ebd1f983d8e23a5fcdd3f0638eeff1c00857624da4990d72bc5d22ee228d6b13b891324586d8a3ed40daf2f670e7a15414cfa2cc5407cc38286ec9da4036b29401fd5aa30d58118e26c9d50e8", 0xac}, {&(0x7f0000000380)}], 0x5, &(0x7f0000000440)={0x10, 0x105, 0x6}, 0x10, 0x8030}, 0x8000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:23 executing program 5:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x3dd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc)
syz_open_procfs(0x0, &(0x7f00000027c0)='net/nf_conntrack_expect\x00')
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x3, 0x10001, 0x0, 0xff, 0x10000, 0x9}, 0x1c)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, &(0x7f0000001600)="9ce57940718e44e59aaddfd1be6ff7fe7c8fbc3bdaa606b42b56d725f08b35ee802894461cf9fbabed4c319df9edff0a635f8331664863fb4ffbf825002697dd98e7e5892c64a923bff6a0ea21df1550347191ddff93f0f186bb879bd26621e3"}}, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
munlock(&(0x7f00007a6000/0x4000)=nil, 0x4000)
r5 = semget$private(0x0, 0x0, 0x0)
semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000080)=""/5)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000002700)=[0x8001, 0x0, 0xba])
socket(0xa, 0x801, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
02:59:23 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001016873fa578fc00011f000000000000dade43e20b1fae8419876cdab220571b3c69e088a7ade1ebd98afed54c01cbc6c07d0d126785e16319d18cb1c6da67961a027a57b6df5586c7dc1dac27df37065662dd893869cd34be55b559382d88c7c0bdf2641d629460b17b2f5b624eeab3a5f55559121e4a9271bb9fc18803d1d95369ac5b1bc8dbeedba9fa", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0)
02:59:23 executing program 1:
getpid()
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111, 0x2}}, 0x37)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
connect$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000))
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x16400, 0x0)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000180)={0x1})
getpgid(r6)
r7 = getpid()
sched_setscheduler(r7, 0x5, &(0x7f0000000380))
r8 = getpgrp(r7)
syz_open_procfs(r8, &(0x7f0000000140)='net/ip_tables_targets\x00')
getsockname$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x20)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0xa8)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
[ 702.536548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5648 sclass=netlink_route_socket pig=20050 comm=syz-executor.2
02:59:23 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x286080)
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x100, "320f337de342b6c1707a817e344aaa85b6cef646bd6134b9215dd41b4d7007c3", 0x3, 0x0, 0x0, 0x0, 0x5, 0x100, 0x401, 0x800, [0x2, 0x3, 0x9]})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0)
setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000001c0)=0x81, 0x4)
[ 702.617196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5648 sclass=netlink_route_socket pig=20065 comm=syz-executor.2
02:59:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x10, 0x8000000100000003, 0x0)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x800, 0x7fff, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}}, 0x40080)
02:59:23 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
02:59:23 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x47c441)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00')
ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000080)={0x0, 0x800})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "1ace510ebd65461b", "ce1d0fabc4cd14f1a6c86ae8f94108b0c3c91d7a41a1a8c603b03cc7fb141060", "5d79bf55", "43f2c6d15978b89a"}, 0x38)
02:59:23 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c1000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6170000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"/816]}, 0x3a8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r0, 0x1e)
wait4(0x0, 0x0, 0x0, 0x0)
02:59:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000240)={{0xffffffffffffffff, 0x1, 0x3, 0x0, 0x1}})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000010805000000000000000000050000400642cac53001000014f3038008000a400305000000000000001f00000900010073797a3100000000050003002100000006ecf71c513a89c3963dba73e07fe6d99195fc25d5fa034a06d1376155cc40a5a0a50ff7494cec81f0543bacfc0b445cce1a6e66a4af2a947eb5a4ba9078016d9a0c08188fa0da02a7b2664ddd6b75a44e8605d4ae5b23a503a02d48c60148e06a7c0d764a15c6aa0a8b5c08c38027f23f"], 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000081)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0xcb3e52c7041f3c6f, 0x0, 0x0, {{}, {}, {0xfffffd7c}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0x4, 0x80000001, @l2={'eth', 0x3a, 'lo\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000)
02:59:24 executing program 5:
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69)
prctl$PR_MCE_KILL(0x21, 0x0, 0x3)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8de154bd8b44717e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
02:59:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
recvmsg(r1, &(0x7f00000006c0)={&(0x7f0000000200)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/247, 0xf7}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/237, 0xed}], 0x5, &(0x7f0000000680)=""/6, 0x6}, 0x2000)
close(r0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x76, &(0x7f0000000800)={r7}, 0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r7, 0xf7, "8b4c9ac55e361b5efad3102be992ca9a8a2da1ac809b4804cd35a795abb836e400de73fbab82f84df3adffbb912d039832f6b05bca0c29e3da92a13d1fff2aff3077bddb5e0b5aa613bec6d729a929d7cfdb6de04c939e55d432c7da0ffaef482f44e82e6fc30f0456a54ddf628a8772f6e106b9a9428e1650551923d45c0fc2545a7eabcfbd488d7fdd025a47ccd685529da5588df2e4ff95989ada0a71c7899d0654dd78724e2c7a7032bb75b45a8d7d6095e60800bbb7730918ff80d930e43174bd5087385a36423fe9fc869a874e3b3c1d6e1e568f00cf72d1cd50941d40d9738dd9ee1cda0abb2a4d71ff9970a94edfc855ece0d1"}, &(0x7f00000001c0)=0xff)
02:59:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2)
ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000000c0)=0x6)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
02:59:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2)
ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000000c0)=0x6)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
02:59:24 executing program 0:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x4}, @generic={0x2c, "0b95697424f19c907200"}, @rc={0x1f, @any, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x100, 0x1000000000000002, 0x7f})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f000600030200000000000000ce940000000000"}, 0xffffffffffffff99)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x100010, r1, 0x81000000)
02:59:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="552c005caf2db9ec463bbb32e5158738353a", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="0c002b800800030006000000"], 0x34}}, 0x0)
02:59:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x2c}, 0x2)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff8000/0x8000)=nil, 0x1000, 0xb, 0x110, r0, 0x81000000)
[ 703.587870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11695 sclass=netlink_route_socket pig=20133 comm=syz-executor.1
02:59:24 executing program 1:
mount(0x0, 0x0, &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = getpid()
tkill(r1, 0x9)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[])
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x8, 0xc, 0x4, 0x20000, 0x5, {0x0, 0x2710}, {0x0, 0xc, 0x15, 0x42, 0x81, 0x9, "310c68e0"}, 0x8, 0x4, @fd, 0x0, 0x0, r2})
r3 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000077000)=""/133, 0x2800)
02:59:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)={0xfffffffe, 0x3ff, 0x0, 0x0, 0x7})
[ 703.792862] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
[ 703.864596] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
[ 703.883106] overlayfs: maximum fs stacking depth exceeded
[ 703.899128] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
[ 703.915836] overlayfs: maximum fs stacking depth exceeded
[ 705.190601] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:747
[ 705.199476] in_atomic(): 1, irqs_disabled(): 0, pid: 0, name: swapper/0
[ 705.206257] 1 lock held by swapper/0/0:
[ 705.210252] #0: ((&sp->resync_t)){+.-.}, at: [<ffffffff814fc258>] call_timer_fn+0xc8/0x670
[ 705.218851] Preemption disabled at:
[ 705.218863] [<ffffffff86695e5d>] schedule_preempt_disabled+0x1d/0x20
[ 705.228984] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.167-syzkaller #0
[ 705.236065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 705.245400] Call Trace:
[ 705.247966] <IRQ>
[ 705.250113] dump_stack+0x142/0x197
[ 705.253742] ? schedule_preempt_disabled+0x1d/0x20
[ 705.258667] ___might_sleep.cold+0x1bd/0x1f6
[ 705.263120] __might_sleep+0x93/0xb0
[ 705.266839] ? tpk_write+0x5d/0x2c0
[ 705.270454] __mutex_lock+0xb9/0x1470
[ 705.274256] ? tpk_write+0x5d/0x2c0
[ 705.277876] ? mutex_trylock+0x1c0/0x1c0
[ 705.281930] ? trace_hardirqs_on+0x10/0x10
[ 705.286151] ? debug_smp_processor_id+0x1c/0x20
[ 705.290809] ? perf_trace_lock_acquire+0x10d/0x4f0
[ 705.295733] ? save_trace+0x290/0x290
[ 705.299517] ? perf_trace_lock+0x500/0x500
[ 705.303738] mutex_lock_nested+0x16/0x20
[ 705.307781] ? mutex_lock_nested+0x16/0x20
[ 705.312004] tpk_write+0x5d/0x2c0
[ 705.315453] resync_tnc+0x1bc/0x3d0
[ 705.319064] call_timer_fn+0x161/0x670
[ 705.322936] ? sp_put+0x40/0x40
[ 705.326195] ? __next_timer_interrupt+0x140/0x140
[ 705.331033] ? trace_hardirqs_on_caller+0x19b/0x590
[ 705.336044] run_timer_softirq+0x5b7/0x1520
[ 705.340366] ? sp_put+0x40/0x40
[ 705.343629] ? add_timer+0xae0/0xae0
[ 705.347357] ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 705.352801] __do_softirq+0x244/0x9a0
[ 705.356595] ? sched_clock+0x2e/0x50
[ 705.360311] irq_exit+0x160/0x1b0
[ 705.363758] smp_apic_timer_interrupt+0x146/0x5e0
[ 705.368585] apic_timer_interrupt+0x96/0xa0
[ 705.372901] </IRQ>
[ 705.375139] RIP: 0010:native_safe_halt+0xe/0x10
[ 705.379797] RSP: 0018:ffffffff87e07de8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
[ 705.387490] RAX: 1ffffffff0fe2d2c RBX: ffffffff87e76240 RCX: 0000000000000000
[ 705.394747] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87e76abc
[ 705.402017] RBP: ffffffff87e07e10 R08: 1ffffffff1165701 R09: 0000000000000000
[ 705.409271] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87f16950
[ 705.416524] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87e76240
[ 705.423795] ? default_idle+0x4c/0x370
[ 705.427689] arch_cpu_idle+0xa/0x10
[ 705.431304] default_idle_call+0x36/0x90
[ 705.435364] do_idle+0x262/0x3d0
[ 705.438722] cpu_startup_entry+0x1b/0x20
[ 705.442829] rest_init+0x1d9/0x1e2
[ 705.446370] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c
[ 705.452600] start_kernel+0x6df/0x6fd
[ 705.456396] ? mem_encrypt_init+0xb/0xb
[ 705.460361] ? x86_family+0x32/0x40
[ 705.463975] ? load_ucode_bsp+0x1ea/0x1f6
[ 705.468115] x86_64_start_reservations+0x29/0x2b
[ 705.472864] x86_64_start_kernel+0x77/0x7b
[ 705.477091] secondary_startup_64+0xa5/0xb0
[ 705.481462]
[ 705.483077] ================================
[ 705.487463] WARNING: inconsistent lock state
[ 705.491851] 4.14.167-syzkaller #0 Tainted: G W
[ 705.497543] --------------------------------
[ 705.501928] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[ 705.508051] swapper/0/0 [HC0[0]:SC1[1]:HE1:SE0] takes:
[ 705.513304] (&tpk_port.port_write_mutex){+.?.}, at: [<ffffffff835996ed>] tpk_write+0x5d/0x2c0
[ 705.522044] {SOFTIRQ-ON-W} state was registered at:
[ 705.527042] __lock_acquire+0xc33/0x4620
[ 705.531171] lock_acquire+0x16f/0x430
[ 705.535045] __mutex_lock+0xe8/0x1470
[ 705.538910] mutex_lock_nested+0x16/0x20
[ 705.543089] tpk_close+0x50/0x8c
[ 705.546528] tty_release+0x373/0xd60
[ 705.550310] __fput+0x275/0x7a0
[ 705.553693] ____fput+0x16/0x20
[ 705.557043] task_work_run+0x114/0x190
[ 705.560997] exit_to_usermode_loop+0x1da/0x220
[ 705.565644] do_syscall_64+0x4bc/0x640
[ 705.569596] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 705.574884] irq event stamp: 5827258
[ 705.578579] hardirqs last enabled at (5827258): [<ffffffff86800979>] restore_regs_and_return_to_kernel+0x0/0x27
[ 705.589013] hardirqs last disabled at (5827257): [<ffffffff86801b01>] apic_timer_interrupt+0x91/0xa0
[ 705.598281] softirqs last enabled at (5827072): [<ffffffff8138e36c>] _local_bh_enable+0x1c/0x30
[ 705.607191] softirqs last disabled at (5827073): [<ffffffff81390620>] irq_exit+0x160/0x1b0
[ 705.615571]
[ 705.615571] other info that might help us debug this:
[ 705.622214] Possible unsafe locking scenario:
[ 705.622214]
[ 705.628245] CPU0
[ 705.630804] ----
[ 705.633370] lock(&tpk_port.port_write_mutex);
[ 705.638015] <Interrupt>
[ 705.640746] lock(&tpk_port.port_write_mutex);
[ 705.645566]
[ 705.645566] *** DEADLOCK ***
[ 705.645566]
[ 705.651604] 1 lock held by swapper/0/0:
[ 705.655558] #0: ((&sp->resync_t)){+.-.}, at: [<ffffffff814fc258>] call_timer_fn+0xc8/0x670
[ 705.664122]
[ 705.664122] stack backtrace:
[ 705.668644] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 4.14.167-syzkaller #0
[ 705.676937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 705.686271] Call Trace:
[ 705.688845] <IRQ>
[ 705.690984] dump_stack+0x142/0x197
[ 705.694599] print_usage_bug.cold+0x330/0x42a
[ 705.699072] ? save_stack_trace+0x16/0x20
[ 705.703248] mark_lock+0xdbd/0x1240
[ 705.706975] ? kvm_clock_read+0x23/0x40
[ 705.710934] ? check_usage_backwards+0x2f0/0x2f0
[ 705.715682] __lock_acquire+0xb57/0x4620
[ 705.719725] ? retint_kernel+0x2d/0x2d
[ 705.723592] ? trace_hardirqs_on_caller+0x19b/0x590
[ 705.728589] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 705.733329] ? trace_hardirqs_on+0x10/0x10
[ 705.737559] ? debug_smp_processor_id+0x1c/0x20
[ 705.742212] ? perf_trace_lock_acquire+0x10d/0x4f0
[ 705.747123] ? perf_trace_lock+0x500/0x500
[ 705.751363] ? dump_stack+0x18a/0x197
[ 705.755156] lock_acquire+0x16f/0x430
[ 705.758952] ? tpk_write+0x5d/0x2c0
[ 705.763191] ? tpk_write+0x5d/0x2c0
[ 705.766811] __mutex_lock+0xe8/0x1470
[ 705.770601] ? tpk_write+0x5d/0x2c0
[ 705.774214] ? tpk_write+0x5d/0x2c0
[ 705.777821] ? mutex_trylock+0x1c0/0x1c0
[ 705.781865] ? trace_hardirqs_on+0x10/0x10
[ 705.786085] ? debug_smp_processor_id+0x1c/0x20
[ 705.790738] ? perf_trace_lock_acquire+0x10d/0x4f0
[ 705.795654] ? save_trace+0x290/0x290
[ 705.799433] ? perf_trace_lock+0x500/0x500
[ 705.803662] mutex_lock_nested+0x16/0x20
[ 705.807717] ? mutex_lock_nested+0x16/0x20
[ 705.811938] tpk_write+0x5d/0x2c0
[ 705.815380] resync_tnc+0x1bc/0x3d0
[ 705.818988] call_timer_fn+0x161/0x670
[ 705.822856] ? sp_put+0x40/0x40
[ 705.826112] ? __next_timer_interrupt+0x140/0x140
[ 705.830942] ? trace_hardirqs_on_caller+0x19b/0x590
[ 705.835961] run_timer_softirq+0x5b7/0x1520
[ 705.840274] ? sp_put+0x40/0x40
[ 705.843540] ? add_timer+0xae0/0xae0
[ 705.847239] ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 705.852688] __do_softirq+0x244/0x9a0
[ 705.856483] ? sched_clock+0x2e/0x50
[ 705.860194] irq_exit+0x160/0x1b0
[ 705.863632] smp_apic_timer_interrupt+0x146/0x5e0
[ 705.868495] apic_timer_interrupt+0x96/0xa0
[ 705.872806] </IRQ>
[ 705.875029] RIP: 0010:native_safe_halt+0xe/0x10
[ 705.879681] RSP: 0018:ffffffff87e07de8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
[ 705.887376] RAX: 1ffffffff0fe2d2c RBX: ffffffff87e76240 RCX: 0000000000000000
[ 705.894677] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87e76abc
[ 705.901957] RBP: ffffffff87e07e10 R08: 1ffffffff1165701 R09: 0000000000000000
[ 705.909266] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87f16950
[ 705.916627] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87e76240
[ 705.923900] ? default_idle+0x4c/0x370
[ 705.927783] arch_cpu_idle+0xa/0x10
[ 705.931406] default_idle_call+0x36/0x90
[ 705.935458] do_idle+0x262/0x3d0
[ 705.938822] cpu_startup_entry+0x1b/0x20
02:59:27 executing program 2:
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x8}, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x7}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x5cc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
02:59:27 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80c4c2)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{}, "ab3fd2e6a74bef73", "08e1cd7c7858de42fac5474f7743deab", "18715722", "0be00812c5d29093"}, 0x28)
r5 = getpid()
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r5)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x48, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=<r8=>0x0)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000002c0)=r8)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180)={0x9}, 0x4)
02:59:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000000)="715a9846d1981c8985b3f57aa246bfe5c5000968b8142e3fee562b64528206aac946ff0dd0d5060c5ec5f5c21dd7818c729fc080dd17d46a10b035d33c6dc5", 0x3f}, {&(0x7f0000000300)="3cf9d97d3fcc91a350f5272ddbff43a1605e21a414458a4c3426ca00b4a90d3245691388138485540f5408a39eec3913ec8982ca9f414e0630dc781b26bd895799f3eb27e7dc36a023cfb8407616b7183da19f5f21fee5b406cc3e19082e9bccb16691d2a9072352413c60bc0c26079ea3", 0x71}, {&(0x7f0000000380)="91c3fa6888291f7b03bbfb1856ed3725cee9ee48ac12a9715b39cc0bcf9c6b8d7b0285d336ab7e076b84b60ddc22879d8e40d3f296fe627e6895455fb527e120c497d97a855a6a60a2b6dec5fda6b09a939fa8ac91dd953ec24d8244352e3e267cecb253f2ebd5d633317a3737e71af49d6efa5cb31544887f0adeb2d21de7423d539adda8677e6c752d02293bebb48dee93e93b6670e0c917729dd115c1b6410ff9347be7195585778cefdf71fe2c4aeda06431a5f4ad932435e68e263b841a309c7c63808a933b51789921f0a740b149dde2a2ada674d1d3298806566f4bbe4e3ddf20e47e3bfd", 0xe8}, {&(0x7f0000000480)="4260ddf520b33a9d40db93e61752a09bdd7e426134ca42b32a1ac9736cbe6e5e6852818ed8a2821968d20afaacbbecb2c8d0dd1bf71128b052e2f3131b5e882572e554d92e216f97a97c8ee989a84cbf51d54de2476cedc566d9eb8889631339ea367bee1e991b91c06df615c8a25114209f28573b159442d94792ba8a6a225674453ef285c448ec14871abac73951653506e500e6706a2bff0a2ee8f528ab8a2d19ab1e60b88a46564b0cf2a53d87af0f905cee8d46a260d79ada63ba0889cd3517e759d2cb94ad2af68a5f146a3d8cf9472a125b8adcf68f95f776", 0xdc}, {&(0x7f0000000580)="7be69bf6108b278e6271269d6114c8c31859a1cdbf151c598d1776e914392a429bc5002fed8a8adfe130150bac16fc3a5d3da1828109663e86d166a6949ac05fd2e04791cb75b85097c27f236d1259f7814af1d44c2d1af08949454b25216945434bbcbb0402d447c8d4229a33893215a0631384b4fb2d07239e75bba8f2b8431971b866208c4e8f3f06a339a894af6ab2dc2302637fe193841aea8c7219839d696b0ed64d252403ddeeebf00415c3362e2611b1cc6d88491c22bf0621254cf05e41578e838f27445dc1fd6cac518b6e0a3f54fbcbe2f79204cbb1b56c955b1b4dacb641f6812cef4ef2b5301925", 0xee}, {&(0x7f0000000680)="0264560ed6be7ee7a015cb609345e474c3e0621eafca8438aaa5d97ff6be1ca14d0383384edec16c0bd8a40ad741cbed5344565bada80695f48857b22bacc813b187b671fc84be5bc9496a9024a2ec19cf3bcecd6faacb6f2cc61339b9cfa7edf81ccbacfb1234b3174c135fbe8af21872f23286960bfc9236f0b91cf94bf24c99bb07795340b367ac535d982a450f58014008a46735ca47ff325cd2fb92542197b3199aeacf02ba5ad017a666030dd2045eb1db0602fafc5625e5382d0536663a4829ce5e4dd556bfe1ff0c63", 0xcd}, {&(0x7f0000000780)="137beae0eddc20f399b1a88fc9720c41338f3ad5ef7cecaa36ad86f61064c45841ba431964fe895271c1c67d0ee6703cecd40d7c0c166fc895856fba83485eff124156dbd21faa926fbacf939ae4aa1a7ba9e1488e19f58343d88ecfa7a14949baf822e4f0d82417b717cb4a475ef1da7daf33e3a24f08de30ceec11bbb479fe2b98e0893c9031e85153a97ffa612fe661f94d29574ba05b04233dc777a74b8d89ef2c56d38a74a5", 0xa8}], 0x7)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000280))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xc, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x9, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0xa, 0x8001, 0x7}, &(0x7f0000000a00)=0x2df93c70, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x7ff}}, 0x10)
r2 = syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x1, 0x400580)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="a0eb000081a6b747ba78d1fd1db43d869f0f4f98934898c5dfd5f294f780867e", @ANYRES16=r3, @ANYBLOB="00022abd7000fddbdf250100000008000500ac1414bb050001000100000014000200fe8000000000000000000000000000bb14000200ff02000000000000000000000000000114000200ff01000000000000000000000000000105000100000000001400060076657468305f6d61637674617000000014000200fe88000000000000000000000000010108000500ac1414aa0500010001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4084005}, 0x40000)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
r5 = msgget(0x0, 0x0)
msgctl$IPC_STAT(r5, 0x2, &(0x7f00000008c0)=""/59)
mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f00000009c0))
pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00)
02:59:27 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf)
renameat(r1, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, 0x0)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000004040), &(0x7f0000004080)=0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x400000000000274, 0x40000000, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00a\x00', @ANYRES16=0x0, @ANYBLOB="3100000000000000000009000000380003000800030000000000080001000000000014000200766c616e30000000000000000000000008000500e0000001060004008edd000024ac24f5a2783bf2c38feb94cf7803b08e933d4407d1a5fa7a85e31c212dcafc2635"], 0x4c}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r7, &(0x7f0000000080)={0x10, 0x0, 0xa}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, 0x0)
02:59:27 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, <r1=>0x41424344}, 0xffffffff, 0x8000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x6b80de4ccb4f4111)
syz_emit_ethernet(0x6cd, &(0x7f0000000180)={@remote, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "39ae73", 0x697, 0x6, 0x0, @mcast1, @mcast1, {[@routing={0x2c, 0x2, 0x0, 0xd0, 0x0, [@ipv4={[], [], @multicast1}]}, @srh={0x6, 0x6, 0x4, 0x3, 0x1, 0x28, 0x2, [@mcast2, @mcast1, @rand_addr="487f95038eff8a7deff8288245a4ca61"]}, @srh={0x3b, 0xa, 0x4, 0x5, 0x9, 0x48, 0x101, [@loopback, @ipv4={[], [], @loopback}, @empty, @mcast1, @dev={0xfe, 0x80, [], 0x2d}]}, @dstopts={0x2, 0x7a, [], [@generic={0x7, 0xbc, "29e7265bb1adf755a6986ac2303cd313e2370bd6b5bd6e3fc131d56b0b720496be6db7aa0e32a274fe8a0e845a0b2e5d175e0a6865ddd2436ee40882b4d5da9aaca8a4dddbe02b3c9959bd7183a90ad06155c9675d3e26b41d49cc673c85d1f250f815be9cee2b3533e68831bba29ab72b630b7f631f92ba98a690a17e3419c967353efd2cf01d6d977e21ad52b47315fdebf65e010688555c4f743a465df16d6de9ce5c594fa2fed6b0a1b4c578b23798b811b19a852527524022fd"}, @generic={0x3f, 0xfe, "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"}, @generic={0x18, 0xf7, "fb5e149076ba4ab88ba9659b30389ef203e68374194e76d474abb2e3fb289c88e1d0f16819e729637d2b70cf89bf2e4171221f541f363f64b79dc34a5352f66024c432f6cdfdeb99cfaa5ab0e2f4a051550abd84c2f44dab49e64916da08dd741e1f2122b71e89411b937346bfa548de4a96e6c76eeb4144dd7943a9f7a5f78739a6a7712db1e74f73de6002edfbfbaab730abe0998d66db746508b13ce4daa256294d56810f832c9ff084852d87f2f90a6784f669fc69140359d51c8eaede2b7ce6165c1d2ec4b105c6ec0582756062ef28d3f769d34ce0126b40ec15221bd3d108235be1e42cc6b45a5f3581c0e5e8238a71cc95ed4e"}, @generic={0x9, 0xf0, "aa284e0a3629693d0c92608f68136efbeb662b14277cc6b5b877a9a916fd1952e5f0a777fc81600fac78dbfc000f327062e3e6d33e5e51e74382b21f2946802a73f4b92359b70c31e8d9eaddc5168b75504e19e997b493113fe93cd9cc6bc9c6f757b17652b59c5768580faa1f9e8f12282bff837b98bc90eecbe06e11aeeb5af31f146369ad512816b6c717f8840a3d837ca591d17f1447eb8e1b2336d7b24628832297293e4ba381c5418561725d3c0520edc485c36c4bd7a9aecf7d6a56668499bb0a2b2b83b0b002a5d34d7fc5e82283470c37a75d05becaae9492f7cc3bd33451a6db3a01939abb931d10b90487"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x0, [0x800, 0x8]}}, @hao={0xc9, 0x10, @empty}]}, @srh={0x0, 0x10, 0x4, 0x8, 0x20, 0x40, 0x0, [@remote, @loopback, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @rand_addr="8dde0e1b62626f16ee1da7a4a8df3590", @ipv4={[], [], @rand_addr=0x3ff}]}, @hopopts={0x6c, 0x5, [], [@ra={0x5, 0x2, 0x6}, @pad1, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xef4d}, @ra={0x5, 0x2, 0xffff}]}, @dstopts={0x50, 0x1, [], [@ra={0x5, 0x2, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e20, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, {[@eol, @nop, @generic={0x3, 0x3, "b9"}, @mss={0x2, 0x4, 0x1}, @timestamp={0x8, 0xa, 0x9}, @md5sig={0x13, 0x12, "3285342e0cf5c27d5a617d9d0ee529ea"}, @sack={0x5, 0xa, [0x800, 0x1]}, @exp_fastopen={0xfe, 0xa, 0xf989, "bb8e17f234ee"}]}}, {"b8ba1dc67cdaa0878ae711cf181fac1276151edc6babbe9bda9693cabcd8b23aa7aff4958e72ba740c96d9abf9df794ac1e4b078a3ee8965ac8691151ff6e19e81f37fa14878d2a18c7dc6e73bfd693c44f91894b31c34353f7c6504a15aca2c69fe0aeec2223cc521f8efc0e846bdb308ac6570917eac4f5c33e30ff560d50dbf9c8a1b01ca73692bf314e8bae6806f575293cff72536f1089baf46563239f3ce6aeddf8c1413bc44c1f2c23f3becf81f7f5d8dd04d953a6720adf6f264122995c0878881a6ad010149351d4569d2cfe410eda914c0d4d5a42493980391c563273bceed80dc5d"}}}}}}}, &(0x7f0000000880)={0x1, 0x1, [0x323, 0xcc5, 0xfb1, 0xb4a]})
02:59:27 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303028303030f23030303030302c1b757365727f695e3d000000000000000000bdc81f97d4b8aa71d39c534483a67bd3548ad1b84b13f5175a1ec9562e68042fc85a79c0b73c874904178bbffce2e865af2790e43ff20c8473c7355dc9a9cfff9fff4da6ad651fc51d37e1d4adf7a06b8a01b76dc5823c1dc167cd00977997eabc90fc9651b4ea9096b2f0ade871495819c4a602219051437179492b6ce165a44414be52a320ea1a174f7e58aa7bb61d3795e0d5b8339fcf51", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000540), 0x1000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
acct(&(0x7f0000000400)='./file0\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair(0x1d, 0x80000, 0x40, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$inet(r3, &(0x7f0000001640)={0x2, 0x0, @broadcast}, &(0x7f0000001680)=0x10)
mount$overlay(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10)
read$FUSE(r0, &(0x7f0000003000), 0x1150)
write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x2, {0x400000000001, 0x0, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x1bd4}}}, 0x90)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r5=>0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x210800, &(0x7f00000016c0)=ANY=[@ANYBLOB="66643d56849c84808e1d65eb4833d207b840f0947ff33198d540aacb12ac71fa5e79391fc6ee9460a44e168bbe8c473858160ab25ab05e27b20ee116b606cf9b3706628f79df016683e9dcf47454587618da8fdb8ba3607b93a77f92557a9a20eb2bad185f320be0d218b0a9a77ac72b1b1a53851705461d77a8cf5804d86ceeb41503b0fc87c09d8675eae1e800992c193e263279a1f80b2daf48ad7571d7b8ca24bbe05f0fc2528b6a761079361a94a16bf4024647223668ca033aa44aa42d77357eba95afd48f14c0922e11d2f289eb7e855a5534e0488379a5e4e0edafb74faa007900"/243, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',allow_other,default_permissions,default_permissions,max_read=0x0000000000000006,context=system_u,appraise_type=imasig,smackfsfloor=/dev/snapshot\x00,\x00'])
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 705.942870] rest_init+0x1d9/0x1e2
[ 705.946538] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c
[ 705.953459] start_kernel+0x6df/0x6fd
[ 705.957245] ? mem_encrypt_init+0xb/0xb
[ 705.961243] ? x86_family+0x32/0x40
[ 705.964865] ? load_ucode_bsp+0x1ea/0x1f6
[ 705.969030] x86_64_start_reservations+0x29/0x2b
[ 705.973780] x86_64_start_kernel+0x77/0x7b
[ 705.978007] secondary_startup_64+0xa5/0xb0
02:59:27 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x34, 0x3c, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000180)={0x20, 0x0, 0x2, 0x7ff, 0x4})
gettid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000200)='mounts\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f00000000c0)={0x13, 0x0, [], {0x0, @bt={0x93b3, 0x1f, 0x1, 0x3, 0x9, 0x7, 0x5, 0x89, 0x1, 0x20, 0x5, 0x1, 0x80, 0x4, 0x13, 0x10, {0xe6, 0x400}, 0x3, 0xff}}})
sendfile(r1, r6, 0x0, 0x320f)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000000)={{0x3f, 0x3f}, {0x2, 0x5}, 0x0, 0x6, 0x72})
[ 706.016165] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 706.022965] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 706.029689] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 706.032768] netlink: 1220 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 706.063213] PM: Basic memory bitmaps created
[ 706.069352] PM: Basic memory bitmaps freed
[ 706.075683] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 706.094087] netlink: 1220 bytes leftover after parsing attributes in process `syz-executor.2'.
02:59:27 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xdc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200}, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:27 executing program 2:
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000080)={0x9, 0x0, 0x8, 0x3})
open(&(0x7f0000002000)='./bus\x00', 0x101142, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r3=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x76, &(0x7f0000000800)={r3}, 0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x2, @mcast2, 0x3}}}, 0x84)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\b\xdaE\x06\x1bh:\xbe\xa3\xd5\fm&\xc2\xa8,\xca\xef\x10+]7W\x83H\xcd&\xbb\xb8\x12F\x91\x02!U\x10\x10\x1d\xe10\xb4\xdbA\xbf\xcaXIE\xe8E\x03\xc4\xef\x12vO\xe4\xa0\xebk\x0e\x85\xbdmIz\xb9wgl@H\xd3\xa4\xef\xfc\x01\xa2\xd3\xc87\x12\xe6\xfb\xc3\r\xae\xf6\xde')
[ 706.103365] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 706.149918] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 706.158338] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
02:59:27 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x1, 0x0, 0x3, "52311fed9922b63709319aba9fa35fa54623d05f161ac1e6ed398525c57968058727aa8094fb7f1bf8c5aa2c5e7f2d3fae98fc1c6b12a704484351192ff3211ee7bcd2a8ab100f714dd4f064de00c8f211b7b358fa74158cbfd2180f37fb46b34dad6052e0b969ee855d99c80e2df8b565a0c2ca817f21570e5a64f73996f134644008e51e706d8960a0fbaba917f34d4fb559d5eaaacc531df44c39484517f5fd094c703d180274c8f78f132f30b67beafe4dda0f130beb6d185aca"}, 0xcc)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0)
[ 706.231373] audit: type=1400 audit(1579834767.316:464): avc: denied { map } for pid=20174 comm="syz-executor.5" path="/root/syzkaller-testdir021630377/syzkaller.xmIVjZ/1241/cgroup.controllers" dev="sda1" ino=17789 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[ 706.249598] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:27 executing program 2:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x242000, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)=0x4)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x17)
fallocate(r1, 0x100000003, 0x0, 0x28120001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
dup(r7)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x1000400200)
fallocate(r0, 0x100000003, 0x0, 0x28120001)
02:59:27 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf)
renameat(r1, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, 0x0)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000004040), &(0x7f0000004080)=0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x400000000000274, 0x40000000, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00a\x00', @ANYRES16=0x0, @ANYBLOB="3100000000000000000009000000380003000800030000000000080001000000000014000200766c616e30000000000000000000000008000500e0000001060004008edd000024ac24f5a2783bf2c38feb94cf7803b08e933d4407d1a5fa7a85e31c212dcafc2635"], 0x4c}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r7, &(0x7f0000000080)={0x10, 0x0, 0xa}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, 0x0)
02:59:27 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80c4c2)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{}, "ab3fd2e6a74bef73", "08e1cd7c7858de42fac5474f7743deab", "18715722", "0be00812c5d29093"}, 0x28)
r5 = getpid()
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r5)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x48, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=<r8=>0x0)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000002c0)=r8)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180)={0x9}, 0x4)
02:59:27 executing program 1:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008054}, 0x200404d5)
write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x27f, 0x4)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x4000000000000001, 0x0)
add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r6)
r7 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r6)
r8 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r7)
keyctl$get_persistent(0x16, 0x0, r8)
add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r8)
r9 = socket$inet(0x10, 0xa, 0x4)
sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0)
recvmmsg(r9, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
[ 706.381676] PM: Basic memory bitmaps created
02:59:27 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
flistxattr(r3, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x4)
[ 706.418201] PM: Basic memory bitmaps freed
[ 706.430403] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 706.437619] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 706.444624] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000100))
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 706.477940] PM: Basic memory bitmaps created
[ 706.483456] PM: Basic memory bitmaps freed
[ 706.548143] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 706.568762] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 706.587785] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 706.749049] PM: Basic memory bitmaps created
[ 706.757069] PM: Basic memory bitmaps freed
[ 706.779640] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 706.789892] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
02:59:27 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x479f, 0x80c00)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/4096)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:59:27 executing program 0:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_LABELS_MASK={0x14, 0x17, [0x9, 0x6, 0x2, 0x6]}, @CTA_TUPLE_REPLY={0xf8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0xf}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb8}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r3, 0x81000000)
02:59:27 executing program 1:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008054}, 0x200404d5)
write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x27f, 0x4)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x4000000000000001, 0x0)
add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r6)
r7 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r6)
r8 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r7)
keyctl$get_persistent(0x16, 0x0, r8)
add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r8)
r9 = socket$inet(0x10, 0xa, 0x4)
sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0)
recvmmsg(r9, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
02:59:27 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
flistxattr(r3, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x4)
02:59:27 executing program 4:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100)=0x6a1, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:27 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved})
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000180))
[ 706.796961] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 706.813411] PM: Basic memory bitmaps created
[ 706.831132] PM: Basic memory bitmaps freed
02:59:28 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0)
read$char_usb(r1, &(0x7f0000000080)=""/217, 0xd9)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fsetxattr$security_ima(r4, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "159ac3707c77b77a21ff302dc05f40f80499ca98"}, 0x15, 0x2)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 706.876513] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 706.883325] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 706.889939] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 706.913720] PM: Basic memory bitmaps created
[ 706.919476] PM: Basic memory bitmaps freed
02:59:28 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
flistxattr(r3, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x4)
[ 706.944390] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 706.951112] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 706.963376] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 706.989961] PM: Basic memory bitmaps created
[ 706.996356] PM: Basic memory bitmaps freed
02:59:28 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80c4c2)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{}, "ab3fd2e6a74bef73", "08e1cd7c7858de42fac5474f7743deab", "18715722", "0be00812c5d29093"}, 0x28)
r5 = getpid()
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r5)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x48, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=<r8=>0x0)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000002c0)=r8)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180)={0x9}, 0x4)
02:59:28 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000)
02:59:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x1a}, r3}, 0x14)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:28 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved})
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000180))
[ 707.268172] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 707.275120] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 707.281457] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 707.296392] PM: Basic memory bitmaps created
[ 707.302668] PM: Basic memory bitmaps freed
02:59:28 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
fchmod(0xffffffffffffffff, 0x8)
02:59:28 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
flistxattr(r3, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x4)
02:59:28 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x12, r0, 0x81000000)
02:59:28 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved})
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000180))
02:59:28 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00')
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x3f, 0x4)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
accept$alg(r3, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0xd, 0x1010, r0, 0x81000000)
02:59:28 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved})
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000180))
02:59:28 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10200, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x81000000)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x2}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1}, {0x3}}, {{0x3, 0x1, 0x1}, {0x0, 0x0, 0x1}}], 0x28)
02:59:28 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
flistxattr(r3, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
02:59:29 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80c4c2)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{}, "ab3fd2e6a74bef73", "08e1cd7c7858de42fac5474f7743deab", "18715722", "0be00812c5d29093"}, 0x28)
r5 = getpid()
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r5)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x48, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=<r8=>0x0)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000002c0)=r8)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180)={0x9}, 0x4)
02:59:29 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved})
02:59:29 executing program 0:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x4d, 0x9, <r3=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9d0902, 0x4, [], @string=&(0x7f0000000080)=0x1}})
ioctl$VT_ACTIVATE(r0, 0x5606, 0x3)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80000001, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3ff}, {0xa, 0x4e20, 0x10000, @loopback, 0x6}, r2, 0x6}}, 0x48)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r4, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000200)=0x2, 0x4)
02:59:29 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
[ 708.068963] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 708.075376] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 708.081970] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 708.096568] PM: Basic memory bitmaps created
[ 708.101971] PM: Basic memory bitmaps freed
02:59:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0xf3, 0x4, 0x9, 0x1, 0x0, 0x401, 0x830, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x2008, 0xf395, 0x6, 0x6, 0x1f, 0x4, 0x3}, r1, 0x7, r0, 0x8)
02:59:29 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
02:59:29 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x18d182)
mmap$snddsp_control(&(0x7f0000ff3000/0xd000)=nil, 0x1000, 0x0, 0x4010, r0, 0x81000000)
02:59:29 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r3)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
02:59:29 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x25)
accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
recvfrom$packet(r2, &(0x7f0000000340)=""/92, 0x5c, 0x1, &(0x7f0000000480)={0x11, 0x1, r3, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x10000, 0x83, 0x7, 0xf242, 0x0, [{0x9, 0xc1, 0x1f}, {0x7f, 0xd2, 0x20, [], 0x3f}, {0x2, 0xc0, 0x2, [], 0x7}, {0x7, 0x9d, 0x8, [], 0x8}, {0x20, 0x7, 0x81, [], 0x1}, {0x0, 0x4, 0x2, [], 0x4}, {0x1, 0x81, 0xbd, [], 0x9}, {0x3f, 0xa1, 0x3, [], 0x42}, {0xa6, 0x40, 0x9, [], 0x4}, {0x83, 0xfd, 0x8a, [], 0x1f}, {0x67, 0x5, 0xe0, [], 0x81}, {0x4e, 0x9, 0x7f, [], 0x87}, {0x80, 0x7f, 0x6, [], 0x7}, {0x20, 0x20, 0x0, [], 0xc1}, {0x0, 0x6, 0x4, [], 0x9}, {0x4, 0x20, 0x6, [], 0x8c}, {0x4, 0x80, 0x3f, [], 0x80}, {0x80, 0x20, 0x3e, [], 0xff}, {0x9, 0x1, 0x7, [], 0xf0}, {0x24, 0x3f, 0x2, [], 0x7}, {0x1, 0x5, 0x4, [], 0x5c}, {0x9, 0x6e, 0x4, [], 0x4}, {0xe2, 0x3, 0x4, [], 0x7}, {0xff, 0x0, 0x2, [], 0x3}]}})
ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000040))
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000004c0)={0x60002, 0x0, [0x1, 0x3, 0x4, 0x101, 0xfffffffffffffff7, 0x4, 0x5, 0x2]})
[ 708.504767] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 708.512449] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 708.519174] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 708.564004] PM: Basic memory bitmaps created
[ 708.576841] PM: Basic memory bitmaps freed
02:59:29 executing program 0:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r3=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x76, &(0x7f0000000800)={r3}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x21}, 0x1f}}, 0x6, 0x5}, 0x90)
r4 = semget$private(0x0, 0x400000000d, 0x0)
semop(r4, 0x0, 0x0)
semop(r4, &(0x7f0000001840), 0x0)
semctl$GETPID(r4, 0x0, 0xb, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
r11 = socket$inet(0x2, 0x4000000805, 0x0)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
r13 = dup3(r11, r12, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r14=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x76, &(0x7f0000000800)={r14}, 0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000240)={<r15=>r14}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x208, 0xffffdaf9, 0x10001, r15}, 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r16 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10800, 0x0)
getsockopt$PNPIPE_IFINDEX(r16, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x3, 0x0, [{}, {}, {}]})
[ 708.606705] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 708.624868] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 708.642638] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11908}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
[ 708.688593] PM: Basic memory bitmaps created
[ 708.703815] PM: Basic memory bitmaps freed
02:59:29 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r3)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
[ 708.757502] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 708.767193] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 708.779318] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:29 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0xf3, 0x4, 0x9, 0x1, 0x0, 0x401, 0x830, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x2008, 0xf395, 0x6, 0x6, 0x1f, 0x4, 0x3}, r1, 0x7, r0, 0x8)
02:59:29 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4101, 0x0)
[ 708.807755] PM: Basic memory bitmaps created
[ 708.818273] PM: Basic memory bitmaps freed
02:59:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0xf3, 0x4, 0x9, 0x1, 0x0, 0x401, 0x830, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x2008, 0xf395, 0x6, 0x6, 0x1f, 0x4, 0x3}, r1, 0x7, r0, 0x8)
02:59:30 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1000003, 0x89011, r0, 0x81000000)
[ 708.895958] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 708.908065] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 708.924327] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:30 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))
02:59:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0xf3, 0x4, 0x9, 0x1, 0x0, 0x401, 0x830, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x2008, 0xf395, 0x6, 0x6, 0x1f, 0x4, 0x3}, r1, 0x7, r0, 0x8)
[ 708.978408] PM: Basic memory bitmaps created
[ 708.986853] PM: Basic memory bitmaps freed
[ 709.018036] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
02:59:30 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x18d182)
mmap$snddsp_control(&(0x7f0000ff3000/0xd000)=nil, 0x1000, 0x0, 0x4010, r0, 0x81000000)
[ 709.036065] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 709.054470] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 709.116740] PM: Basic memory bitmaps created
[ 709.154737] PM: Basic memory bitmaps freed
02:59:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
fchmod(0xffffffffffffffff, 0x8)
02:59:30 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r3)
02:59:30 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x44800)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x6)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r1, 0x81000000)
02:59:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$setsig(r0, 0xa, 0x38)
02:59:30 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
sched_getparam(0x0, &(0x7f0000000040))
02:59:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
fchmod(0xffffffffffffffff, 0x8)
02:59:30 executing program 0:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r3, 0x81000000)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000000))
[ 709.337339] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 709.349431] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 709.361922] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
fchmod(0xffffffffffffffff, 0x8)
[ 709.394867] PM: Basic memory bitmaps created
[ 709.404303] PM: Basic memory bitmaps freed
[ 709.427337] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 709.437193] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
02:59:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x1a}, r3}, 0x14)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:30 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
sysfs$3(0x3)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2000, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, &(0x7f0000000100)=""/95, &(0x7f0000000180)=""/194, &(0x7f0000000280)=""/186, 0x6000})
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
getresgid(&(0x7f0000000380)=<r2=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x400)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r5)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r7)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r9)
setgroups(0x5, &(0x7f0000000500)=[r2, r3, r5, r7, r9])
02:59:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x5, {0x3}}, 0x18)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x143901, 0x0)
02:59:30 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
close(0xffffffffffffffff)
02:59:30 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
getpid()
sched_getparam(0x0, &(0x7f0000000040))
[ 709.446410] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 709.469857] PM: Basic memory bitmaps created
[ 709.476393] PM: Basic memory bitmaps freed
02:59:30 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x800, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000140)={0x8, {0x5, 0x6, 0x9, 0x1c5}, {0x6, 0x8001, 0x20, 0x6}, {0x1dd, 0x200}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x14}, 0x5, r5})
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x40010, 0xffffffffffffffff, 0x81000000)
[ 709.525712] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
02:59:30 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
sched_getparam(0x0, &(0x7f0000000040))
[ 709.566653] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 709.588031] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 709.608631] PM: Basic memory bitmaps created
02:59:30 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
getpid()
sched_getparam(0x0, &(0x7f0000000040))
[ 709.622861] PM: Basic memory bitmaps freed
02:59:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x21, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x8}}, {@rq={'rq', 0x3d, 0x9eb}}]}})
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockname$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e)
02:59:30 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0)
getsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000100)=""/114)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:30 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
sched_getparam(0x0, &(0x7f0000000040))
02:59:30 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
close(0xffffffffffffffff)
[ 709.745154] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 709.754851] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 709.761798] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 709.776387] PM: Basic memory bitmaps created
[ 709.782084] PM: Basic memory bitmaps freed
[ 709.798938] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 709.807644] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 709.815617] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 709.835322] PM: Basic memory bitmaps created
[ 709.847061] PM: Basic memory bitmaps freed
02:59:31 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x1a}, r3}, 0x14)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:31 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff8000/0x8000)=nil, 0x8000}, &(0x7f00000000c0)=0x10)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r1, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000100)=""/56)
02:59:31 executing program 1:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
sched_getparam(0x0, &(0x7f0000000040))
02:59:31 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0)
close(0xffffffffffffffff)
02:59:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x76, &(0x7f0000000800)={r7}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xb46e, 0x326dca5dbe7a20e4, 0xc5, 0x8, r7}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
02:59:31 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000100)=0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r8}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0x4, "627687", "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"}}, 0x110)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x100, 0x4, 0xdea, 0x6}})
r12 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
pipe2(&(0x7f0000000180), 0x80000)
ioctl$IOC_PR_PREEMPT(r12, 0xc0386106, &(0x7f0000000040))
02:59:31 executing program 1:
sched_getparam(0x0, &(0x7f0000000040))
02:59:31 executing program 1:
sched_getparam(0x0, 0x0)
02:59:31 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x200000a, 0x89011, r0, 0x81000000)
02:59:31 executing program 1:
sched_getparam(0x0, 0x0)
02:59:31 executing program 1:
sched_getparam(0x0, 0x0)
02:59:31 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x30480, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20000, 0x0)
ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000100)={0x101, 0x7, [0xfea3, 0x4, 0x20, 0x0, 0x40], 0x2d})
ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]})
[ 710.388266] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 710.396806] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 710.407404] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 710.459592] PM: Basic memory bitmaps created
[ 710.470590] PM: Basic memory bitmaps freed
[ 710.491119] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 710.503194] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 710.509541] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 710.526010] PM: Basic memory bitmaps created
[ 710.532661] PM: Basic memory bitmaps freed
02:59:32 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x1a}, r3}, 0x14)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:32 executing program 1:
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c1000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6170000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"/816]}, 0x3a8)
02:59:32 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/253, 0xfd)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r3)
02:59:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
setpriority(0x2, r2, 0x0)
02:59:32 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xed09, 0x600002)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 711.123312] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 711.138520] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 711.145052] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 711.161042] PM: Basic memory bitmaps created
[ 711.166331] PM: Basic memory bitmaps freed
[ 711.178599] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 711.185043] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 711.193779] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 711.208181] PM: Basic memory bitmaps created
[ 711.213706] PM: Basic memory bitmaps freed
02:59:32 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x6000, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x4, 0xeb0, 0x4, {}, {}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x13, 0x1, 0x0, 0x0, "ffbcc87d810cc34b1cb4d5f5ebeb289332b8adb18fa10f4eef7423c12e54065d6a7e1e3bfdb2fb9895a0a96a5c51bee06c76e908433d2ea8316c0e06b3c1675b"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000040))
02:59:32 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x2000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x803, 0xa0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000005c0)="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", 0xffff, 0x4008c41, 0x0, 0xffffffffffffffb5)
close(r4)
fstat(r4, &(0x7f0000000180))
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f00000005c0)="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", 0xffff, 0x4008c41, 0x0, 0xffffffffffffffb5)
close(r7)
getgroups(0x1, &(0x7f00000000c0)=[<r8=>0x0])
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r10 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6}}, {{@in=@loopback}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmmsg(r10, &(0x7f0000007e00), 0x400000000000058, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x20000000, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
setresgid(0x0, r8, 0x0)
setresgid(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0)
r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
write$binfmt_elf64(r11, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
fallocate(r11, 0x100000003, 0xfb7d, 0x28120001)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r12 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r12, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040))
write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r13 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r13, 0x7ffffc, 0x0)
fallocate(r13, 0x100000003, 0xfb7d, 0x28120001)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xa2ffff)
02:59:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x7f4]}, 0x8)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xb)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
dup(r3)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x4, "f871f5b34c578179"})
fcntl$getown(r0, 0x9)
02:59:32 executing program 0:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="1df5cdca702ec74b0b6f0d8a983ef147a994e52be615f563cae3c3f90d0f132d775ad5fe77e0308e03128506ed912eb4c96ee09f7bc60bbaf817dd282f5c1675c3c41f89e751265d21645b57d80e18b208bf13177c2bd9075f21e9f06b01996da6837b88bbfc8d196934f6", 0x6b)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = accept(r1, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000140)=0x80)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:32 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r3)
02:59:32 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 711.294911] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 711.309534] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 711.318429] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 711.337537] PM: Basic memory bitmaps created
[ 711.343012] PM: Basic memory bitmaps freed
[ 711.369444] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
02:59:32 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20500)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0xe56940, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
r9 = getpid()
sched_setscheduler(r9, 0x5, &(0x7f0000000380))
write$cgroup_pid(r1, &(0x7f00000001c0)=r9, 0xfffffffffffffe84)
r10 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x401, 0xa8200)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r10, 0xcabcb000)
r11 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x4)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
ioctl$IMCTRLREQ(r11, 0x80044945, &(0x7f00000000c0)={0x20, 0x0, 0x4, 0x1f})
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 711.448608] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 711.460097] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 711.510032] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:747
[ 711.518667] in_atomic(): 1, irqs_disabled(): 0, pid: 20642, name: syz-executor.1
[ 711.526227] INFO: lockdep is turned off.
[ 711.530298] Preemption disabled at:
[ 711.530314] [<ffffffff86a000e7>] __do_softirq+0xe7/0x9a0
[ 711.537241] PM: Basic memory bitmaps created
[ 711.540095] CPU: 0 PID: 20642 Comm: syz-executor.1 Tainted: G W 4.14.167-syzkaller #0
[ 711.540099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 711.540102] Call Trace:
[ 711.540105] <IRQ>
[ 711.540118] dump_stack+0x142/0x197
[ 711.540126] ? __do_softirq+0xe7/0x9a0
[ 711.540139] ___might_sleep.cold+0x1bd/0x1f6
[ 711.546121] PM: Basic memory bitmaps freed
[ 711.553623] __might_sleep+0x93/0xb0
[ 711.553635] ? tpk_write+0x5d/0x2c0
[ 711.553644] __mutex_lock+0xb9/0x1470
[ 711.553652] ? trace_hardirqs_on+0x10/0x10
[ 711.553660] ? tpk_write+0x5d/0x2c0
[ 711.553666] ? trace_hardirqs_on+0x10/0x10
[ 711.553675] ? mutex_trylock+0x1c0/0x1c0
[ 711.553682] ? trace_hardirqs_on+0x10/0x10
[ 711.553692] ? debug_smp_processor_id+0x1c/0x20
[ 711.553702] ? perf_trace_lock_acquire+0x10d/0x4f0
[ 711.624734] ? perf_trace_lock+0x500/0x500
[ 711.628957] mutex_lock_nested+0x16/0x20
[ 711.633004] ? mutex_lock_nested+0x16/0x20
[ 711.638370] tpk_write+0x5d/0x2c0
[ 711.641807] ? lock_acquire+0x16f/0x430
[ 711.645765] ? call_timer_fn+0xc8/0x670
[ 711.649726] resync_tnc+0x1bc/0x3d0
[ 711.653336] call_timer_fn+0x161/0x670
[ 711.657206] ? sp_put+0x40/0x40
[ 711.660469] ? __next_timer_interrupt+0x140/0x140
[ 711.665296] ? lock_downgrade+0x740/0x740
[ 711.669431] run_timer_softirq+0x5b7/0x1520
[ 711.673738] ? sp_put+0x40/0x40
[ 711.677005] ? add_timer+0xae0/0xae0
[ 711.680717] ? sched_clock_cpu+0x1b/0x1c0
[ 711.684849] ? check_preemption_disabled+0x3c/0x250
[ 711.689852] __do_softirq+0x244/0x9a0
[ 711.693637] ? sched_clock+0x2e/0x50
[ 711.697338] irq_exit+0x160/0x1b0
[ 711.700775] smp_apic_timer_interrupt+0x146/0x5e0
[ 711.705602] apic_timer_interrupt+0x96/0xa0
[ 711.709904] </IRQ>
[ 711.712128] RIP: 0010:lock_release+0xaf/0x940
[ 711.716600] RSP: 0018:ffff888037f578d8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
[ 711.724303] RAX: 1ffffffff0fe2d28 RBX: 1ffff11006feaf21 RCX: ffffc9000742f000
[ 711.731558] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880571baafc
[ 711.738814] RBP: ffff888037f57970 R08: ffff8880571ba280 R09: 0000000000000000
[ 711.746075] R10: 0000000000000000 R11: ffff8880571ba280 R12: ffff88807d9c9410
[ 711.753328] R13: ffffffff8129e3d9 R14: ffff8880571ba280 R15: ffff888037f57948
[ 711.760603] ? __do_page_fault+0x4e9/0xb80
[ 711.764834] ? lock_downgrade+0x740/0x740
[ 711.768966] up_read+0x1a/0x40
[ 711.772158] __do_page_fault+0x4e9/0xb80
[ 711.776205] ? __mutex_lock+0x36a/0x1470
[ 711.780248] ? vmalloc_fault+0xe30/0xe30
[ 711.784305] ? debug_smp_processor_id+0x1c/0x20
[ 711.788959] do_page_fault+0x71/0x511
[ 711.792757] page_fault+0x25/0x50
[ 711.796196] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[ 711.802062] RSP: 0018:ffff888037f57b30 EFLAGS: 00010206
[ 711.807412] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
[ 711.814672] RDX: 0000000000001000 RSI: ffff88805a681b00 RDI: 0000000020b88000
[ 711.821928] RBP: ffff888037f57b60 R08: ffffed100b4d0400 R09: 0000000000000000
[ 711.829199] R10: ffffed100b4d03ff R11: ffff88805a681fff R12: 0000000020b87500
[ 711.836455] R13: ffff88805a681000 R14: 00007ffffffff000 R15: 0000000020b88500
[ 711.843724] ? copyout+0x9c/0xb0
[ 711.847075] copy_page_to_iter+0x31b/0xc40
[ 711.851299] pipe_to_user+0xb0/0x160
[ 711.855013] __splice_from_pipe+0x348/0x780
[ 711.859318] ? iter_to_pipe+0x570/0x570
[ 711.863295] vmsplice_to_user+0x197/0x1c0
[ 711.867428] ? __splice_from_pipe+0x780/0x780
[ 711.871909] ? perf_trace_lock+0x500/0x500
[ 711.876131] ? lock_downgrade+0x6d0/0x740
[ 711.880267] ? __fget+0x237/0x370
[ 711.883711] ? __fget_light+0x172/0x1f0
[ 711.887675] SyS_vmsplice+0x131/0x160
[ 711.891462] ? default_file_splice_write+0x80/0x80
[ 711.896378] do_syscall_64+0x1e8/0x640
[ 711.900248] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 711.905078] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 711.910251] RIP: 0033:0x45b349
[ 711.913424] RSP: 002b:00007fa78f391c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 711.921117] RAX: ffffffffffffffda RBX: 00007fa78f3926d4 RCX: 000000000045b349
[ 711.928374] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006
[ 711.935630] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 711.942885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 711.950138] R13: 0000000000000be4 R14: 00000000004ccc7c R15: 000000000075c07c
02:59:33 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x1a}, r3}, 0x14)
02:59:33 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f00000002c0)="a71fc28d28a766ec287eb442ef42623a999566bc150d3d64a7b66dce0b0440b34645f34a58929c401f368e2f0538745abcdff9cf744595ea6214cbba930d3d18ba059f50c5a2fa72b3cc3e7866da6edd4dec7eaba6821f07a06b621d558bc9ed6a94861d641f52287fbf56a689e46dbfea72c30af774ecc555babc2303a87bbedec0c781556cd27bd5940dee0a3b998c041590a00792a52d3e58ac", 0x9b})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r2)
02:59:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
signalfd4(r0, &(0x7f0000000100)={[0x80000001]}, 0x8, 0x8ed851ff0564d37d)
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
02:59:33 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xd0d)
[ 712.054050] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 712.070397] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 712.076727] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 712.095986] PM: Basic memory bitmaps created
02:59:33 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000040))
[ 712.101964] PM: Basic memory bitmaps freed
02:59:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x990000, 0x1, 0xfffffff9, <r6=>r5, 0x0, &(0x7f0000000100)={0x990a68, 0x4, [], @p_u8=&(0x7f00000000c0)=0x1}})
accept4$inet(r6, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x81000)
[ 712.146154] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 712.180517] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 712.188706] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 712.208705] PM: Basic memory bitmaps created
02:59:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x2000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x803, 0xa0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000005c0)="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", 0xffff, 0x4008c41, 0x0, 0xffffffffffffffb5)
close(r4)
fstat(r4, &(0x7f0000000180))
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f00000005c0)="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", 0xffff, 0x4008c41, 0x0, 0xffffffffffffffb5)
close(r7)
getgroups(0x1, &(0x7f00000000c0)=[<r8=>0x0])
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r10 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6}}, {{@in=@loopback}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmmsg(r10, &(0x7f0000007e00), 0x400000000000058, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x20000000, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
setresgid(0x0, r8, 0x0)
setresgid(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0)
r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
write$binfmt_elf64(r11, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
fallocate(r11, 0x100000003, 0xfb7d, 0x28120001)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r12 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r12, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040))
write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r13 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r13, 0x7ffffc, 0x0)
fallocate(r13, 0x100000003, 0xfb7d, 0x28120001)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xa2ffff)
02:59:33 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x404800)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x11, r0, 0x81000000)
02:59:33 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r2)
02:59:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15898, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18)
write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:groupadd_exec_t:s0\x00', 0x25)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80c0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/93, &(0x7f0000000200)=0x5d)
[ 712.235654] PM: Basic memory bitmaps freed
02:59:33 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040))
02:59:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040)={0x0, 0x8000000})
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
rt_sigpending(&(0x7f0000000200), 0x8)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xfffffffffffffff2, 0x100200)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, [0x2, 0x0, 0x72e30ce4, 0x9]})
[ 712.302292] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 712.313122] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 712.324532] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 712.352161] PM: Basic memory bitmaps created
[ 712.357533] PM: Basic memory bitmaps freed
[ 712.387898] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 712.394993] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 712.401501] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 712.484890] PM: Basic memory bitmaps created
[ 712.524864] PM: Basic memory bitmaps freed
02:59:33 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
02:59:33 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r2)
02:59:33 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x30080, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x626, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x808)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18)
getpeername$llc(r5, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000016c0)=0x10)
sendmsg$sock(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="60d66b99f574e6d4f81252184f79321a433eea42d28731824eab15e275d6b7e578bff8ae004f5656bc526328ffa1b78f143ef2ec82fc653c424b2907b710ec17bb41f18a29fe2b9fd21238792e696add38beb691910ab18815dc302ce587a1df895c7492baf5d324810c9ac19ad3c2281ce6f52e8ebcfaa21b04f13884c2c2e581b419acdae25552e8abba4e7059b4a2a8ddc88e53f53b32a8b9257f8a17f7995427fe3b4d2a5ce2516c3b995e94b2af7d9ab8bf17", 0xb5}, {&(0x7f0000000580)="79b1fa37efbd57cdde276a850e098fd80d187e72035709e30514b9632589ac512a66ac3f5f735e01f1ccd665d1177a510eccf5fcc2c8ad", 0x37}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000002040)="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", 0x1000}], 0x5, &(0x7f0000001640)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r10=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18)
ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f0000001740)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001780)=""/41, 0x29})
r11 = socket(0x8, 0x2, 0x7)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r11, 0x800448d2, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{@none}, {@fixed}, {}]})
02:59:33 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r4, 0x0, r1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)=0x20000000)
02:59:33 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r2)
[ 712.884523] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 712.893671] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 712.902208] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:34 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
[ 712.927434] PM: Basic memory bitmaps created
[ 712.932945] PM: Basic memory bitmaps freed
[ 712.971802] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 712.982578] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 712.991604] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 713.016085] PM: Basic memory bitmaps created
[ 713.021398] PM: Basic memory bitmaps freed
02:59:34 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x2000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x803, 0xa0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000005c0)="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", 0xffff, 0x4008c41, 0x0, 0xffffffffffffffb5)
close(r4)
fstat(r4, &(0x7f0000000180))
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f00000005c0)="34f249b49ced7c7583c5b8b1bca882b9e10586514f7a06a30c8c4facde7b77a47242867932b0d2f4cf4834a0e60dc45f907ddb3cf01e5e6fbaa9b4688af713f657e9df20e97fdd04102dc57cfcb6c14affe3ccb34f54c2a776d7db4642eca3b7375cda3174d4ff779b77f9b9645443b6284a0a0c2919ce325aeaaed81470d10b779b11c649a3724a26ff7050cc70008e5c2046973a3f12b4dd25db98b0f333afe3c72e8d0c2ffa7305b242b6a8c6b33b51390193a3f95abc477d7347c7525e33a43bcfb964190e8650400cd6b0da4a8d79fabbdb59683a564a412b38a9de5d4f7fe1cbb99fdb9de2bf599fd520e863181fabc70a3414748c84f1b65bbde8e52b74d6dcc684424edb00dc47bd59a9d45d5fcfa611417a48f701670de4c1b8c0a6bc228e09ad03c40de3ab3f751ae100292a2a8b67dd66bc9c2594c1996b6f89e0a2647b3258e24bd0f96dd693fe132e96f700f7f2306a4a7a4259ce3741c3f57d8005f5a49fb2c9caee92fc0be57918c21c61e01f63266f78949381dd786c153c2636e275c9294c413ad83f7ae66d8cdbd12d506e123244cbb2ed8e4ba9b236b42d2c93e8120451426932c10c2bc783c9cfc9aa44e39641fbd3159c6f4d080c4c9e08fad7197fcb5d60b5f26864efd316d6a08db155d2288e284ee073d598f8b2c7", 0xffff, 0x4008c41, 0x0, 0xffffffffffffffb5)
close(r7)
getgroups(0x1, &(0x7f00000000c0)=[<r8=>0x0])
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r10 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6}}, {{@in=@loopback}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmmsg(r10, &(0x7f0000007e00), 0x400000000000058, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x20000000, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
setresgid(0x0, r8, 0x0)
setresgid(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0)
r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
write$binfmt_elf64(r11, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
fallocate(r11, 0x100000003, 0xfb7d, 0x28120001)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r12 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r12, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040))
write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r13 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r13, 0x7ffffc, 0x0)
fallocate(r13, 0x100000003, 0xfb7d, 0x28120001)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xa2ffff)
02:59:34 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x3c, 0x4)
02:59:34 executing program 5:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=0x38)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r1)
02:59:34 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
02:59:34 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
socket(0x2, 0x1, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0xfffffffffffffff5, 0x2}, 0x10)
r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8d19bb4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000100)={0x2d, 0x40, 0x6})
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b80500000066b9d80000000f01d9670fc79a1c00000066b9470800000f323e0f78e5ba610066ed260fc75de666b800a000000f23c80f21f86635080080000f23f866b8008000000f23c00f21f8663500000a000f23f8ff270f01cb", 0x5c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
fchmod(r8, 0x180)
ioctl$IOC_PR_PREEMPT(r5, 0xc0386106, &(0x7f0000000040))
[ 713.119115] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 713.126655] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 713.135444] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
02:59:34 executing program 5:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x5c080, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r0)
[ 713.162184] PM: Basic memory bitmaps created
[ 713.167986] PM: Basic memory bitmaps freed
[ 713.196634] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 713.204733] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 713.214735] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 713.266101] PM: Basic memory bitmaps created
[ 713.346336] PM: Basic memory bitmaps freed
02:59:34 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
02:59:34 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/956], 0x3b0}, 0x1, 0x0, 0x0, 0x90}, 0x10)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb6d)
close(r1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10}, 0x18)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xff, @local, 0xad}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x80, @ipv4={[], [], @multicast1}, 0x5}, @in6={0xa, 0x4e20, 0x8000, @mcast1, 0x1ff}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x7fff, @mcast1, 0x18d}, @in={0x2, 0x4e21, @rand_addr=0x8}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @rand_addr=0x54}, 0x6}], 0xdc)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xd3913e204a77ca8d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000040a3894d3a3bd2f811d81693572b988fde5ecf1e34780299cb9b2b2eb80284625d819cb53ddfc58f920a2ecd8cbbb8ed1a97d3fc27e23682347637bb485d2a46b72393c14d349787f193b800"/88, @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf250200000008003b0007000000050029000100000008000b0000040000050037000100000005002900000000000500300001000000050029000000000005002f0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:34 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/224)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x3}, 0x0, 0x0, r1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0)
02:59:34 executing program 5:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r0)
02:59:34 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(r0)
[ 713.697090] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 713.703607] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 713.709948] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 713.726067] PM: Basic memory bitmaps created
[ 713.731398] PM: Basic memory bitmaps freed
02:59:34 executing program 0:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000140)=0x8000, &(0x7f0000000180)=0x4)
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/247)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x4, 0x89011, r3, 0x81000000)
[ 713.766771] PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 713.773254] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 713.784357] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 713.806097] PM: Basic memory bitmaps created
[ 713.811369] PM: Basic memory bitmaps freed
02:59:35 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f00000007c0)='./file0\x00', 0x0)
02:59:35 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x250902)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402001, 0x0)
syz_open_dev$mice(&(0x7f0000001300)='/dev/input/mice\x00', 0x0, 0x70082)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001680)="bd238a89415fa31213a57cfe0d31c72137e3dd35711603ecd386674f4569bffffe2d331cd758d9db6e5f7ce62828cca633b9d14ae7f12fdc277dee5a2e2c995af8041041aff54e077d6db652cc0b2115dc2efb7043c5835c55f18368af6f3d337a40f035ec09e32d17a0b0d3cec44764adfbf4d4acde69dc73e1d96108cb368015ea3368baddcced8a76ed84392377509f4a6731d9b131ef8a2389b480c2743792e7bf7e355dcd", 0xa7)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000000, 0x89011, r0, 0x81000000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000001200)=0x800000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000012c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, [], 0x32}, 0x7fff}, r8}}, 0x30)
read$midi(r3, &(0x7f0000001180)=""/66, 0x42)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000001240)={0xa, 0x5, {0x56, 0x100, 0x3, {0xfffe, 0x800}, {0x78, 0xfff9}, @rumble={0x7f, 0xff0f}}, {0x52, 0x23, 0x8, {0x5, 0xe7dd}, {0x40, 0x9}, @rumble={0x6, 0x4}}})
r9 = semget(0x1, 0x3, 0x68)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r12}}, 0x18)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x800, @ipv4={[], [], @empty}, 0x100}, @in6={0xa, 0x4e23, 0x0, @rand_addr="c76be167a7c174a45b8d9149a91d2a1e", 0x8d96}], 0x38)
semctl$IPC_INFO(r9, 0x4, 0x3, &(0x7f0000000180)=""/4096)
02:59:35 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r0)
02:59:35 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r0, 0x0)
02:59:35 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
ioctl$KDSKBLED(r2, 0x4b65, 0xfffffffffffffffd)
r5 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r5, 0xc0386106, &(0x7f0000000040))
02:59:35 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r0)
02:59:35 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400080, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x401, 0x4)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r4=>0x0})
connect(r2, &(0x7f00000002c0)=@xdp={0x2c, 0x8, r4, 0x3}, 0x80)
02:59:35 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0)
02:59:35 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5418, 0x0)
02:59:35 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r0)
02:59:35 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/183)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
02:59:35 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}}], 0xfcd2)
02:59:35 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
02:59:35 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0)
02:59:35 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
close(0xffffffffffffffff)
02:59:35 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0)
02:59:36 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0xa5, 0xda, 0x0, 0x0, 0x0, 0x0, 0x2, 0x84091, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x16}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0))
ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040))
02:59:36 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0)
02:59:36 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001fc0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x1000, @loopback, 0x6a5}, @in6={0xa, 0x4e21, 0x4, @remote, 0x60000000}], 0x68)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000040)='F', 0xfffffffffffffea0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0)=0x3, 0x4)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x89011, r0, 0x81000000)