b7751c491e3bc3debedfa416ca6c8f7344cbacce05325e27e6251a697bc6b59624502cea912b9d7d499d0060e5ed0602ea0b20bc6459f415cae420ebe6c2ca9b5310b6a6a121501f81a50e80d2c8b3fc", @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0xc6c2, &(0x7f0000000040)=0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x24000, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000100)) 12:52:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x4, 0x2, [@gre_common_policy]}}}]}, 0x38}, 0x1, 0x3e0}, 0x0) 12:53:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:00 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100), &(0x7f0000000180)=0x4) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:00 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$RTC_PIE_OFF(r2, 0x7006) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 12:53:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x12000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000820}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fddbdf250800000008000800ac1414130800020039491217"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x70d2118033ba3038) 12:53:00 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100), &(0x7f0000000180)=0x4) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:00 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_getscheduler(0xffffffffffffffff) iopl(0x40) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:00 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x100, 0x4, 0x33, 0x4}) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:01 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:01 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x10) 12:53:01 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$P9_RRENAMEAT(r1, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:01 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x507100, 0x1, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:01 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) dup(r7) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:01 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, &(0x7f00000017c0)={r4, r5+30000000}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffff, 0x181000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r8, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r9}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', r9}) r11 = getpid() sched_setscheduler(r11, 0x0, 0x0) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r12, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r11, @ANYRESDEC=r13], 0x8, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001780)={r12, &(0x7f00000006c0)="29a025d6ac8586f8dac0da7134a2ae7b2dc346d78ea649f3f629e2648ab87858337edc24a5bd641952714ba2f6073a8c3b709b27fa1e67d05a629d778b68657e1a8b4b6346936f07146f31f828815677bafcae2814843751af60d732b832fcccf92f90d6f6097a39675902ad035a594344b3847ecda3ac6afc343f2679f72b1d65b5ef5482a66f6f8046715c0c6bf01a9c750486bc46b29bf841caf23902071ad61d30f5114f1c803e6ae30392ca822e54b31f6170fddb8cd93aaa0063774ec67b015849091160e88bbd98d21a10e7ae55578865ce351155d1e304b5a3b52d718bbea01479087e2c5fc4a82daa984e6a47b5c5d85041b3097de55204803a3123fa20816f8f3118ed204a0c9190a6cd39aabea3b1f8a8c5e8606bf22c05bc5a919a0f6a20b837d7eafd6d98a3f52c4dc86d9e29f1ff9f4768ca2bbd91db92c0a4584d005760531f07724322d3c771fb9ab23f647fe3809e6dc95fa0f62c1f0116bf61c44d663bd4852f1f7870107758558a28eb143a8712c078841d336c3eaeb9c567e7c770539c6e2056d34cb1278efd5a74f49bec4fc362d55c05773e6ccd6ff9b2bcb800b3803992920cadeb8db7b8b30c0bf25a425cd8bfe47d0b2672f288bea9a3ce2aabcb1dfb944d28cc6951e7a46a850d50c37499cb97e40f9628b80e10890a4bad8d346cb8a8fe2853e522cbe9dceb5b7879f3334df4882173f3693251600ed8c57d7f03b5a723e89258a726e039f8330b6366a16c2181bc512755d02c30c7a9cc4b0be4c2f2f00a4eddfa4e64233f148eb9f766aed47746a62c2e1c50024dd427d8aba74e0f3079b527b7908cf43f6c527bba4d2e0b614f389e46253bd71510056979792da4d1d599da9b2fda053852f4b02fcaae1283022889cf8bd3674d90d19ea16432c427143ba7caea2a608fe1e5d723f7d0becd5eb417a6a988a6d73a2e5c57d7d107552df995e4876ba7dad13c370430996ac5c4dfe85ab0e744e302fcd57cc431c292806580b6363b42287172d716c8513abbc720f886b69d93be07b3c033f4df3df3f07b86425484150fc69160292cad829b372a5bfff9e819d1fdab95fa329d30f71aebf622bee671c17fd6a10a583e5fa8875fe11f2327388302446b4cf15e04f39bcc39d5ab27b59696dedda1ddc7c7a794c07b4f860d0437b81c0ce6572a560121def49775d116db9d15dae2288ca014b0b3e74bb1b00d64ce9d6b69db983b9cf2f605d8f0e4de890eb9ca52d9e520d0d692f36c363f4426f08acb9a2c3747b6782f75513d29fd584d3019066b90ef5502a6fb4c23382ab7ef3505df953bf39195d0b0b158e8ed25bbbacdca213772fd814dfbaba3e92ff5410d10bd344f12dad53b383de5d9d3581d890e96f5494ff6febf14397b9e230a98c40e45361f24866cefaef5e12b912eab5777220951e4b5315d49f53c0741cd0f79119abbbfb92f87c5e113b305f40c2c40086dba161b3c1d8dde7ee1688940eb2ba2be05ed8c8874f0b1c8c38dad46d3c6b904188943148ac38547e6343100432313495985c6effb7ae3463962f960b0311040334bb27875154827e8d5e0eea11b95de98d0b089a6085b0d2beba9416f32040cd5fc19f8ee194bd60521ab87555ac5af14ccd52b1eb48d42d0597e58b5aa81314801ae8e5ca55d91a14076d18026dcc0557bc0690b2a5d8cd91877960a6bf0530ea19c42c93316d6ed30fefd2b243446f8c50848965ce82b85a92182eaf13cdb6b46d314025f0bc4114c27642abb2a73c8ba706331a689fe63dc2d05f070e70516f4ec833b8395587e8703cb5d08af4ff410a612aec642d060e4e2120a477e423325847e0f6f2092fbf8e8f60902bdcc9f7ca89ba19d4314ba2391fab2c3416a0f3fa853a86d776865574cb5fa94faaee4567c348f1006daccfb43f891a44d40f7db21fe19567adc2f5234f70b452b42de6442cd646b37060d5a9760c54225ed1cf87837e987277e35636eab85db7ff56bdaf0b5c428eef6febab7416533fba276db736aec99041350d4913775c291d85b9f02d06c513cd363b71b14e75a08044df590701cf2760f3ce77c453476d4cbeb493d8e38cf0c07bacbba0cb7f6760d2c1996dfda8ac81f6ac9cf120cb58c6913b3fc4c4378b148ed0ea5749544c29604b810730a2cf3ad368d941d3af5507d4109868153ec35ee406badbe862ad3d086670d285faa72e5ba90da231f1b05b29145005aba47ad056bce5005801898b316ee72a75ab6d7bfb2dd2e29bfc109788933c6144257625993f686f70c71b703ffc90bae92d80543e10dc95372a33e08ffb00ba9c4fa692de2245f613714b3e558f9a0605a42ea196f979a838b68002bdaa880ed289a50eb0be2aa41723fe0977eaeee7a794a70d52b2fbbfb65797c55283dcb6ee4cfe03d76493541698502c4230e1778e5b57825a943a6bd307c39a1d5fd7e37797700a1fae628ec783883aac805412ca884a5122866520f667ca58bda0244b59367cd9878e92185bd8ee7d56ac24159f1a109538864e0259a71041711c4211b9e68b8ccc6ae249f892b485e1edd4c4fb56ac2221f3e69d9e2ba71cb968fafa48448d5f78fdb12c4155bf670f9645a02b9c50bbf5192337bc1ab8b606d8651a34ee4b53a9bdfe21e9aa6c71f6d76b70297d8afe0e196c2e300bbc0ac13a6dbba75d4a96628c41fd39bf1e5722e842f1a18e48c6525cb1b6963f5e15262019542fe9e56a43d00924d46cdd3106b83fc285aa002b6425797a4d66cedc4eefbe37e8b80243cd06e284d9fb2b97431493ce4c55eac1090aa40418795c7e02866db7ce41dbb867f40a36cff556a559a4d3568bea0f535056891aec7f72eee84b9bb0654977ba3cddfa7b842621e1c674d6c314e977a1d6d0a2096474e6643746d92aeaa2d746c0ba479c77fa376520da1353d0e1477f5b443f459155ef734a85c6c841fc2717dedd94b20cf59c89ee42c6e892e4d6740c05eee1f7aa1c40924f5b09e7a6a0df9cef607c8bf84418f187dfa5bd04192ecc830fd1d14ea240828f3f80beecdc7ef4c8f54480ed38c471320cf3b65e7ba63f602e73fefa0a377b82edee962c6e9f83376d09b81fba8f740d4a9f0f8d65d09816b2a510e4f455d4431973f7fbdfa96adc84fa4158d6fec8ef9aa755691c3064999c29bf0debbb9253cf200df2f8b8e35ef0b78553b7b20d9c8c736bece372b1d1ac32ed4008045fe1a3a5e020f8c0118b0aa03eda78fad9d73343551c56ca6d388db0c32bfb7465932bc50002fd4f166a24b8a1b49138a528ce5786322531eb0b161a944b9454b4f8bd8afb40eb672dbdc2f6c929808c03aea891408c4d49ae340e9b19c74e5a2a029e102f0fce5e02ae2e3acad62772fcc654ea24084bd965eae1ba13ac39b5354399899c3890e589aedcf86485d4843e67443ae75b1efe62eb5683702809e22d7c2c553833adf493f08c7fc9be6119cdc123198af6d853b8b67f192470d5c157e9278f7d5ae10f9e9648ac4f8d66fb3d3fb342f172f9ddc2c6fac4f5fd639829369b4204900f7ebca696d5d8cd650ea3d54570be46c94b15950586f6d368ddd216e0bc6d41572742baf670afca710ebc8fb4395fe05c5ce58af54816fda6c7da981f2c0b576013d14fbd57abfeb33e890961782aead40649ca7e3d31fe3293bf12d08c9961fa8d25f531e61ffae0edf9984f49750aa44bcdb6d8af663c0878d79f6f1ddab8367a1798bf82c14bb914def0c5a30996b1953ea4b792bfa14a5eb9c5e13f8cfb5f1c83ad7769b45b015a8f58a77a7ae3b7fc29b8e47e5e44092f19f52f96270e72fddc079d53891ca1e834f464cf3a0eb7b9fa82d28429e60f036928db1ab03bd6753329230b016899d749278ee4939679ad92ae6819eae1cde98a6cc0622fcdf1eea6b81b7ba22eb1e4da362a519070464edeeb2a95dfe304e08191c3eb9d1ce64c8282aebda6a152eceb2ca5f049c321ef3df5500765a4104551d603ac352f99b7397a7546a0fdfc7fa7753f64951797c4bd6d797c6587aa458248396f6b13a3c7554a81f390e9a030304b964c797cd4ac6ec2282f2617ff40dfad3e2f7a7dcab5c6c8671789ef36e2501ae2b42a2182a3a2a54982aebcb01eb80ac5c5b606e5c80f636d595740d9ff77881d7771b23d3a17a9c81ba558afb6534ce392cb664ae5b9fcbfad97ded00cddb286602274581121da92b72ad766cbead31483def86cca5828cd9d5a4158fbc9be12ff12fc153c5024e346a74b2dcf1ae2b12b2d347c034c7f96ccafcf75fc40dea7b7cd4ebc64c9fd4b8ba3bc10ef61068b62954e64da3f6b5af444310cc2a1b4ab4ed275609f02f19bd33e7c62aac602bc234b2ad2c0757691af94cc9f5d850518f52f2f0d5c8e243f7b34149625a642b734049486547b54434239da964e1ad7c8e7a6245ec95c5ad178c709b7724720f7f38dc0a417675542d7e99726bbc083e68e1fc6daa040cc107e0520a7017a6f36ee1b8a4553f36ffcf57161fb39281972e0b09a0d3f927d909f4789e499025814b6d96c4f532f498fd8069636995ea296689d6fa2189c82ac25e9a057b79c3cc0612868ee7fb9d16d53f2d3ec35ccb0861e2a909dab7f0fbb7d4e94a012b1aafdaffa620898e9d78ea791a8a5ad27b25d2c0ed530a5cc30fdf510a8ee8ff17064dec6303c886c6750c498459455d3c5c5c5715d086f6d11ef84da533465fb7ccf5b7ab8eaa3b8260cad3bc843bbd254f75fb9c4c8756eed908c8152b619ca557748b3111da404a99fe199f5f9606bd09457b44ad3653f95ea23354ebb17dfdeb356048c70e14c0b18781a19e6a2aefd1141c6bfafe21cb76ca87c09ec7891c4301bbda98e042ab602b16c01905e76a9c3cbf5a35ef2c16cec628d1bb78d815178edf46451528a14713178e7ba14e4a8948e33ae08ae255778b5fff5d716368cc200d6581578e1039a26052082a7c28ef0fa92ab0c911503541c10a2f2944092764c2510689d0eec6902be2884279adf126f5227ac2042a1e333f0316ef8fa0b55189259caea927bee85c3e0a5bc4287d087431e515e62ff1e7b9c0f118f28e859a4cdee1760882abf39c6334f0e140e7be2578ff54ad89b7ca3e859876e9e8370148435c814e505ba304c075ef6e8620d44877f75e791402543adbad55a66e73329a6292512c09a8a3e5432016ccc8b2d95db752b83e2d7de46e48cc4bcb55b206c6c99702558be56f1650b57618dbac95f4abb061c285a3146c6022746913dedd8608c07ca5704af163d1369d2554a392f12532dbdbd5b8d383b306a0145dc9c224ed7c57ff3682f525d26b1a7aa1d1ae1d7b1085644f171af56bc21fd06f96d0c74e7fef00111f8d57e1bec1aadb37336d6324ffb1aaf7ba09ca2b1967faf85fbcb918acb79d289e9da36dabd9b8073e2883462677d4e91d8362b9841f902e908f0319e0b3fc053015f7844ee3fbf0674355b8996704397fdde665600b911ae66446028df1257330e5c9e06bf20fbbf7ef9b4db8455d2facae93a9740775d40c374c407e24ee214cd894200b9203cbcb486ae988224a01f648198980ce99bd6a84ec618d3b9ef751a0f38389701acaada21350edf02f94ae8541b2511c6f5038c70685f0ab5c84bcb3cbf6283273595921333e137503127e464f82b49a118a03dbb834469b8c5c3a75211e3190e671e62d1feb9d2276000ab6c399f536bda38d89b65b5231c47a2eda0f70aa8a6dac562bfc3eab05ced7475f125a97d7c2691779b2784ca0f9bd0f49856c7963f143db9a9d44fa022e", &(0x7f00000016c0)=""/158, 0x6}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r14}, 0x3c) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x1, r14, 0x13}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @hci={0x1f, 0x3, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)='gretap0\x00', 0x6, 0x2, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r16}, 0x3c) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000600)={&(0x7f0000000100), 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x194, r8, 0x408, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x178, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xe8c}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x10}, 0x4) 12:53:01 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100), &(0x7f0000000180)=0x4) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @default, 0xfffff801, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 12:53:01 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r3, @ANYRESDEC=r5], 0x8, 0x1) r6 = getpid() sched_setscheduler(r6, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r6, @ANYRESDEC=r8], 0x8, 0x1) r9 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r9, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r10 = socket$packet(0x11, 0x3, 0x300) r11 = dup(r10) setsockopt$packet_int(r11, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r9, r11, 0x0, 0x2f, &(0x7f0000000400)='wlan0mime_typecgroup+}[-/selfGPLmd5sumeth1+]\x9e.\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r3, r7, 0x0, 0x7, &(0x7f00000003c0)='$GPL&]\x00', r12}, 0x30) r13 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r13], 0x8, 0x1) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000300)={0x7f, 0x400, 0x8, 0x10000, 0x6, 0x3}) setgid(r0) r14 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x9, 0x400000) ioctl$UFFDIO_ZEROPAGE(r14, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r15, &(0x7f0000000000)="17548ad59d240696e089ec92acb1bf2eb456ac6d179a8d19a18c121c94419630048a80cef72db477cb2bc8309e0c6b3eafd991d320fd6d24c7bc833a06a06d1df24490e45372cb6e933b2081e74966af146441bfdff53e622209e5fb7135d9257a23b42ac1061e4dd03b852bd3fc13e231320ac43060e39fc639315455026a473d", &(0x7f0000000100)=""/80, 0x4}, 0x20) 12:53:02 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x2, 0x5, 0x3ff, 0x4}) 12:53:02 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000200)={{0x0, 0x5000, 0x8, 0x3, 0x0, 0x40, 0x1, 0x3f, 0x3f, 0x1, 0xa8, 0x8}, {0x20000, 0x3000, 0xa, 0x6, 0x80, 0x7, 0x3, 0x8, 0x85, 0x40, 0x81, 0x4}, {0x2, 0x2, 0xe, 0x3, 0x2, 0x7f, 0x7f, 0x8, 0x6, 0x3f, 0x6, 0x8}, {0x10f000, 0x2000, 0xb, 0x9, 0x40, 0xff, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7f}, {0x1, 0x6000, 0x16, 0x7f, 0x3, 0x8, 0x84, 0x3c, 0xe3, 0x0, 0x8, 0x8}, {0x2, 0x100001, 0xd, 0x57, 0xc3, 0xc6, 0x20, 0x40, 0x5, 0x6, 0x3}, {0x100000, 0x0, 0x0, 0x7f, 0x5, 0x5, 0x2, 0xff, 0x8, 0x3f, 0xa4, 0x1}, {0x6000, 0xd001, 0x9, 0x40, 0xff, 0x4, 0x1, 0xa2, 0x62, 0x3, 0x2, 0x9}, {0xa004, 0x6000}, {0x2d8a04ee174156f5, 0x2}, 0x20010001, 0x0, 0x7000, 0x8, 0x2, 0x4000, 0x2, [0xf64, 0x8, 0x8, 0x9]}) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:02 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1266.950517] FAULT_INJECTION: forcing a failure. [ 1266.950517] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.971195] CPU: 0 PID: 23449 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1266.979040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.988428] Call Trace: [ 1266.991069] dump_stack+0x197/0x210 [ 1266.994726] should_fail.cold+0xa/0x1b [ 1266.998644] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1267.003777] ? lock_downgrade+0x880/0x880 [ 1267.007960] __should_failslab+0x121/0x190 [ 1267.012217] should_failslab+0x9/0x14 [ 1267.016040] kmem_cache_alloc_node+0x26c/0x710 [ 1267.020648] __alloc_skb+0xd5/0x5f0 [ 1267.024294] ? skb_trim+0x190/0x190 [ 1267.027961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.033513] ? netlink_autobind.isra.0+0x228/0x310 [ 1267.038439] netlink_sendmsg+0x97b/0xd70 [ 1267.042629] ? netlink_unicast+0x730/0x730 [ 1267.046866] ? selinux_socket_sendmsg+0x36/0x40 [ 1267.051525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.057060] ? security_socket_sendmsg+0x8d/0xc0 [ 1267.061828] ? netlink_unicast+0x730/0x730 [ 1267.066076] sock_sendmsg+0xd7/0x130 [ 1267.069791] ___sys_sendmsg+0x803/0x920 [ 1267.073761] ? copy_msghdr_from_user+0x430/0x430 [ 1267.078521] ? lock_downgrade+0x880/0x880 [ 1267.082665] ? kasan_check_read+0x11/0x20 [ 1267.086807] ? __fget+0x367/0x540 [ 1267.090265] ? iterate_fd+0x360/0x360 [ 1267.094067] ? __fget_light+0x1a9/0x230 [ 1267.098040] ? __fdget+0x1b/0x20 [ 1267.101397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1267.107055] __sys_sendmsg+0x105/0x1d0 [ 1267.110941] ? __ia32_sys_shutdown+0x80/0x80 [ 1267.115359] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1267.120128] ? do_syscall_64+0x26/0x620 [ 1267.124102] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1267.129458] ? do_syscall_64+0x26/0x620 [ 1267.133434] __x64_sys_sendmsg+0x78/0xb0 [ 1267.137503] do_syscall_64+0xfd/0x620 [ 1267.141315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1267.146490] RIP: 0033:0x45af49 [ 1267.149675] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1267.168564] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1267.176261] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1267.183518] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1267.190836] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1267.201606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1267.209136] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:02 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) dup(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0xfffffff, 0x7, 0x3, r7, 0x0, &(0x7f0000000000)={0x9909de, 0x7, [], @value64=0xffffffffffffffff}}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:02 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000180)={0x80000001, 0xffffff7f, 0x0, 0x1}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="08ce19db40601bce51abc657ea8f11ed00006e9bc6c6", @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r5, @ANYRESDEC=r7], 0x8, 0x1) connect$caif(r6, &(0x7f00000001c0)=@rfm={0x25, 0x0, "b6640666d18cd379cfefda16ca98207d"}, 0x18) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1267.371055] net_ratelimit: 15 callbacks suppressed [ 1267.371062] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.371088] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.376105] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.391535] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.396969] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.402261] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.408500] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.413796] protocol 88fb is buggy, dev hsr_slave_0 12:53:02 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x20, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000340)=0x3, 0x4) r4 = dup(r2) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r9}, 0x3c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r10}, 0x3c) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf077f3a26403754f}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'ip6gretap0\x00', r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002380)={'vxcan1\x00', r11}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1267.418890] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.566363] QAT: Invalid ioctl 12:53:03 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) dup(r7) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:03 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = accept$nfc_llcp(r3, &(0x7f0000000040), &(0x7f0000000100)=0x60) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'mime_type$'}, {}, {0x20, '/dev/audio#\x00'}, {0x20, '/dev/audio#\x00'}, {0x20, '/dev/audio#\x00'}, {0x20, '/dev/audio#\x00'}, {}, {0x20, '..mime_typewlan1eth1&'}], 0xa, "1bcfc2891a"}, 0x67) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000000)) [ 1267.812499] QAT: Invalid ioctl 12:53:03 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000000)={0xe, "cea74aa314509bc63e4fade9d66d4ff4e2337781854bf5b06218779cf938c74df349b44ebde8c58f1b7d0c1b2fd28787247e9ab50b9ff5ecb3eab9ceb537e65abb96e6420f787101d2ae60406d43b9b0649b06b5dedf6d6e88dc8eb24b6daf8690c002853f7371444b926811a099d6198ad752b5a8fca66856ef2843e6fe1b64"}) 12:53:03 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x9) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x120800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') removexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)=@random={'osx.', 'vfat\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, r7, 0x55c68fdd14c2618f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4d6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xad67}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa75d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x800) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r10 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r9, &(0x7f0000001400)="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", 0x600) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd25, 0x1, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x884) sendfile(r9, r10, 0x0, 0x16000) 12:53:03 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) [ 1268.111732] audit: type=1804 audit(1579006383.574:166): pid=23704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir958444113/syzkaller.pq1WMz/3771/file0/file0" dev="loop4" ino=128 res=1 [ 1268.177500] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 1268.186105] audit: type=1800 audit(1579006383.584:167): pid=23704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=128 res=0 [ 1268.195404] FAULT_INJECTION: forcing a failure. [ 1268.195404] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.209508] FAT-fs (loop4): Filesystem has been set read-only [ 1268.226815] CPU: 1 PID: 23790 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1268.234635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.244010] Call Trace: [ 1268.246614] dump_stack+0x197/0x210 [ 1268.250255] should_fail.cold+0xa/0x1b [ 1268.254151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1268.259274] ? lock_downgrade+0x880/0x880 [ 1268.263435] __should_failslab+0x121/0x190 [ 1268.267679] should_failslab+0x9/0x14 [ 1268.271536] kmem_cache_alloc_node_trace+0x274/0x720 [ 1268.276806] ? __alloc_skb+0xd5/0x5f0 [ 1268.280619] __kmalloc_node_track_caller+0x3d/0x80 [ 1268.285590] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1268.290270] __alloc_skb+0x10b/0x5f0 [ 1268.293993] ? skb_trim+0x190/0x190 [ 1268.297621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.303164] ? netlink_autobind.isra.0+0x228/0x310 [ 1268.308184] netlink_sendmsg+0x97b/0xd70 [ 1268.312263] ? netlink_unicast+0x730/0x730 [ 1268.316815] ? selinux_socket_sendmsg+0x36/0x40 [ 1268.321666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.327200] ? security_socket_sendmsg+0x8d/0xc0 [ 1268.331951] ? netlink_unicast+0x730/0x730 [ 1268.336189] sock_sendmsg+0xd7/0x130 [ 1268.339905] ___sys_sendmsg+0x803/0x920 [ 1268.343891] ? copy_msghdr_from_user+0x430/0x430 [ 1268.348653] ? lock_downgrade+0x880/0x880 [ 1268.352803] ? kasan_check_read+0x11/0x20 [ 1268.356958] ? __fget+0x367/0x540 [ 1268.360418] ? iterate_fd+0x360/0x360 [ 1268.364256] ? __fget_light+0x1a9/0x230 [ 1268.368226] ? __fdget+0x1b/0x20 [ 1268.371590] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1268.377736] __sys_sendmsg+0x105/0x1d0 [ 1268.381633] ? __ia32_sys_shutdown+0x80/0x80 [ 1268.386051] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1268.390813] ? do_syscall_64+0x26/0x620 [ 1268.394782] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1268.400153] ? do_syscall_64+0x26/0x620 [ 1268.404139] __x64_sys_sendmsg+0x78/0xb0 [ 1268.408209] do_syscall_64+0xfd/0x620 [ 1268.412012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1268.417196] RIP: 0033:0x45af49 [ 1268.420384] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1268.439483] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1268.447740] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1268.455021] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1268.462287] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1268.469576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 12:53:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6471ce8205b7af1f8065eeae7a65731788e5dcdf", @ANYRES32, @ANYRES32=r1, @ANYBLOB="88eea6ca", @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) read$char_usb(r1, &(0x7f0000000200)=""/145, 0x91) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) 12:53:03 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1268.476853] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1268.484448] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.493561] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) 12:53:04 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x3f}, 0x2) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x25080) 12:53:04 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1268.644285] FAULT_INJECTION: forcing a failure. [ 1268.644285] name failslab, interval 1, probability 0, space 0, times 0 12:53:04 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1268.737431] CPU: 0 PID: 23801 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1268.745326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.754720] Call Trace: [ 1268.757441] dump_stack+0x197/0x210 [ 1268.761380] should_fail.cold+0xa/0x1b [ 1268.765485] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1268.770932] __should_failslab+0x121/0x190 [ 1268.775405] should_failslab+0x9/0x14 [ 1268.779353] kmem_cache_alloc+0x47/0x700 [ 1268.783458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.789221] ? check_preemption_disabled+0x48/0x290 [ 1268.794454] ? lock_acquire+0x16f/0x3f0 [ 1268.798589] skb_clone+0x156/0x3e0 [ 1268.802279] netlink_deliver_tap+0x97b/0xc20 [ 1268.806823] netlink_unicast+0x5ae/0x730 [ 1268.811046] ? netlink_attachskb+0x770/0x770 [ 1268.815492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.821245] netlink_sendmsg+0x8ae/0xd70 [ 1268.825523] ? netlink_unicast+0x730/0x730 [ 1268.830062] ? selinux_socket_sendmsg+0x36/0x40 [ 1268.834773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.840600] ? security_socket_sendmsg+0x8d/0xc0 [ 1268.845394] ? netlink_unicast+0x730/0x730 [ 1268.849752] sock_sendmsg+0xd7/0x130 [ 1268.853585] ___sys_sendmsg+0x803/0x920 [ 1268.857704] ? copy_msghdr_from_user+0x430/0x430 [ 1268.862500] ? lock_downgrade+0x880/0x880 [ 1268.866763] ? kasan_check_read+0x11/0x20 [ 1268.871392] ? __fget+0x367/0x540 [ 1268.875153] ? iterate_fd+0x360/0x360 [ 1268.879003] ? __fget_light+0x1a9/0x230 [ 1268.883009] ? __fdget+0x1b/0x20 [ 1268.886407] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1268.892037] __sys_sendmsg+0x105/0x1d0 [ 1268.896385] ? __ia32_sys_shutdown+0x80/0x80 [ 1268.900830] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1268.906046] ? do_syscall_64+0x26/0x620 [ 1268.910046] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1268.915432] ? do_syscall_64+0x26/0x620 [ 1268.919436] __x64_sys_sendmsg+0x78/0xb0 [ 1268.923528] do_syscall_64+0xfd/0x620 [ 1268.927443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1268.933179] RIP: 0033:0x45af49 [ 1268.936406] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1268.955848] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1268.963573] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1268.970861] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1268.978143] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:04 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000180)={0x80000001, 0xffffff7f, 0x0, 0x1}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="08ce19db40601bce51abc657ea8f11ed00006e9bc6c6", @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r5, @ANYRESDEC=r7], 0x8, 0x1) connect$caif(r6, &(0x7f00000001c0)=@rfm={0x25, 0x0, "b6640666d18cd379cfefda16ca98207d"}, 0x18) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1268.985410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1268.992675] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:04 executing program 1 (fault-call:4 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x43f, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8, 0x1) r7 = getpid() sched_setscheduler(r7, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r8, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r7, @ANYRESDEC=r9], 0x8, 0x1) r10 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x2, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f000000bdc0)={r10, 0xffffffffffffffff, 0x0, 0x16, &(0x7f000000bd80)='trusted.overlay.upper\x00', r11}, 0x30) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, r8, 0x0, 0xa, &(0x7f0000000080)='/dev/full\x00', r11}, 0x30) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) r13 = dup(r12) setsockopt$packet_int(r13, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) bind$netrom(r13, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) write$FUSE_WRITE(r2, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x6}}, 0x18) [ 1269.149456] QAT: Invalid ioctl 12:53:04 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:04 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ftruncate(r4, 0x3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6, 0x5, &(0x7f0000000180)=[{&(0x7f0000000400)="e674628dea190a9d4406abf764468b8da4e6ddd9ef26ed57001b5f64d34829db90286a0e7dc7ff2e02da05c99849d0b28f7140bd8bbda2e3ebdda2874e6d34c21364995447dc325d2bceae1c5dc985249ff0bcbb60759e9b6641425c54bf1ef072ae26c0b10f228ba8e1079bc425081a9eba9cbb7c94c8e5b4e62383104defb6a0cd6e0481d0e9a569dc2e84b4734c3e82cc2de1d0ef5f5678422d5526bbcbc57e7867826555892ea4f15972b140884cd941a5fcc6662268e7a7e85fb5995aaf173f1864ec61720c7e8147a85de50e1806171cfd0d0a0a4f42b96f2fc1782b5f89e9dc83b787913766284a9e", 0xec, 0x6}, {&(0x7f0000000500)="a64a9bb103ac512c5dcc0caec83c7f3af3ad202702287f0643494c20ee1631330349ed57b2e7ae90fcc6d863e48349156b20187bb90fb3a0109f19c5a1fbc78e275701637381d70a051f711cf1ee936401dfb3782f9d1c4afacce08e54fca50a53acc94c78f66986f7ab7b0ca0dfe3ff737ffb41be5f41eda0f006ecf75c4f843934d2abfefd52032b2ab5012add2a5d1e3742ffcd941f9d888a761e7c8a1a9c5dde979b82c5e6", 0xa7, 0x9c}, {&(0x7f00000005c0)="69bd840c7aa8231c7192b32ced22483df2e5f0f988bb28c54f9cc86da316233d7132302d79297e0a55921b07f376de0a62b1453114511b42ba6226dfe7ec7a3c148f3f810173c60ff16176c0d704ecb883b50bb93668ed1ddba57c6375f325bd280974b9aba606c1da2bd99324f12edfd8d317c017747239abf0735440aa9675b2460cc574a98a8a0b6efe91717daa0153ba9e82048927330c86", 0x9a, 0x686}, {&(0x7f0000000680)="70a1dcb9bcd51fefbc19ac84a921dd4f3aa2ba0f3d252ecd74c85e32f46db767907ea160eb3e3609b087bcbdee996d5242dabfa6c1e819e17c1fc75d01013300add9021b9b75fa67909c1ee7e8dcda25eaab37a6ecf5be3931e0246fe43911f4c6507303ef71fa1744df8eccfade5bacb7bceb7f7031b1a49e9c4808ee02077ca26ac2c48a75a4e20b5eb3deba05fb15e2604d021ba282d2a7c1e4e28b339beb9bf07fa0f62eae6461b3195b0c04ee96f943a11c36ad2d3c3e506c", 0xbb, 0x9}, {&(0x7f0000000740)="f95fcf1b2dc83cb79822838f2bdda0528f6576738589aa640992cc3945243f98bb1b225ab8a291238bfb9f7c87f9430d29cd447db587bdf662d3cab30fb48c7cf988af3ecb1bfd362fb8fa4f1dd168c2ce3986c884e72b3b54a031ca49e078baa8fe5989461de4a6fb617ce2c4694e3f0f9e26c3a11a8cfa9d28de06142762f57bcf45daaebbdc44aeefb40265a78284e3083b0d91ec5624011fc79b540ac307f63272cd831336d7eb781bae8689eb2fd76bae6b7e9bf628de014cf6201a0bf9aa8b6f771da801ed20823dc0ad0679f46dedee4077cfc036bbd116fd04c8aa01fed58c91c1fe5cc25d42c122ce1db08182", 0xf1, 0xfffffffffffffffb}]) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1269.275551] FAULT_INJECTION: forcing a failure. [ 1269.275551] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.288340] CPU: 1 PID: 24024 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1269.296156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.306748] Call Trace: [ 1269.309465] dump_stack+0x197/0x210 [ 1269.313128] should_fail.cold+0xa/0x1b [ 1269.317151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1269.322268] ? __kernel_text_address+0xd/0x40 [ 1269.327746] __should_failslab+0x121/0x190 [ 1269.332019] should_failslab+0x9/0x14 [ 1269.335838] kmem_cache_alloc+0x47/0x700 [ 1269.340000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.346143] ? check_preemption_disabled+0x48/0x290 [ 1269.351209] ? lock_acquire+0x16f/0x3f0 [ 1269.355305] skb_clone+0x156/0x3e0 [ 1269.358899] dev_queue_xmit_nit+0x30b/0xa10 [ 1269.363311] ? validate_xmit_xfrm+0x1f7/0xda0 [ 1269.367980] dev_hard_start_xmit+0xa7/0x970 [ 1269.372365] ? check_preemption_disabled+0x48/0x290 [ 1269.377402] __dev_queue_xmit+0x2704/0x2fe0 [ 1269.381735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.387303] ? netdev_pick_tx+0x300/0x300 [ 1269.391473] ? __copy_skb_header+0x330/0x560 [ 1269.395900] ? sock_spd_release+0x280/0x280 [ 1269.400252] ? rcu_read_lock_sched_held+0x110/0x130 [ 1269.405370] ? kasan_check_write+0x14/0x20 [ 1269.409639] ? __skb_clone+0x613/0x870 [ 1269.413900] dev_queue_xmit+0x18/0x20 [ 1269.417958] ? dev_queue_xmit+0x18/0x20 [ 1269.422130] netlink_deliver_tap+0x910/0xc20 [ 1269.426569] netlink_unicast+0x5ae/0x730 [ 1269.430744] ? netlink_attachskb+0x770/0x770 [ 1269.435177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.440823] netlink_sendmsg+0x8ae/0xd70 [ 1269.444919] ? netlink_unicast+0x730/0x730 [ 1269.449179] ? selinux_socket_sendmsg+0x36/0x40 [ 1269.453968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.463185] ? security_socket_sendmsg+0x8d/0xc0 [ 1269.467961] ? netlink_unicast+0x730/0x730 [ 1269.472212] sock_sendmsg+0xd7/0x130 [ 1269.475946] ___sys_sendmsg+0x803/0x920 [ 1269.479957] ? copy_msghdr_from_user+0x430/0x430 [ 1269.484734] ? lock_downgrade+0x880/0x880 [ 1269.488934] ? kasan_check_read+0x11/0x20 [ 1269.493099] ? __fget+0x367/0x540 [ 1269.496572] ? iterate_fd+0x360/0x360 [ 1269.500415] ? __fget_light+0x1a9/0x230 [ 1269.504393] ? __fdget+0x1b/0x20 [ 1269.507757] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1269.513297] __sys_sendmsg+0x105/0x1d0 [ 1269.517276] ? __ia32_sys_shutdown+0x80/0x80 [ 1269.521729] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1269.526490] ? do_syscall_64+0x26/0x620 [ 1269.530458] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1269.535814] ? do_syscall_64+0x26/0x620 [ 1269.539786] __x64_sys_sendmsg+0x78/0xb0 [ 1269.543845] do_syscall_64+0xfd/0x620 [ 1269.547883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1269.553085] RIP: 0033:0x45af49 [ 1269.556360] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1269.575600] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.583322] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1269.590583] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1269.597938] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1269.605211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1269.612570] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:05 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x20000, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYPTR, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/83}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:05 executing program 1 (fault-call:4 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1269.887152] FAULT_INJECTION: forcing a failure. [ 1269.887152] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.909507] CPU: 0 PID: 24144 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1269.917443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.926996] Call Trace: [ 1269.929636] dump_stack+0x197/0x210 [ 1269.933304] should_fail.cold+0xa/0x1b [ 1269.937227] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1269.942363] ? find_held_lock+0x35/0x130 [ 1269.946466] __should_failslab+0x121/0x190 [ 1269.951509] should_failslab+0x9/0x14 [ 1269.955325] kmem_cache_alloc_trace+0x4b/0x760 [ 1269.960218] __hw_addr_create_ex+0x5e/0x310 [ 1269.964675] __hw_addr_add_ex+0x1ef/0x2b0 [ 1269.968846] dev_addr_init+0x118/0x200 [ 1269.972752] ? dev_mc_flush+0x40/0x40 [ 1269.976573] ? __kmalloc_node+0x51/0x80 [ 1269.980569] alloc_netdev_mqs+0x142/0xdb0 [ 1269.984806] ? ip6erspan_tap_setup+0x190/0x190 [ 1269.989432] rtnl_create_link+0x1dd/0xa00 [ 1269.993678] ? netlink_ns_capable+0x26/0x30 [ 1269.998217] rtnl_newlink+0xf3f/0x1600 [ 1270.002321] ? rtnl_link_unregister+0x250/0x250 [ 1270.007012] ? mark_held_locks+0x100/0x100 [ 1270.011399] ? debug_smp_processor_id+0x1c/0x20 [ 1270.016119] ? is_bpf_text_address+0xac/0x170 [ 1270.020646] ? find_held_lock+0x35/0x130 [ 1270.024747] ? is_bpf_text_address+0xac/0x170 [ 1270.029252] ? __lock_acquire+0x6ee/0x49c0 [ 1270.033507] ? __lock_acquire+0x6ee/0x49c0 [ 1270.037762] ? lock_downgrade+0x880/0x880 [ 1270.041942] ? mark_held_locks+0x100/0x100 [ 1270.046178] ? debug_smp_processor_id+0x1c/0x20 [ 1270.050853] ? perf_trace_lock_acquire+0xf5/0x580 [ 1270.056077] ? mark_held_locks+0x100/0x100 [ 1270.060582] ? debug_smp_processor_id+0x1c/0x20 [ 1270.065308] ? perf_trace_lock_acquire+0xf5/0x580 [ 1270.070196] ? find_held_lock+0x35/0x130 [ 1270.074259] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1270.078698] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1270.084251] ? rtnl_link_unregister+0x250/0x250 [ 1270.089044] rtnetlink_rcv_msg+0x463/0xb00 [ 1270.093295] ? rtnetlink_put_metrics+0x560/0x560 [ 1270.098080] ? netdev_pick_tx+0x300/0x300 [ 1270.102242] ? netlink_deliver_tap+0x22d/0xc20 [ 1270.106833] ? find_held_lock+0x35/0x130 [ 1270.110904] netlink_rcv_skb+0x17d/0x460 [ 1270.114978] ? rtnetlink_put_metrics+0x560/0x560 [ 1270.119745] ? netlink_ack+0xb30/0xb30 [ 1270.124064] ? kasan_check_read+0x11/0x20 [ 1270.128212] ? netlink_deliver_tap+0x254/0xc20 [ 1270.132798] rtnetlink_rcv+0x1d/0x30 [ 1270.136507] netlink_unicast+0x53a/0x730 [ 1270.140677] ? netlink_attachskb+0x770/0x770 [ 1270.145105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.150658] netlink_sendmsg+0x8ae/0xd70 [ 1270.154723] ? netlink_unicast+0x730/0x730 [ 1270.158968] ? selinux_socket_sendmsg+0x36/0x40 [ 1270.163632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.169169] ? security_socket_sendmsg+0x8d/0xc0 [ 1270.173934] ? netlink_unicast+0x730/0x730 [ 1270.178183] sock_sendmsg+0xd7/0x130 [ 1270.181904] ___sys_sendmsg+0x803/0x920 [ 1270.185879] ? copy_msghdr_from_user+0x430/0x430 [ 1270.190653] ? lock_downgrade+0x880/0x880 [ 1270.194801] ? kasan_check_read+0x11/0x20 [ 1270.198950] ? __fget+0x367/0x540 [ 1270.202418] ? iterate_fd+0x360/0x360 [ 1270.206226] ? __fget_light+0x1a9/0x230 [ 1270.210200] ? __fdget+0x1b/0x20 [ 1270.213570] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1270.219110] __sys_sendmsg+0x105/0x1d0 [ 1270.222995] ? __ia32_sys_shutdown+0x80/0x80 [ 1270.227413] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1270.232166] ? do_syscall_64+0x26/0x620 [ 1270.236134] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1270.241494] ? do_syscall_64+0x26/0x620 [ 1270.245469] __x64_sys_sendmsg+0x78/0xb0 [ 1270.249542] do_syscall_64+0xfd/0x620 [ 1270.253359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1270.258555] RIP: 0033:0x45af49 [ 1270.261762] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1270.280688] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:53:05 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:05 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1c3, 0x100200) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1270.288400] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1270.295664] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1270.302939] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1270.310290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1270.317653] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:05 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000000)={0x9, 0x4, 0x4, 0x4, 0x30000, {}, {0x3, 0x2, 0x8, 0xff, 0x9, 0xfd, "db6c5d38"}, 0x9, 0x4, @offset=0x3, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x3014c251cc08b423, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000080)) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:05 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000180)={0x80000001, 0xffffff7f, 0x0, 0x1}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="08ce19db40601bce51abc657ea8f11ed00006e9bc6c6", @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r5, @ANYRESDEC=r7], 0x8, 0x1) connect$caif(r6, &(0x7f00000001c0)=@rfm={0x25, 0x0, "b6640666d18cd379cfefda16ca98207d"}, 0x18) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1270.550746] QAT: Invalid ioctl 12:53:06 executing program 1 (fault-call:4 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:06 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:06 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 12:53:06 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:06 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000700)={0x0, 0x95d, 0x28, 0x407, 0x4}, &(0x7f0000000740)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000780)={0x5, 0x8200, 0x200, 0x5, r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) dup3(r4, r5, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:06 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000100)={0x83e7, 0x8, 0x1000, &(0x7f0000000400)="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"}) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1270.860720] FAULT_INJECTION: forcing a failure. [ 1270.860720] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.888833] CPU: 0 PID: 24384 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1270.896824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.906200] Call Trace: [ 1270.908930] dump_stack+0x197/0x210 [ 1270.912591] should_fail.cold+0xa/0x1b [ 1270.916497] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1270.921613] ? find_held_lock+0x35/0x130 [ 1270.925819] __should_failslab+0x121/0x190 [ 1270.930098] should_failslab+0x9/0x14 [ 1270.934432] kmem_cache_alloc_trace+0x4b/0x760 [ 1270.939036] __hw_addr_create_ex+0x5e/0x310 [ 1270.943381] __hw_addr_add_ex+0x1ef/0x2b0 [ 1270.947551] dev_addr_init+0x118/0x200 [ 1270.951464] ? dev_mc_flush+0x40/0x40 [ 1270.955287] ? __kmalloc_node+0x51/0x80 [ 1270.959269] alloc_netdev_mqs+0x142/0xdb0 [ 1270.963435] ? ip6erspan_tap_setup+0x190/0x190 [ 1270.968045] rtnl_create_link+0x1dd/0xa00 [ 1270.972354] ? netlink_ns_capable+0x26/0x30 [ 1270.976692] rtnl_newlink+0xf3f/0x1600 [ 1270.980603] ? rtnl_link_unregister+0x250/0x250 [ 1270.985293] ? mark_held_locks+0x100/0x100 [ 1270.989553] ? __lock_acquire+0x6ee/0x49c0 [ 1270.993804] ? cpuacct_charge+0x1db/0x360 [ 1270.997969] ? __update_load_avg_se+0x5ec/0xa10 [ 1271.002652] ? __lock_is_held+0xb6/0x140 [ 1271.006778] ? mark_held_locks+0x100/0x100 [ 1271.011054] ? mark_held_locks+0x100/0x100 [ 1271.015305] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1271.019826] ? finish_task_switch+0x146/0x7c0 [ 1271.024772] ? finish_task_switch+0x118/0x7c0 [ 1271.029282] ? switch_mm_irqs_off+0x7fa/0x1360 [ 1271.034016] ? __mutex_lock+0xa67/0x1300 [ 1271.038100] ? find_held_lock+0x35/0x130 [ 1271.043555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1271.049113] ? rtnl_link_unregister+0x250/0x250 [ 1271.054120] rtnetlink_rcv_msg+0x463/0xb00 [ 1271.059092] ? rtnetlink_put_metrics+0x560/0x560 [ 1271.063866] ? netdev_pick_tx+0x300/0x300 [ 1271.068034] ? netlink_deliver_tap+0x22d/0xc20 [ 1271.072615] ? find_held_lock+0x35/0x130 [ 1271.076678] netlink_rcv_skb+0x17d/0x460 [ 1271.082761] ? rtnetlink_put_metrics+0x560/0x560 [ 1271.087540] ? netlink_ack+0xb30/0xb30 [ 1271.091433] ? kasan_check_read+0x11/0x20 [ 1271.095603] ? netlink_deliver_tap+0x254/0xc20 [ 1271.100319] rtnetlink_rcv+0x1d/0x30 [ 1271.104147] netlink_unicast+0x53a/0x730 [ 1271.108215] ? netlink_attachskb+0x770/0x770 [ 1271.112658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.118222] netlink_sendmsg+0x8ae/0xd70 [ 1271.122293] ? netlink_unicast+0x730/0x730 [ 1271.126546] ? selinux_socket_sendmsg+0x36/0x40 [ 1271.131351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.137003] ? security_socket_sendmsg+0x8d/0xc0 [ 1271.141916] ? netlink_unicast+0x730/0x730 [ 1271.146518] sock_sendmsg+0xd7/0x130 [ 1271.150255] ___sys_sendmsg+0x803/0x920 [ 1271.154262] ? copy_msghdr_from_user+0x430/0x430 [ 1271.159323] ? lock_downgrade+0x880/0x880 [ 1271.163505] ? kasan_check_read+0x11/0x20 [ 1271.167916] ? __fget+0x367/0x540 [ 1271.171445] ? iterate_fd+0x360/0x360 [ 1271.175274] ? __fget_light+0x1a9/0x230 [ 1271.179250] ? __fdget+0x1b/0x20 [ 1271.182613] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1271.189302] __sys_sendmsg+0x105/0x1d0 [ 1271.193193] ? __ia32_sys_shutdown+0x80/0x80 [ 1271.197693] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1271.202617] ? do_syscall_64+0x26/0x620 [ 1271.206587] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1271.212044] ? do_syscall_64+0x26/0x620 [ 1271.216474] __x64_sys_sendmsg+0x78/0xb0 [ 1271.220532] do_syscall_64+0xfd/0x620 [ 1271.224353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1271.229819] RIP: 0033:0x45af49 [ 1271.233006] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1271.252087] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:53:06 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) [ 1271.259911] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1271.267174] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1271.274521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1271.282069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1271.289880] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:06 executing program 4: process_vm_readv(0x0, &(0x7f0000001180)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/78, 0x4e}], 0x4, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/141, 0x8d}, {&(0x7f0000001280)=""/84, 0x54}, {&(0x7f0000001300)=""/118, 0x76}, {&(0x7f0000001380)=""/20, 0x14}], 0x4, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000001400)={0x0, 0xe, 0x4, 0x2, 0x2, {}, {0x1, 0x9, 0x1, 0x8, 0x0, 0x20, "406a09b7"}, 0x0, 0xbd169edb239a42d5, @offset=0x4, 0x7, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000040)) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 12:53:06 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:06 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:06 executing program 1 (fault-call:4 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:07 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={r7, 0x7}, &(0x7f0000000140)=0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000200)={'syzkaller0\x00', {0x2, 0x4e23, @multicast1}}) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) openat$cgroup_ro(r1, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video2\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000011e0000000000000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000000000000400000009000000010000000000000000000000200000003800000000000000030000000000000000000000000000000000000000000000000000000000000007000000f7ffffff000400000000000000000000ffffffff00000080ffffffffde0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013479ca900"/260]) r9 = getpid() sched_setscheduler(r9, 0x0, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r10, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r9, @ANYRESDEC=r11], 0x8, 0x1) ioctl$VIDIOC_ENUMSTD(r10, 0xc0485619, &(0x7f0000000040)={0x6, 0x4, "b9d7d354405edf77c87d05a8484d090fd811000b5fc32566", {0xc0, 0x5}, 0xb}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1271.615477] FAULT_INJECTION: forcing a failure. [ 1271.615477] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.645318] CPU: 0 PID: 24519 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1271.653211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.662584] Call Trace: [ 1271.665300] dump_stack+0x197/0x210 [ 1271.668976] should_fail.cold+0xa/0x1b [ 1271.672922] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1271.678060] ? lock_downgrade+0x880/0x880 [ 1271.682327] __should_failslab+0x121/0x190 [ 1271.686752] should_failslab+0x9/0x14 [ 1271.690560] kmem_cache_alloc_node_trace+0x274/0x720 [ 1271.695669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.701205] ? dev_addr_init+0x17f/0x200 [ 1271.705275] __kmalloc_node+0x3d/0x80 [ 1271.709074] kvmalloc_node+0x68/0x100 [ 1271.712875] alloc_netdev_mqs+0x6e4/0xdb0 [ 1271.717034] ? ip6erspan_tap_setup+0x190/0x190 [ 1271.721625] rtnl_create_link+0x1dd/0xa00 [ 1271.725766] ? netlink_ns_capable+0x26/0x30 [ 1271.730092] rtnl_newlink+0xf3f/0x1600 [ 1271.734397] ? rtnl_link_unregister+0x250/0x250 [ 1271.739179] ? mark_held_locks+0x100/0x100 [ 1271.743434] ? is_bpf_text_address+0xac/0x170 [ 1271.747939] ? find_held_lock+0x35/0x130 [ 1271.751998] ? is_bpf_text_address+0xac/0x170 [ 1271.756507] ? __lock_acquire+0x6ee/0x49c0 [ 1271.760756] ? __lock_acquire+0x6ee/0x49c0 [ 1271.765007] ? lock_downgrade+0x880/0x880 [ 1271.769550] ? mark_held_locks+0x100/0x100 [ 1271.774122] ? mark_held_locks+0x100/0x100 [ 1271.778646] ? __kernel_text_address+0xd/0x40 [ 1271.783247] ? mark_held_locks+0x100/0x100 [ 1271.787479] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1271.792165] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1271.797367] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1271.802562] ? find_held_lock+0x35/0x130 [ 1271.806636] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1271.811074] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1271.816979] ? rtnl_link_unregister+0x250/0x250 [ 1271.821662] rtnetlink_rcv_msg+0x463/0xb00 [ 1271.825896] ? rtnetlink_put_metrics+0x560/0x560 [ 1271.830650] ? netdev_pick_tx+0x300/0x300 [ 1271.834882] ? netlink_deliver_tap+0x22d/0xc20 [ 1271.839471] ? find_held_lock+0x35/0x130 [ 1271.843548] netlink_rcv_skb+0x17d/0x460 [ 1271.848387] ? rtnetlink_put_metrics+0x560/0x560 [ 1271.853138] ? netlink_ack+0xb30/0xb30 [ 1271.857116] ? kasan_check_read+0x11/0x20 [ 1271.861278] ? netlink_deliver_tap+0x254/0xc20 [ 1271.865871] rtnetlink_rcv+0x1d/0x30 [ 1271.869684] netlink_unicast+0x53a/0x730 [ 1271.873743] ? netlink_attachskb+0x770/0x770 [ 1271.878157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.883691] netlink_sendmsg+0x8ae/0xd70 [ 1271.887773] ? netlink_unicast+0x730/0x730 [ 1271.892187] ? selinux_socket_sendmsg+0x36/0x40 [ 1271.897109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.902638] ? security_socket_sendmsg+0x8d/0xc0 [ 1271.907478] ? netlink_unicast+0x730/0x730 [ 1271.911712] sock_sendmsg+0xd7/0x130 [ 1271.915424] ___sys_sendmsg+0x803/0x920 [ 1271.919398] ? copy_msghdr_from_user+0x430/0x430 [ 1271.924261] ? lock_downgrade+0x880/0x880 [ 1271.928427] ? kasan_check_read+0x11/0x20 [ 1271.932670] ? __fget+0x367/0x540 [ 1271.936148] ? iterate_fd+0x360/0x360 [ 1271.941261] ? __fget_light+0x1a9/0x230 [ 1271.945317] ? __fdget+0x1b/0x20 [ 1271.948699] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1271.954233] __sys_sendmsg+0x105/0x1d0 [ 1271.958288] ? __ia32_sys_shutdown+0x80/0x80 [ 1271.962981] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1271.968082] ? do_syscall_64+0x26/0x620 [ 1271.972412] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1271.978092] ? do_syscall_64+0x26/0x620 [ 1271.982344] __x64_sys_sendmsg+0x78/0xb0 [ 1271.986415] do_syscall_64+0xfd/0x620 [ 1271.990221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1271.995407] RIP: 0033:0x45af49 [ 1271.998598] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1272.017586] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.025287] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1272.032897] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1272.041330] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1272.048878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1272.056819] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:07 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:07 executing program 1 (fault-call:4 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:07 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r3, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000140)=0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1272.224824] FAULT_INJECTION: forcing a failure. [ 1272.224824] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.237374] CPU: 0 PID: 24644 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1272.245235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.254608] Call Trace: [ 1272.257227] dump_stack+0x197/0x210 [ 1272.260886] should_fail.cold+0xa/0x1b [ 1272.264806] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1272.269935] ? lock_downgrade+0x880/0x880 [ 1272.274125] __should_failslab+0x121/0x190 [ 1272.278385] should_failslab+0x9/0x14 [ 1272.283604] kmem_cache_alloc_node_trace+0x274/0x720 [ 1272.293926] ? __lockdep_init_map+0x10c/0x5b0 [ 1272.298556] __kmalloc_node+0x3d/0x80 [ 1272.302381] kvmalloc_node+0x68/0x100 [ 1272.306218] alloc_netdev_mqs+0x88a/0xdb0 [ 1272.310436] rtnl_create_link+0x1dd/0xa00 [ 1272.314582] ? netlink_ns_capable+0x26/0x30 [ 1272.318932] rtnl_newlink+0xf3f/0x1600 [ 1272.322858] ? rtnl_link_unregister+0x250/0x250 [ 1272.327656] ? mark_held_locks+0x100/0x100 [ 1272.331915] ? debug_smp_processor_id+0x1c/0x20 [ 1272.336602] ? __lock_acquire+0x6ee/0x49c0 [ 1272.340855] ? is_bpf_text_address+0xac/0x170 [ 1272.345404] ? __lock_acquire+0x6ee/0x49c0 [ 1272.349646] ? is_bpf_text_address+0xac/0x170 [ 1272.354141] ? __lock_acquire+0x6ee/0x49c0 [ 1272.358449] ? __lock_acquire+0x6ee/0x49c0 [ 1272.362742] ? mark_held_locks+0x100/0x100 [ 1272.366988] ? debug_smp_processor_id+0x1c/0x20 [ 1272.372890] ? perf_trace_lock_acquire+0xf5/0x580 [ 1272.377777] ? mark_held_locks+0x100/0x100 [ 1272.382046] ? debug_smp_processor_id+0x1c/0x20 [ 1272.386752] ? perf_trace_lock_acquire+0xf5/0x580 [ 1272.391781] ? find_held_lock+0x35/0x130 [ 1272.395856] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1272.400296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1272.405865] ? rtnl_link_unregister+0x250/0x250 [ 1272.410549] rtnetlink_rcv_msg+0x463/0xb00 [ 1272.414897] ? rtnetlink_put_metrics+0x560/0x560 [ 1272.419752] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1272.424863] ? rcu_read_unlock_special+0x679/0xea0 [ 1272.429802] ? netlink_deliver_tap+0x22d/0xc20 [ 1272.434396] ? find_held_lock+0x35/0x130 [ 1272.439339] netlink_rcv_skb+0x17d/0x460 [ 1272.443419] ? rtnetlink_put_metrics+0x560/0x560 [ 1272.448207] ? netlink_ack+0xb30/0xb30 [ 1272.452213] ? netlink_deliver_tap+0x254/0xc20 [ 1272.456884] rtnetlink_rcv+0x1d/0x30 [ 1272.460602] netlink_unicast+0x53a/0x730 [ 1272.464694] ? netlink_attachskb+0x770/0x770 [ 1272.469160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.474762] netlink_sendmsg+0x8ae/0xd70 [ 1272.479450] ? netlink_unicast+0x730/0x730 [ 1272.483707] ? selinux_socket_sendmsg+0x36/0x40 [ 1272.488390] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.493939] ? security_socket_sendmsg+0x8d/0xc0 [ 1272.498985] ? netlink_unicast+0x730/0x730 [ 1272.504246] sock_sendmsg+0xd7/0x130 [ 1272.508005] ___sys_sendmsg+0x803/0x920 [ 1272.512035] ? copy_msghdr_from_user+0x430/0x430 [ 1272.517752] ? lock_downgrade+0x880/0x880 [ 1272.522362] ? kasan_check_read+0x11/0x20 [ 1272.527509] ? __fget+0x367/0x540 [ 1272.530994] ? iterate_fd+0x360/0x360 [ 1272.534832] ? __fget_light+0x1a9/0x230 [ 1272.538810] ? __fdget+0x1b/0x20 [ 1272.542227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1272.547893] __sys_sendmsg+0x105/0x1d0 [ 1272.551806] ? __ia32_sys_shutdown+0x80/0x80 [ 1272.556267] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1272.561126] ? do_syscall_64+0x26/0x620 [ 1272.565119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1272.570638] ? do_syscall_64+0x26/0x620 [ 1272.571066] net_ratelimit: 21 callbacks suppressed [ 1272.571074] protocol 88fb is buggy, dev hsr_slave_0 [ 1272.574636] __x64_sys_sendmsg+0x78/0xb0 [ 1272.574658] do_syscall_64+0xfd/0x620 [ 1272.574681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1272.574694] RIP: 0033:0x45af49 [ 1272.574708] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:53:08 executing program 1 (fault-call:4 fault-nth:8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1272.574720] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.579705] protocol 88fb is buggy, dev hsr_slave_1 [ 1272.584680] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1272.584688] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1272.584696] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1272.584704] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1272.584711] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1272.681499] FAULT_INJECTION: forcing a failure. [ 1272.681499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1272.706709] CPU: 1 PID: 24651 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1272.715117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.725712] Call Trace: [ 1272.728307] dump_stack+0x197/0x210 [ 1272.731963] should_fail.cold+0xa/0x1b [ 1272.735948] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1272.741051] __alloc_pages_nodemask+0x1ee/0x750 [ 1272.745714] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1272.750733] ? find_held_lock+0x35/0x130 [ 1272.754901] ? _crng_backtrack_protect+0xff/0x140 [ 1272.759931] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1272.765490] alloc_pages_current+0x107/0x210 [ 1272.769911] get_zeroed_page+0x14/0x50 [ 1272.773812] dev_alloc_name_ns+0x14b/0x470 [ 1272.778227] ? __dev_get_by_name+0x160/0x160 [ 1272.782722] dev_get_valid_name+0x6c/0xd0 [ 1272.786862] register_netdevice+0x284/0xff0 [ 1272.791174] ? netdev_change_features+0xb0/0xb0 [ 1272.795843] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1272.801392] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1272.806577] ? ip6gre_tunnel_init+0x340/0x340 [ 1272.811066] ? lockdep_rtnl_is_held+0x26/0x30 [ 1272.815574] ? ip6gre_tunnel_find+0x496/0x640 [ 1272.820414] ip6gre_newlink+0x298/0x7a0 [ 1272.824384] ? ip6gre_changelink+0x560/0x560 [ 1272.828865] rtnl_newlink+0x1042/0x1600 [ 1272.832864] ? rtnl_link_unregister+0x250/0x250 [ 1272.837591] ? __lock_acquire+0x6ee/0x49c0 [ 1272.841870] ? mark_held_locks+0x100/0x100 [ 1272.846347] ? mark_held_locks+0x100/0x100 [ 1272.850577] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1272.855079] ? finish_task_switch+0x146/0x7c0 [ 1272.859675] ? finish_task_switch+0x118/0x7c0 [ 1272.864184] ? __mutex_lock+0xa67/0x1300 [ 1272.868251] ? find_held_lock+0x35/0x130 [ 1272.872352] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1272.877990] ? rtnl_link_unregister+0x250/0x250 [ 1272.883723] rtnetlink_rcv_msg+0x463/0xb00 [ 1272.888182] ? rtnetlink_put_metrics+0x560/0x560 [ 1272.893039] ? netdev_pick_tx+0x300/0x300 [ 1272.897182] ? netlink_deliver_tap+0x22d/0xc20 [ 1272.901760] ? find_held_lock+0x35/0x130 [ 1272.905828] netlink_rcv_skb+0x17d/0x460 [ 1272.909890] ? rtnetlink_put_metrics+0x560/0x560 [ 1272.914729] ? netlink_ack+0xb30/0xb30 [ 1272.918626] ? kasan_check_read+0x11/0x20 [ 1272.922768] ? netlink_deliver_tap+0x254/0xc20 [ 1272.927353] rtnetlink_rcv+0x1d/0x30 [ 1272.931056] netlink_unicast+0x53a/0x730 [ 1272.935130] ? netlink_attachskb+0x770/0x770 [ 1272.939541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.945083] netlink_sendmsg+0x8ae/0xd70 [ 1272.949134] ? netlink_unicast+0x730/0x730 [ 1272.953375] ? selinux_socket_sendmsg+0x36/0x40 [ 1272.958078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.963617] ? security_socket_sendmsg+0x8d/0xc0 [ 1272.968569] ? netlink_unicast+0x730/0x730 [ 1272.973264] sock_sendmsg+0xd7/0x130 [ 1272.977250] ___sys_sendmsg+0x803/0x920 [ 1272.981361] ? copy_msghdr_from_user+0x430/0x430 [ 1272.986121] ? lock_downgrade+0x880/0x880 [ 1272.990281] ? kasan_check_read+0x11/0x20 [ 1272.994529] ? __fget+0x367/0x540 [ 1272.998097] ? iterate_fd+0x360/0x360 [ 1273.001988] ? __fget_light+0x1a9/0x230 [ 1273.005950] ? __fdget+0x1b/0x20 [ 1273.009316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1273.014935] __sys_sendmsg+0x105/0x1d0 [ 1273.019601] ? __ia32_sys_shutdown+0x80/0x80 [ 1273.024203] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1273.029642] ? do_syscall_64+0x26/0x620 [ 1273.034472] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1273.039914] ? do_syscall_64+0x26/0x620 [ 1273.043967] __x64_sys_sendmsg+0x78/0xb0 [ 1273.049541] do_syscall_64+0xfd/0x620 [ 1273.053474] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1273.058772] RIP: 0033:0x45af49 [ 1273.061961] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1273.081211] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.088923] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1273.096631] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1273.103884] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1273.111140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1273.118571] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:08 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800000000}, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 12:53:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x3a, @multicast1, 0x4e20, 0x4, 'ovf\x00', 0x1, 0x100, 0x32}, 0x2c) 12:53:08 executing program 1 (fault-call:4 fault-nth:9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:08 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:08 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:08 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x3, 0x9, 0xfcfc, 0x1, 0x1000}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1273.245912] FAULT_INJECTION: forcing a failure. [ 1273.245912] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.333815] CPU: 0 PID: 24660 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1273.341687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.351151] Call Trace: [ 1273.353775] dump_stack+0x197/0x210 [ 1273.358149] should_fail.cold+0xa/0x1b [ 1273.362076] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1273.367222] ? lock_downgrade+0x880/0x880 [ 1273.371416] __should_failslab+0x121/0x190 [ 1273.375778] should_failslab+0x9/0x14 [ 1273.379816] __kmalloc_track_caller+0x2de/0x750 [ 1273.384517] ? trace_hardirqs_on+0x67/0x220 [ 1273.388883] ? kstrdup_const+0x66/0x80 [ 1273.392805] kstrdup+0x3a/0x70 [ 1273.396127] kstrdup_const+0x66/0x80 [ 1273.400167] kvasprintf_const+0x10e/0x190 [ 1273.404438] kobject_set_name_vargs+0x5b/0x150 [ 1273.409120] dev_set_name+0xbd/0xf0 [ 1273.412808] ? device_initialize+0x440/0x440 [ 1273.417248] ? lockdep_init_map+0x9/0x10 [ 1273.421433] ? __init_waitqueue_head+0x36/0x90 [ 1273.426107] ? pm_runtime_init+0x347/0x400 [ 1273.430475] netdev_register_kobject+0xc3/0x3b0 [ 1273.435441] register_netdevice+0x875/0xff0 [ 1273.439869] ? netdev_change_features+0xb0/0xb0 [ 1273.444555] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1273.450835] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1273.456113] ? ip6gre_tunnel_init+0x340/0x340 [ 1273.460629] ? lockdep_rtnl_is_held+0x26/0x30 [ 1273.465565] ? ip6gre_tunnel_find+0x496/0x640 [ 1273.470192] ip6gre_newlink+0x298/0x7a0 [ 1273.474637] ? ip6gre_changelink+0x560/0x560 [ 1273.479137] rtnl_newlink+0x1042/0x1600 [ 1273.483147] ? rtnl_link_unregister+0x250/0x250 [ 1273.487815] ? mark_held_locks+0x100/0x100 [ 1273.492354] ? debug_smp_processor_id+0x1c/0x20 [ 1273.497035] ? is_bpf_text_address+0xac/0x170 [ 1273.501595] ? find_held_lock+0x35/0x130 [ 1273.505717] ? is_bpf_text_address+0xac/0x170 [ 1273.510844] ? __lock_acquire+0x6ee/0x49c0 [ 1273.515079] ? __lock_acquire+0x6ee/0x49c0 [ 1273.520326] ? lock_downgrade+0x880/0x880 [ 1273.525360] ? mark_held_locks+0x100/0x100 [ 1273.529624] ? debug_smp_processor_id+0x1c/0x20 [ 1273.534572] ? perf_trace_lock_acquire+0xf5/0x580 [ 1273.539827] ? mark_held_locks+0x100/0x100 [ 1273.544324] ? debug_smp_processor_id+0x1c/0x20 [ 1273.548990] ? perf_trace_lock_acquire+0xf5/0x580 [ 1273.553888] ? find_held_lock+0x35/0x130 [ 1273.557953] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1273.562547] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1273.568128] ? rtnl_link_unregister+0x250/0x250 [ 1273.572820] rtnetlink_rcv_msg+0x463/0xb00 [ 1273.577076] ? rtnetlink_put_metrics+0x560/0x560 [ 1273.581870] ? netdev_pick_tx+0x300/0x300 [ 1273.586029] ? netlink_deliver_tap+0x22d/0xc20 [ 1273.590701] ? find_held_lock+0x35/0x130 [ 1273.594783] netlink_rcv_skb+0x17d/0x460 [ 1273.598843] ? rtnetlink_put_metrics+0x560/0x560 [ 1273.603692] ? netlink_ack+0xb30/0xb30 [ 1273.607577] ? kasan_check_read+0x11/0x20 [ 1273.611741] ? netlink_deliver_tap+0x254/0xc20 [ 1273.616678] rtnetlink_rcv+0x1d/0x30 [ 1273.620401] netlink_unicast+0x53a/0x730 [ 1273.624554] ? netlink_attachskb+0x770/0x770 [ 1273.629050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.634593] netlink_sendmsg+0x8ae/0xd70 [ 1273.638669] ? netlink_unicast+0x730/0x730 [ 1273.642910] ? selinux_socket_sendmsg+0x36/0x40 [ 1273.647836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.653395] ? security_socket_sendmsg+0x8d/0xc0 [ 1273.658273] ? netlink_unicast+0x730/0x730 [ 1273.662515] sock_sendmsg+0xd7/0x130 [ 1273.666243] ___sys_sendmsg+0x803/0x920 [ 1273.670236] ? copy_msghdr_from_user+0x430/0x430 [ 1273.675030] ? lock_downgrade+0x880/0x880 [ 1273.679206] ? kasan_check_read+0x11/0x20 [ 1273.683481] ? __fget+0x367/0x540 [ 1273.686942] ? iterate_fd+0x360/0x360 [ 1273.690783] ? __fget_light+0x1a9/0x230 [ 1273.694780] ? __fdget+0x1b/0x20 [ 1273.698152] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1273.703708] __sys_sendmsg+0x105/0x1d0 [ 1273.708126] ? __ia32_sys_shutdown+0x80/0x80 [ 1273.712548] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1273.717314] ? do_syscall_64+0x26/0x620 [ 1273.721559] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1273.727094] ? do_syscall_64+0x26/0x620 [ 1273.731086] __x64_sys_sendmsg+0x78/0xb0 [ 1273.735160] do_syscall_64+0xfd/0x620 [ 1273.739405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1273.744587] RIP: 0033:0x45af49 [ 1273.747778] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1273.766866] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.774602] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x5}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x8, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x20, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, r3, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1273.781955] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1273.789243] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1273.796534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1273.804090] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:09 executing program 1 (fault-call:4 fault-nth:10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:09 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:09 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x6, 0x16102) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001580)={0x14, r6, 0x11, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10001041}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x26c, r6, 0x780, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3915}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x4}}}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x1}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0xc852}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x69b5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r11, 0x540b, 0x2) ioctl$TCSETA(r11, 0x5406, &(0x7f0000000100)={0x8, 0x1000, 0x43, 0xff03, 0x0, "dc78c780f2a61b1d"}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup3(r8, r10, 0x80000) ioctl$TUNSETCARRIER(r12, 0x400454e2, &(0x7f0000000040)=0x1) [ 1274.009029] FAULT_INJECTION: forcing a failure. [ 1274.009029] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.070741] CPU: 1 PID: 24912 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1274.078689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.088151] Call Trace: [ 1274.090780] dump_stack+0x197/0x210 [ 1274.094453] should_fail.cold+0xa/0x1b [ 1274.098382] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1274.103611] ? lock_downgrade+0x880/0x880 [ 1274.107813] __should_failslab+0x121/0x190 [ 1274.112347] should_failslab+0x9/0x14 [ 1274.116367] kmem_cache_alloc_trace+0x2cc/0x760 [ 1274.121076] ? kfree+0x1f7/0x220 [ 1274.124574] ? kfree_const+0x5e/0x70 [ 1274.128482] device_add+0xe5e/0x1760 [ 1274.132224] ? device_initialize+0x440/0x440 [ 1274.136670] ? get_device_parent.isra.0+0x570/0x570 [ 1274.141806] ? __init_waitqueue_head+0x36/0x90 [ 1274.146421] ? pm_runtime_init+0x347/0x400 [ 1274.150696] netdev_register_kobject+0x183/0x3b0 [ 1274.155574] register_netdevice+0x875/0xff0 [ 1274.159923] ? netdev_change_features+0xb0/0xb0 [ 1274.164791] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1274.171001] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1274.176232] ? ip6gre_tunnel_init+0x340/0x340 [ 1274.180850] ? lockdep_rtnl_is_held+0x26/0x30 [ 1274.185375] ? ip6gre_tunnel_find+0x496/0x640 [ 1274.189926] ip6gre_newlink+0x298/0x7a0 [ 1274.194206] ? ip6gre_changelink+0x560/0x560 [ 1274.198652] rtnl_newlink+0x1042/0x1600 [ 1274.202670] ? rtnl_link_unregister+0x250/0x250 [ 1274.207372] ? mark_held_locks+0x100/0x100 [ 1274.211734] ? __lock_acquire+0x6ee/0x49c0 [ 1274.215994] ? is_bpf_text_address+0xac/0x170 [ 1274.220873] ? __lock_acquire+0x6ee/0x49c0 [ 1274.225137] ? is_bpf_text_address+0xac/0x170 [ 1274.229678] ? __lock_acquire+0x6ee/0x49c0 [ 1274.233948] ? __lock_acquire+0x6ee/0x49c0 [ 1274.238266] ? mark_held_locks+0x100/0x100 [ 1274.242878] ? mark_held_locks+0x100/0x100 [ 1274.247175] ? mark_held_locks+0x100/0x100 [ 1274.251462] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1274.256164] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1274.261229] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1274.266308] ? find_held_lock+0x35/0x130 [ 1274.270398] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1274.274847] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1274.280409] ? rtnl_link_unregister+0x250/0x250 [ 1274.285114] rtnetlink_rcv_msg+0x463/0xb00 [ 1274.289476] ? rtnetlink_put_metrics+0x560/0x560 [ 1274.294432] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1274.299576] ? rcu_read_unlock_special+0x679/0xea0 [ 1274.305667] ? netlink_deliver_tap+0x22d/0xc20 [ 1274.310910] ? find_held_lock+0x35/0x130 [ 1274.315112] netlink_rcv_skb+0x17d/0x460 [ 1274.319225] ? rtnetlink_put_metrics+0x560/0x560 [ 1274.324029] ? netlink_ack+0xb30/0xb30 [ 1274.328560] ? netlink_deliver_tap+0x254/0xc20 [ 1274.333173] rtnetlink_rcv+0x1d/0x30 [ 1274.336930] netlink_unicast+0x53a/0x730 [ 1274.342165] ? netlink_attachskb+0x770/0x770 [ 1274.346698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1274.353065] netlink_sendmsg+0x8ae/0xd70 [ 1274.357247] ? netlink_unicast+0x730/0x730 [ 1274.362651] ? selinux_socket_sendmsg+0x36/0x40 12:53:09 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb43a70a20e60b30a) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x200000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000c) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x8, 0x1) r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r5, @ANYRESDEC=r7], 0x8, 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000580)={r8, 0x3}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r8, 0x38}) dup(0xffffffffffffffff) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) write$cgroup_type(r9, &(0x7f0000000040)='threaded\x00', 0x9) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1274.367559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1274.373803] ? security_socket_sendmsg+0x8d/0xc0 [ 1274.378607] ? netlink_unicast+0x730/0x730 [ 1274.382886] sock_sendmsg+0xd7/0x130 [ 1274.386642] ___sys_sendmsg+0x803/0x920 [ 1274.390649] ? copy_msghdr_from_user+0x430/0x430 [ 1274.395438] ? lock_downgrade+0x880/0x880 [ 1274.399611] ? kasan_check_read+0x11/0x20 [ 1274.403786] ? __fget+0x367/0x540 [ 1274.407273] ? iterate_fd+0x360/0x360 [ 1274.411376] ? __fget_light+0x1a9/0x230 [ 1274.415488] ? __fdget+0x1b/0x20 12:53:09 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x100, 0x70bd26, 0x25dfdbfc, {0x436ab12b14772a1a, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 1274.419058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1274.424629] __sys_sendmsg+0x105/0x1d0 [ 1274.428556] ? __ia32_sys_shutdown+0x80/0x80 [ 1274.433004] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1274.437787] ? do_syscall_64+0x26/0x620 [ 1274.441779] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1274.447162] ? do_syscall_64+0x26/0x620 [ 1274.451163] __x64_sys_sendmsg+0x78/0xb0 [ 1274.455249] do_syscall_64+0xfd/0x620 [ 1274.459084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1274.464378] RIP: 0033:0x45af49 [ 1274.476535] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1274.495456] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.503268] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1274.510556] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 12:53:10 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x240000, 0x0) getdents64(r0, &(0x7f0000000040)=""/36, 0x24) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1274.517822] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1274.525529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1274.532794] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1274.541527] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.546905] protocol 88fb is buggy, dev hsr_slave_1 12:53:10 executing program 1 (fault-call:4 fault-nth:11): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:10 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:10 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="72d42fdb", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x7ae) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r8, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r9, 0xc12b}, &(0x7f0000000140)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x4cb) [ 1274.778535] FAULT_INJECTION: forcing a failure. [ 1274.778535] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.841577] CPU: 0 PID: 25172 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1274.849422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.858804] Call Trace: [ 1274.861414] dump_stack+0x197/0x210 [ 1274.865056] should_fail.cold+0xa/0x1b [ 1274.868953] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1274.874074] ? lock_downgrade+0x880/0x880 [ 1274.878254] __should_failslab+0x121/0x190 [ 1274.882499] should_failslab+0x9/0x14 [ 1274.886292] __kmalloc_track_caller+0x2de/0x750 [ 1274.890971] ? lock_downgrade+0x880/0x880 [ 1274.895140] ? kstrdup_const+0x66/0x80 [ 1274.899033] kstrdup+0x3a/0x70 [ 1274.902232] kstrdup_const+0x66/0x80 [ 1274.905942] __kernfs_new_node+0xb0/0x6f0 [ 1274.910091] ? __lock_acquire+0x6ee/0x49c0 [ 1274.914323] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1274.919079] ? map_id_range_down+0x1ee/0x370 [ 1274.923500] ? __put_user_ns+0x70/0x70 [ 1274.927396] ? make_kgid+0x23/0x30 [ 1274.930933] kernfs_new_node+0x99/0x130 [ 1274.934921] kernfs_create_dir_ns+0x52/0x160 [ 1274.939338] sysfs_create_dir_ns+0x131/0x290 [ 1274.943743] ? sysfs_create_mount_point+0xa0/0xa0 [ 1274.948593] ? lock_downgrade+0x880/0x880 [ 1274.952740] ? net_namespace+0xd/0x40 [ 1274.956595] ? device_namespace+0x94/0xd0 [ 1274.960760] kobject_add_internal+0x2ab/0x8e0 [ 1274.965276] ? check_memory_region+0x101/0x190 [ 1274.969856] kobject_add+0x150/0x1c0 [ 1274.973570] ? kset_create_and_add+0x1a0/0x1a0 [ 1274.978157] ? mutex_unlock+0xd/0x10 [ 1274.981872] device_add+0x3cc/0x1760 [ 1274.985580] ? device_initialize+0x440/0x440 [ 1274.989984] ? get_device_parent.isra.0+0x570/0x570 [ 1274.995002] ? __init_waitqueue_head+0x36/0x90 [ 1274.999582] ? pm_runtime_init+0x347/0x400 [ 1275.003821] netdev_register_kobject+0x183/0x3b0 [ 1275.008592] register_netdevice+0x875/0xff0 [ 1275.012923] ? netdev_change_features+0xb0/0xb0 [ 1275.017592] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1275.023142] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1275.028324] ? ip6gre_tunnel_init+0x340/0x340 [ 1275.032822] ? lockdep_rtnl_is_held+0x26/0x30 [ 1275.037309] ? ip6gre_tunnel_find+0x496/0x640 [ 1275.041807] ip6gre_newlink+0x298/0x7a0 [ 1275.045777] ? ip6gre_changelink+0x560/0x560 [ 1275.050180] rtnl_newlink+0x1042/0x1600 [ 1275.055201] ? rtnl_link_unregister+0x250/0x250 [ 1275.059860] ? mark_held_locks+0x100/0x100 [ 1275.064100] ? is_bpf_text_address+0xac/0x170 [ 1275.068588] ? find_held_lock+0x35/0x130 [ 1275.072646] ? is_bpf_text_address+0xac/0x170 [ 1275.077136] ? __lock_acquire+0x6ee/0x49c0 [ 1275.081367] ? __lock_acquire+0x6ee/0x49c0 [ 1275.085597] ? lock_downgrade+0x880/0x880 [ 1275.089752] ? mark_held_locks+0x100/0x100 [ 1275.093997] ? mark_held_locks+0x100/0x100 [ 1275.098233] ? __kernel_text_address+0xd/0x40 [ 1275.102753] ? mark_held_locks+0x100/0x100 [ 1275.106995] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1275.111659] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1275.116671] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1275.121730] ? find_held_lock+0x35/0x130 [ 1275.125877] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1275.130304] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1275.135847] ? rtnl_link_unregister+0x250/0x250 [ 1275.140517] rtnetlink_rcv_msg+0x463/0xb00 [ 1275.144762] ? rtnetlink_put_metrics+0x560/0x560 [ 1275.149515] ? netdev_pick_tx+0x300/0x300 [ 1275.153660] ? netlink_deliver_tap+0x22d/0xc20 [ 1275.158243] ? find_held_lock+0x35/0x130 [ 1275.162304] netlink_rcv_skb+0x17d/0x460 [ 1275.166364] ? rtnetlink_put_metrics+0x560/0x560 [ 1275.171132] ? netlink_ack+0xb30/0xb30 [ 1275.175016] ? kasan_check_read+0x11/0x20 [ 1275.179163] ? netlink_deliver_tap+0x254/0xc20 [ 1275.183752] rtnetlink_rcv+0x1d/0x30 [ 1275.187990] netlink_unicast+0x53a/0x730 [ 1275.192054] ? netlink_attachskb+0x770/0x770 [ 1275.196459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1275.201992] netlink_sendmsg+0x8ae/0xd70 [ 1275.206056] ? netlink_unicast+0x730/0x730 [ 1275.210811] ? selinux_socket_sendmsg+0x36/0x40 [ 1275.215470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1275.221008] ? security_socket_sendmsg+0x8d/0xc0 [ 1275.225756] ? netlink_unicast+0x730/0x730 [ 1275.229989] sock_sendmsg+0xd7/0x130 [ 1275.233699] ___sys_sendmsg+0x803/0x920 [ 1275.237681] ? copy_msghdr_from_user+0x430/0x430 [ 1275.242445] ? lock_downgrade+0x880/0x880 [ 1275.246593] ? kasan_check_read+0x11/0x20 [ 1275.250740] ? __fget+0x367/0x540 [ 1275.254194] ? iterate_fd+0x360/0x360 [ 1275.258009] ? __fget_light+0x1a9/0x230 [ 1275.261976] ? __fdget+0x1b/0x20 [ 1275.265334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1275.270881] __sys_sendmsg+0x105/0x1d0 [ 1275.274773] ? __ia32_sys_shutdown+0x80/0x80 [ 1275.279191] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1275.283939] ? do_syscall_64+0x26/0x620 [ 1275.287907] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1275.293260] ? do_syscall_64+0x26/0x620 [ 1275.297242] __x64_sys_sendmsg+0x78/0xb0 [ 1275.301310] do_syscall_64+0xfd/0x620 [ 1275.305108] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1275.310295] RIP: 0033:0x45af49 [ 1275.313483] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1275.332399] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:53:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x100000000, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000400)={0x7f, 0x0, [], {0x0, @bt={0xb9, 0xb7, 0x0, 0x2, 0x27a, 0x0, 0x0, 0x9, 0xffffffff, 0xa4, 0x8001, 0x80000000, 0x400, 0x2, 0x2, 0x4, {0x3, 0xe0c}, 0x0, 0x82}}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000400000000100c000"/32]) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r13, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f32f6a3e20a20b11643b138848d32af4084af209a3fe3aed52d1466bd6782ab85023d8ef35b8edf2ba75f4789248f6fe6cee9dcc61b4d4ca3df783d368bc7b8d60d2d8e70f592705044dbd1104cbb71351649de95cb68f27a30b63f6c4e6619891bf78aae27375d88595c0666de9332b40d910f3e0e8c287dccd615dbe8909c9624e7a630052c4d2165df49ff4f9844ea1ef71a1e20a741d12737b3d70a16a53b1798ed40c9548984fa34b135813e2aab52e3e90ac739e2f1500b0848ac0a5980806665742f0e75f22928b07e2d6a51c87685830bcabb5a50ef8701490", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES16=r10, @ANYRESDEC=r3, @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYRES64=r13, @ANYBLOB="ab5b510aba77a814b89b681b14eef5033714bc93659f3c736a0ad2e9467f7a17d56f9d23bee007a07eb6274675073115d8d6a7772e4b90159733407182bc8c17bfc78ab8e84c35b51be4a686def9f1292e394e8a05174a6709e227e675eecc00438a68b4e21a93aba1b95b435b6ae0e8d8c310a9b19898b3bc54505b42852c8bf38aabce51f5428bb02b25eae6b4db91373b9907313e87852bd3acc8858ef063fe2eb086eb1799c0a3"], @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r3], 0x8, 0x1) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x4, 0x6, 0x4, 0x0, 0x1, {0x77359400}, {0x2, 0x2, 0x1, 0xf9, 0x8, 0x7f, "dcaa9020"}, 0x1, 0x4, @fd, 0x50e7, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r14, 0x80047437, &(0x7f0000000080)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x101000) r15 = getpid() sched_setscheduler(r15, 0x0, 0x0) r16 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r17 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r16, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r15, @ANYRESDEC=r17], 0x8, 0x1) ioctl$VIDIOC_ENUM_FRAMESIZES(r16, 0xc02c564a, &(0x7f0000000140)={0x9, 0x20385655, 0x1, @stepwise={0x9b3e, 0x8, 0x10000, 0xc15, 0x3, 0x100}}) [ 1275.340098] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1275.347361] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1275.354636] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1275.361907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1275.369180] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:10 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) bind$rxrpc(r2, &(0x7f00000015c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0xd0}}, 0x24) semget$private(0x0, 0x2, 0xf6f) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000001540)={0x28, 0x2, 0x0, {0x5, 0x4, 0x4}}, 0x28) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x440901, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x753f, 0xd42, 0x1}) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x0, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r10, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r9, @ANYRESDEC=r11], 0x8, 0x1) write$FUSE_INTERRUPT(r10, &(0x7f0000001580)={0x10, 0x0, 0x1}, 0x10) r12 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={r12, 0xb9, 0x1000}, &(0x7f0000000400)=ANY=[@ANYBLOB='enc=pkcs1 s-224-x8\x00'/68], &(0x7f0000000480)="3857c33c13c6e2306aefe8556655414d92969ef354f0261b13a729f1eaed7fcdc356e0457431980d652be3388aa146cee8aed29f8a8cf0b93b69eed169a4c9efcc8839545d6b58fc860b34a381d34eb7783d2eb869cbe0ca9583477c5c239982ea26a17729e4e662931ee6c6aa420183da17aad6ded3fb2ffe62c109636a39e94874f384a046eb190fcbe57ed95608b5352eb636c34a1146d48f6e60d4ea4bc6971166790c46e045c0ab13b77163e3254e808a799780c30783", &(0x7f0000000540)="512f185d002d65e819e79193181025732f191f435cbc17746e3c653916f6c42e9f53569e24d2b2de26c38c7925adbc1cdf271bbb0f61ad2aae7531b4a40befaefd9d92e7f22d70e5ad680c318eb957a2c825db47775d5870059ec8dedf95ed045fac91b224575071b1f5d6d2af8f076473792fe44c027463709ff48128408aeb218aaa9242c55ec79a4e26502dd775c3da9b4b1dd8ecb31e664e24135e5de552c2b91f2658538f0fa143c3374aa9c778bb7dd55f6f160466a6a448185fab0c98f8f2e9a00e993147f1579eef653327c76ed84f0addb51e10051f409e1f6acd4f9f3a7641193a6eb2134c8edb9e4a99a7aac974fe6adf65342a15b8b55b8d591d174807cf47d54c7c7cc1d096fe1fcd088ad12397c66ef3a3071c8517f23c6cf1be185f72fb1e022f3f319f2ead40878eaa75609c2e9e994aec68765f8f36897c17d5217bb624e850789d180c583e17f196d273c2565c6bb62cc6ffca4e62e02f52f1c3acfe7ac76cd5e1b6d7773a6ffc68dc3fcc3c3a6a0e468661e64f98be15aa38b7887108687490bcaa95bafd1cc1a9aceb17a32beeab703f306c633f72783bf45483759c29c7e5497e8f0246b34ca80307b2bcf747e400c85fd6df739bb1653b4a98b6505b79983eb1ad4442e396393fc0d24fe138bcd4e110da595304916b37c81c9317097b7c5d1bc6a9540d4e23eef1ee7e47f3d87df317235ee6c6f6cb444b5f250b578f1911784bd34153045f18cbe2e6f1ac2a5077f0cff9c0293173c4ba6c0bbaf394e9f33595e3d7ba4547c7cd94a1b254c57a507873bd1ca05b79f53bf7ae9417a591cdad360aa3eefadffafa70fb409d7fd03ba49cf3362c6820ae2f73f0bb45859ebe5917db74d510497134206916ef35a93b1bccce3c690e4fbf7a639fef1990d1d2ff87940bb59d3cc6f4c6ea1f3217e9c2704fa0aaac1a5f3c94dd4513109c147c70be26bae23b9d163ccce1ce0d2e65ad275e24f04b12f839b62b090d68f9d9d69b0e66e7d70f2b941f969a2ab4cc198cbfdaeece2e0521e4d20398aea8d30afb323eb2ce16df2cb655a10946356fcaa0707a248fa7cf0842144a420e57951b412b61cd255e8273a0a3bb752a72fd336129d7f7dfda4cf649b9da7b18399d81ef67550321879709c3ce982129caf8b42a9155ffb0275a7fbe08e6ce0f646712082b17be56c44b25edf4a6d713c941bb498209c364c00643e7ca414547bc1a40a1d2a3bcc13fb73a4446f5e2e45f4da123d54b5447659428a8e4303e6c452e674869c90d55ca1384af5ba901393a05f847328fbe1e88cc725e41aaebd270abb402cec88db79b42ecd3feea3ab1ca3c621447bf2006ea342c61c33a46a83ae2101c859e9893ecb4ef3806f366741bae7f3bbdeba724fc8248e31d919f039f4588c3227ad70a90d7b20cfc752e865919123a67957d254751d38139ca3d320d1bb8483073c0d7dc4fd30ff5d04289f2575d7b170ad468d7c3bdbd39590cd1a30b3be50f6e1ada75138cb71b09bbb4d40e7f92c9c0a907b3f2cfd2df61af2aa54655cff03baa0cfe4a4971ac872ec1e8e15a2a2c89fd844c8f8f714d19b22fa3e3533395554a1768201e0fc9b133f1720d923171cb63e5f2b27bf4b051afd5794940d7b8b8220e8dad5bf53d85e29331c07edfbc26e5aeb14409bfa7093d18decbd3a67d3d33ad1968c76dce3dea885140e6589ec2ffba20bcf11b47efa67f3668fabb2b2234f61633a560822c5035dee41d2ce954db01a23b74699ca6e27f04ec817fc351f65cc239483caa07b1d11a8807f912c3258324ef1346e941893f236e9583f88e505f60e468104d1b984b6173c9e0a754630cead489893bffdeaa83cc2df88a7df1ac770358dc54d484c09dbc98fbbffd3c48e097f75ebab4b76487df09b1d07c8fbfe6dfa92473e8a8e5996fe7c64914cb51dc078d5dbcee9585570322858bf9af5b06bf30332cc243242cd6447d0b8c3524645f69d8e945c96d8ef4fcf98674edeb7cfc764a8cd17b7acd2d73d22db86949690d6b64dc0b9546fa44c9aaf67a7ca9f9d632fd667f1d075a9a1555af41a1f3b35c5091af1385a7a292e2b8fb5a843e725a00381129d405cdd88cd0077f6a9a8b3fdc8a90c0989664452c87f5f6aaa61526ebcf139ddf1d85fd34b30f82707f28349789e695da217cce8bd6c1a07bc1c610c2123123f3537b8582dc4319943a948c462b4a94c3d32d718f4e7e40e84fc1d90d907ca173f9590207ebe431a2ed2fbfe6766ef3d723052580ba769608cd1f92a3f3d4e93a117d9a1971474ea1d611ba61e3efb11bb50052b817390aeca7a0af16822efe7888dcb47f3a8f6061861fc47d698d3894e73068bc54eb2567ab38f01685e1a5f99d7b0e87c5ba307ca0dd4cce55ac3cfb20c123fd630ed7c46894b37e18ec0acd7d28546ef533f3ffc93988477f1718aec1eaaeceaaabfa580a13d26b1942e205f7b435c353845e4076f1ed4fb189c1fe4e4f0eb04589298ef747e73419107253ca57e224e9addba45bea1fe693d950b6bee858a4b2f0423089e8f0a265c7d11d2c6263262a98c15a9c7db82c0902d8a32abc7641aeff7710ab6e3aedc8579bcaa1b74b9d78a25a428b8b3543a9375f2077e6db82cb3cdb8e642677fc907d1fc5f2ac0c1e937d9b1a2cbd32d98c355e285e7f131d12ff97ae01bb79cbaffe87fc7c28c9325f6c9d17d77c2a3951810ca9fb540aad09b8800dd98978a0d23d11f931a3c8647b51286e4742304fd139990a807d85bf584149ef63808770423d54219590a8ea4678d929a06f21103a06818f24814bdafaeee34f068969bb74425a3ddb972f2bd936e11fbc697dab555e0c4f94ecb02e4ac87149bd736738dc82053bcc7bc2e1ddfdf273f804b34b1024a5b94e0e208d1b642a859d321c1c4c12f7581159fdad54f39235e4e6388151794c79c0be441b22851d00cdf77ef03e33d6de70034847482e69119bea4ac47d89ef322ee7e4d2936f4c0057b276055647177ca5751a8f914dad5ab799be01e225574142c037e3e034f95ce03d7f450ab029b1a4e401f0602c94d2428e01a41543c25b2aedb717b1a055edd8b089bab6f3f40603fe5bf5923b5a6e3c9870ee0fc61535fe572482da125af58dd9e62424ba74aa881a96f606a6e320011de26a5ff4590921e848c024506481c95086a43f397e096bd900856a5a50696fca06d248add6426d43548316ff9d8c58ac80038cfb57aacba27376e97a4412270942bde5187e25fcf07825efb5c15a07ab83cb371af223e1a37d16c00f63f3be267a9c3365c1b842c027a8594f4b9c49b75151c4347f442df68298a081c594f2ba462f790032242d7fb38dd072bd6059831f63d4f0ddba89110bcd806f13a8eb76990adfa7fed565fd19cc80d47e3643a73b24c8b44383a3a5e7627ca28e95d9986a8947e353536e1b25afefd83c40407c7bcafcb10e6312768b30ba0be2e0780ef433f116136cecde8027326dc9bf95b494006b2e8c07e20b75b800752c87b2c0b2725982e3d32a9b38a9f59e54e5db7be89168e7f0d532ea1aa82dc1673bfdf48ad8254ce27a5d76870a3eeb6829f3e76bd9105aa607e535a7cfd53e6de4cf88fc513d2505d8275062cbb8336aa793af7a84fb393914b6a5dabf9dc9de62ca28bcbed2b9aa17a42c7d7704a35e6a7c28e2eedf8ea29c5071eb01de3a6e0806c762a7b0d0831330de24cd6012cb82075af322b27e3bffa0ef60918ac3e5b5650cce30887aa92bc8aa9e2732aaf4b1da0893e61cd7ff102f63ab6ec0130a621d7b298d9e142d0442e8c10ae799a25b8c5888a9bd1dc1c456b6626edd58e9d82a8b41f953ece43c4bf7491e9f070c3a92ef134a7a0893b9e2076e1274dfc7805853b57726c36fcec81aee56ecfad10dc43206bd23833488b72b8c99d58a709773dd20fed52b431bc3e902cc4882ae40ec87ae41cb1a53e578b96c19459859a5c264d57a9f2590a45e0ab881e22f34fbbeb5ac200cb2d08ef3bd4668729b536bc57519da7854435bfcfe66ff10024ba8b250cdfcf750c316f1a5b2e7d2540dce3483fa2b9bb5d00fe0a4f402007cc6c6b586cbefa2087a4fb6a4540e47a524f38c4a17d83b31a438ef19154f464c1eed61e8d7064b7b9d8ace46c05f36969db3d855a4c74bdd8f42d0570b04bd0caf53196ecdedc11d595afac480628bac2d9416d38802a9ef42ee430a4433e09ab9425b4aef16e930a66d4e56c5c98db3b0f7b02bf9f3f278def8b7fcd4eee7f3160a2894787e2b6a471374af7c6af97b8faba62fbc4da077d6a2a3dddb7b7112cab114efa71cb0e38f55914e19bdd72b63274ee0baa057df873fc4f9e09e860e58ef59576441a92b2c72b0d4c2b9f70fb6e7bc712806a3ef85fa2a2c673c06c7812fe6ae0782c26929754517a793c0773e489c3d28f249d9cb218c79aff0d33b7d01b59f5c0a8542bdb6448774c9416e61964eb1d70914a8e1a19f18700d41b24db8a206ce131275465adecad8b31924aee8161ea6a9c0f59342b74cbdc503950019dbba438356ed7ae0b3bb58e93f2c14b61b7b167dbd45308a391f92e174562e35ee0af63b81e5efe3dea49bcef7c6501f4f2a7a7890935b6f18ec7ef77482658bff441115caf1890d5b636a9401f155338651221693586e89fb36ba63049bd71c032fd9796b623c2d59064bb9d45bebf53d55e8fb099420da4cdb6db9c5e465f516622b35a8ea986947320c557e4e8fb0430fce8b0418faf48c9e2baeb3c81c7b19c22f4b89d7783d26b6c53dc6775ff40d07addcad0584ed5f48e3f0166fb82ad04b7ef30d9cbf44dbf893f5892ce03f658b19fc3015e71cc1fd0957f975691f4bfbd2e4bbe537d45fe680e3a9951d122ebce0476755d0425944c9e8b564cd6139e31a9dfa830b84e8693490191063349dd6e5df3926fc5a85a8be596606f2c93de66ab9863894e72f8e2ed9879949bb7f06e2316c251ddefcf4f3e11a15b3b2072731c5f32e1e2ab5d84cb48d11353de0a40b5df35a345964666827a0b1456ea2533ee333ecb3694e7c98450f3130eef08c318269ad517f379d3a2c548e9e473f2c6bd22baf026f3111a5fb6c75db16210f551dae87e350651b20f3489559b745bb8dfaf54c2c6fa4090924294373c2aad60fd0c3607a1b1a0131374f912873e4b5235ec03c5b163b7905bb1b7996060b8aebd5d294dc833dbc971a04e11c3997cacdc2275c8897f183b60066af5c2591740175d341df6101c62287aa2ac504c1353ea2b191cb165a01d88a60f4ad699e61d56477c6a597fe975907cb971219d4f9e16b22f6dd41e2fa72ffc7c79c417a14ef7f6167da34ff9f9b6f8bd451ecc14e19f5a6b280fca9d5a70d06c9fec9d0aed0f1ba8770d576739d4f498e2b11f82428624a6e3be815bd50a753b46760eab8d0fc296476ed88e05e0d9c3e671ff8e6c7b26858902f23d26b31f3a4adee72b9a4fc66871f1a5caf09197dd100db5a3325200f37953eb3d0af22e59ec8df0867d1205363d627a55e6c0ec0015f77f1844f7a32ff8dd32266ba06933b8665c9cdb02cf2e117a8f1a832cb9f806fac6936c094c06bfe23b64a12156993925f486555d2db225115361c3269c9822a76e7c0bf8a4c4b7e0517c703e9fe091ed20b6f12eca7357e2a5e3df1eff9181e7db41c55e300370a8090918de334abd777a5eef5118109129e3fec516b7531e7e73d4cf9ab65993c391a7f824405a9e77fa8a295814a76f5da4172be5d71d32a38acea4ccb75c50c583eaa03b760acc3c8e7dd03") pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) 12:53:11 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1275.484136] kobject_add_internal failed for ip6gretap3 (error: -12 parent: net) 12:53:11 executing program 1 (fault-call:4 fault-nth:12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1275.637420] FAULT_INJECTION: forcing a failure. [ 1275.637420] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.656103] CPU: 0 PID: 25269 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1275.663958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.673351] Call Trace: [ 1275.675956] dump_stack+0x197/0x210 [ 1275.679595] should_fail.cold+0xa/0x1b [ 1275.683481] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1275.688583] ? lock_downgrade+0x880/0x880 [ 1275.692761] __should_failslab+0x121/0x190 [ 1275.696990] should_failslab+0x9/0x14 [ 1275.700795] __kmalloc_track_caller+0x2de/0x750 [ 1275.705457] ? lock_downgrade+0x880/0x880 [ 1275.709600] ? kstrdup_const+0x66/0x80 [ 1275.713482] kstrdup+0x3a/0x70 [ 1275.716688] kstrdup_const+0x66/0x80 [ 1275.720401] __kernfs_new_node+0xb0/0x6f0 [ 1275.724548] ? __lock_acquire+0x6ee/0x49c0 [ 1275.728787] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1275.733536] ? map_id_range_down+0x1ee/0x370 [ 1275.738073] ? __put_user_ns+0x70/0x70 [ 1275.741987] ? make_kgid+0x23/0x30 [ 1275.745534] kernfs_new_node+0x99/0x130 [ 1275.749514] kernfs_create_dir_ns+0x52/0x160 [ 1275.753935] sysfs_create_dir_ns+0x131/0x290 [ 1275.759996] ? sysfs_create_mount_point+0xa0/0xa0 [ 1275.764832] ? lock_downgrade+0x880/0x880 [ 1275.768979] ? net_namespace+0xd/0x40 [ 1275.772807] ? device_namespace+0x94/0xd0 [ 1275.776952] kobject_add_internal+0x2ab/0x8e0 [ 1275.781455] ? check_memory_region+0x101/0x190 [ 1275.786062] kobject_add+0x150/0x1c0 [ 1275.789782] ? kset_create_and_add+0x1a0/0x1a0 [ 1275.794376] ? mutex_unlock+0xd/0x10 [ 1275.798090] device_add+0x3cc/0x1760 [ 1275.801819] ? device_initialize+0x440/0x440 [ 1275.806247] ? get_device_parent.isra.0+0x570/0x570 [ 1275.811267] ? __init_waitqueue_head+0x36/0x90 [ 1275.815845] ? pm_runtime_init+0x347/0x400 [ 1275.820082] netdev_register_kobject+0x183/0x3b0 [ 1275.824866] register_netdevice+0x875/0xff0 [ 1275.829191] ? netdev_change_features+0xb0/0xb0 [ 1275.833862] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1275.839403] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1275.844628] ? ip6gre_tunnel_init+0x340/0x340 [ 1275.849125] ? lockdep_rtnl_is_held+0x26/0x30 [ 1275.853619] ? ip6gre_tunnel_find+0x496/0x640 [ 1275.858120] ip6gre_newlink+0x298/0x7a0 [ 1275.862092] ? ip6gre_changelink+0x560/0x560 [ 1275.866604] rtnl_newlink+0x1042/0x1600 [ 1275.870609] ? rtnl_link_unregister+0x250/0x250 [ 1275.875277] ? mark_held_locks+0x100/0x100 [ 1275.879519] ? debug_smp_processor_id+0x1c/0x20 [ 1275.884196] ? is_bpf_text_address+0xac/0x170 [ 1275.888688] ? find_held_lock+0x35/0x130 [ 1275.892755] ? is_bpf_text_address+0xac/0x170 [ 1275.897252] ? __lock_acquire+0x6ee/0x49c0 [ 1275.901481] ? __lock_acquire+0x6ee/0x49c0 [ 1275.905707] ? lock_downgrade+0x880/0x880 [ 1275.909852] ? mark_held_locks+0x100/0x100 [ 1275.914090] ? debug_smp_processor_id+0x1c/0x20 [ 1275.918758] ? perf_trace_lock_acquire+0xf5/0x580 [ 1275.923616] ? mark_held_locks+0x100/0x100 [ 1275.927840] ? debug_smp_processor_id+0x1c/0x20 [ 1275.932501] ? perf_trace_lock_acquire+0xf5/0x580 [ 1275.937369] ? find_held_lock+0x35/0x130 [ 1275.941438] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1275.945850] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1275.951383] ? rtnl_link_unregister+0x250/0x250 [ 1275.956051] rtnetlink_rcv_msg+0x463/0xb00 [ 1275.960279] ? rtnetlink_put_metrics+0x560/0x560 [ 1275.965026] ? netdev_pick_tx+0x300/0x300 [ 1275.969171] ? netlink_deliver_tap+0x22d/0xc20 [ 1275.973758] ? find_held_lock+0x35/0x130 [ 1275.977823] netlink_rcv_skb+0x17d/0x460 [ 1275.981879] ? rtnetlink_put_metrics+0x560/0x560 [ 1275.986635] ? netlink_ack+0xb30/0xb30 [ 1275.990517] ? kasan_check_read+0x11/0x20 [ 1275.994661] ? netlink_deliver_tap+0x254/0xc20 [ 1275.999245] rtnetlink_rcv+0x1d/0x30 [ 1276.002952] netlink_unicast+0x53a/0x730 [ 1276.007008] ? netlink_attachskb+0x770/0x770 [ 1276.011413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1276.016946] netlink_sendmsg+0x8ae/0xd70 [ 1276.021005] ? netlink_unicast+0x730/0x730 [ 1276.025239] ? selinux_socket_sendmsg+0x36/0x40 [ 1276.029983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1276.035524] ? security_socket_sendmsg+0x8d/0xc0 [ 1276.040274] ? netlink_unicast+0x730/0x730 [ 1276.044502] sock_sendmsg+0xd7/0x130 [ 1276.048219] ___sys_sendmsg+0x803/0x920 [ 1276.052187] ? copy_msghdr_from_user+0x430/0x430 [ 1276.056938] ? lock_downgrade+0x880/0x880 [ 1276.061081] ? kasan_check_read+0x11/0x20 [ 1276.065222] ? __fget+0x367/0x540 [ 1276.068668] ? iterate_fd+0x360/0x360 [ 1276.072477] ? __fget_light+0x1a9/0x230 [ 1276.076455] ? __fdget+0x1b/0x20 [ 1276.079820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1276.085360] __sys_sendmsg+0x105/0x1d0 [ 1276.089240] ? __ia32_sys_shutdown+0x80/0x80 [ 1276.093652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1276.098399] ? do_syscall_64+0x26/0x620 [ 1276.102373] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1276.107734] ? do_syscall_64+0x26/0x620 [ 1276.111702] __x64_sys_sendmsg+0x78/0xb0 [ 1276.115772] do_syscall_64+0xfd/0x620 [ 1276.119567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1276.124746] RIP: 0033:0x45af49 [ 1276.127929] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1276.146827] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.154534] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1276.161796] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1276.169055] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1276.176312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 12:53:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r7, 0x101, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfffd}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x643f}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0x7d605, 0xfac06]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10008000) delete_module(&(0x7f0000000040)='#(}GPL\x00', 0x200) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r6, 0x5}, 0x8) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2002, 0x24402) [ 1276.183571] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1276.191324] protocol 88fb is buggy, dev hsr_slave_0 [ 1276.196414] protocol 88fb is buggy, dev hsr_slave_1 [ 1276.201595] protocol 88fb is buggy, dev hsr_slave_0 [ 1276.206673] protocol 88fb is buggy, dev hsr_slave_1 [ 1276.211862] protocol 88fb is buggy, dev hsr_slave_0 [ 1276.216937] protocol 88fb is buggy, dev hsr_slave_1 [ 1276.229533] kobject_add_internal failed for ip6gretap3 (error: -12 parent: net) 12:53:11 executing program 1 (fault-call:4 fault-nth:13): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:11 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r3, @ANYRESDEC=r5], 0x8, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="202bd66bc27e"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "c7"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010000}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) 12:53:11 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:11 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1276.392819] FAULT_INJECTION: forcing a failure. [ 1276.392819] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.404928] CPU: 1 PID: 25355 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1276.412754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.422141] Call Trace: [ 1276.424759] dump_stack+0x197/0x210 [ 1276.428420] should_fail.cold+0xa/0x1b [ 1276.432330] ? is_bpf_text_address+0xd3/0x170 [ 1276.436868] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1276.442008] ? __kernel_text_address+0xd/0x40 [ 1276.447047] ? unwind_get_return_address+0x61/0xa0 [ 1276.452047] __should_failslab+0x121/0x190 [ 1276.456330] should_failslab+0x9/0x14 [ 1276.460165] kmem_cache_alloc+0x47/0x700 [ 1276.464281] ? save_stack+0xa9/0xd0 [ 1276.467975] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 1276.473633] idr_get_free+0x527/0xa28 [ 1276.477480] idr_alloc_u32+0x1d6/0x390 [ 1276.481406] ? __fprop_inc_percpu_max+0x230/0x230 [ 1276.486364] ? __lock_is_held+0xb6/0x140 12:53:11 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xa1b, 0x1, [0x4]}, &(0x7f0000000040)=0xa) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x40) [ 1276.490457] ? should_fail+0x14d/0x85c [ 1276.494378] ? perf_trace_lock+0x510/0x510 [ 1276.498644] ? __lock_is_held+0xb6/0x140 [ 1276.502746] idr_alloc_cyclic+0x132/0x270 [ 1276.506962] ? idr_alloc+0x150/0x150 [ 1276.510706] ? kasan_check_write+0x14/0x20 [ 1276.514972] ? do_raw_spin_lock+0xd7/0x250 [ 1276.519248] __kernfs_new_node+0x139/0x6f0 [ 1276.523517] ? __lock_acquire+0x6ee/0x49c0 [ 1276.527782] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1276.532831] ? map_id_range_down+0x1ee/0x370 [ 1276.537274] ? __put_user_ns+0x70/0x70 [ 1276.541196] ? make_kgid+0x23/0x30 [ 1276.544771] kernfs_new_node+0x99/0x130 [ 1276.548783] kernfs_create_dir_ns+0x52/0x160 [ 1276.553219] sysfs_create_dir_ns+0x131/0x290 [ 1276.557655] ? sysfs_create_mount_point+0xa0/0xa0 [ 1276.562518] ? lock_downgrade+0x880/0x880 [ 1276.566690] ? net_namespace+0xd/0x40 [ 1276.570520] ? device_namespace+0x94/0xd0 [ 1276.574702] kobject_add_internal+0x2ab/0x8e0 [ 1276.579228] ? check_memory_region+0x101/0x190 [ 1276.583854] kobject_add+0x150/0x1c0 [ 1276.587592] ? kset_create_and_add+0x1a0/0x1a0 [ 1276.592228] ? mutex_unlock+0xd/0x10 [ 1276.596001] device_add+0x3cc/0x1760 [ 1276.599741] ? device_initialize+0x440/0x440 [ 1276.604163] ? get_device_parent.isra.0+0x570/0x570 [ 1276.609186] ? __init_waitqueue_head+0x36/0x90 [ 1276.613778] ? pm_runtime_init+0x347/0x400 [ 1276.618013] netdev_register_kobject+0x183/0x3b0 [ 1276.622767] register_netdevice+0x875/0xff0 [ 1276.627083] ? netdev_change_features+0xb0/0xb0 [ 1276.631761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1276.637385] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1276.643394] ? ip6gre_tunnel_init+0x340/0x340 [ 1276.647891] ? lockdep_rtnl_is_held+0x26/0x30 [ 1276.652398] ? ip6gre_tunnel_find+0x496/0x640 [ 1276.657002] ip6gre_newlink+0x298/0x7a0 [ 1276.660985] ? ip6gre_changelink+0x560/0x560 [ 1276.665948] rtnl_newlink+0x1042/0x1600 [ 1276.669939] ? rtnl_link_unregister+0x250/0x250 [ 1276.675051] ? mark_held_locks+0x100/0x100 [ 1276.679291] ? debug_smp_processor_id+0x1c/0x20 [ 1276.683959] ? is_bpf_text_address+0xac/0x170 [ 1276.688464] ? find_held_lock+0x35/0x130 [ 1276.692523] ? is_bpf_text_address+0xac/0x170 [ 1276.697012] ? __lock_acquire+0x6ee/0x49c0 [ 1276.701328] ? __lock_acquire+0x6ee/0x49c0 [ 1276.705564] ? lock_downgrade+0x880/0x880 [ 1276.709812] ? mark_held_locks+0x100/0x100 [ 1276.714042] ? debug_smp_processor_id+0x1c/0x20 [ 1276.718760] ? perf_trace_lock_acquire+0xf5/0x580 [ 1276.723628] ? mark_held_locks+0x100/0x100 [ 1276.727855] ? debug_smp_processor_id+0x1c/0x20 [ 1276.732516] ? perf_trace_lock_acquire+0xf5/0x580 [ 1276.737744] ? find_held_lock+0x35/0x130 [ 1276.741813] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1276.746411] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1276.755852] ? rtnl_link_unregister+0x250/0x250 [ 1276.760513] rtnetlink_rcv_msg+0x463/0xb00 [ 1276.764746] ? rtnetlink_put_metrics+0x560/0x560 [ 1276.769512] ? netdev_pick_tx+0x300/0x300 [ 1276.773668] ? netlink_deliver_tap+0x22d/0xc20 [ 1276.778256] ? find_held_lock+0x35/0x130 [ 1276.782313] netlink_rcv_skb+0x17d/0x460 [ 1276.786719] ? rtnetlink_put_metrics+0x560/0x560 [ 1276.791556] ? netlink_ack+0xb30/0xb30 [ 1276.795448] ? kasan_check_read+0x11/0x20 [ 1276.799720] ? netlink_deliver_tap+0x254/0xc20 [ 1276.804316] rtnetlink_rcv+0x1d/0x30 [ 1276.808039] netlink_unicast+0x53a/0x730 [ 1276.812209] ? netlink_attachskb+0x770/0x770 [ 1276.816890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1276.823148] netlink_sendmsg+0x8ae/0xd70 [ 1276.827484] ? netlink_unicast+0x730/0x730 [ 1276.831757] ? selinux_socket_sendmsg+0x36/0x40 [ 1276.836512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1276.842236] ? security_socket_sendmsg+0x8d/0xc0 [ 1276.846991] ? netlink_unicast+0x730/0x730 [ 1276.851265] sock_sendmsg+0xd7/0x130 [ 1276.854995] ___sys_sendmsg+0x803/0x920 [ 1276.859773] ? copy_msghdr_from_user+0x430/0x430 [ 1276.865067] ? lock_downgrade+0x880/0x880 [ 1276.869330] ? kasan_check_read+0x11/0x20 [ 1276.873487] ? __fget+0x367/0x540 [ 1276.876947] ? iterate_fd+0x360/0x360 [ 1276.881129] ? __fget_light+0x1a9/0x230 [ 1276.885197] ? __fdget+0x1b/0x20 [ 1276.889034] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1276.895284] __sys_sendmsg+0x105/0x1d0 [ 1276.900231] ? __ia32_sys_shutdown+0x80/0x80 [ 1276.905614] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1276.910361] ? do_syscall_64+0x26/0x620 [ 1276.914333] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1276.921188] ? do_syscall_64+0x26/0x620 [ 1276.925509] __x64_sys_sendmsg+0x78/0xb0 [ 1276.929662] do_syscall_64+0xfd/0x620 [ 1276.933580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1276.938773] RIP: 0033:0x45af49 [ 1276.942264] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1276.961449] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.969165] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1276.976426] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1276.983687] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1276.991054] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1276.999048] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:12 executing program 1 (fault-call:4 fault-nth:14): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:12 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:12 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24c02) [ 1277.190007] FAULT_INJECTION: forcing a failure. [ 1277.190007] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.268049] CPU: 1 PID: 25584 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1277.277073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.287836] Call Trace: [ 1277.290554] dump_stack+0x197/0x210 [ 1277.294322] should_fail.cold+0xa/0x1b [ 1277.298605] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1277.304003] ? lock_downgrade+0x880/0x880 [ 1277.308635] __should_failslab+0x121/0x190 [ 1277.312990] should_failslab+0x9/0x14 [ 1277.316855] kmem_cache_alloc+0x2ae/0x700 [ 1277.321042] ? kasan_check_write+0x14/0x20 [ 1277.325575] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1277.330620] __kernfs_new_node+0xef/0x6f0 [ 1277.335513] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1277.340305] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1277.345360] ? map_id_range_down+0x1ee/0x370 [ 1277.349894] ? __put_user_ns+0x70/0x70 [ 1277.354081] kernfs_new_node+0x99/0x130 [ 1277.358262] __kernfs_create_file+0x51/0x33b [ 1277.362881] sysfs_add_file_mode_ns+0x222/0x560 [ 1277.367892] sysfs_create_file_ns+0x13a/0x1c0 [ 1277.372403] ? sysfs_add_file_mode_ns+0x560/0x560 [ 1277.377435] ? up_read+0x1a/0x110 [ 1277.381364] device_create_file+0xfa/0x1e0 [ 1277.386467] ? acpi_bind_one+0x830/0x830 [ 1277.391487] device_add+0x411/0x1760 [ 1277.395200] ? device_initialize+0x440/0x440 [ 1277.399788] ? get_device_parent.isra.0+0x570/0x570 [ 1277.405275] ? __init_waitqueue_head+0x36/0x90 [ 1277.410033] ? pm_runtime_init+0x347/0x400 [ 1277.415004] netdev_register_kobject+0x183/0x3b0 [ 1277.420027] register_netdevice+0x875/0xff0 [ 1277.424442] ? netdev_change_features+0xb0/0xb0 [ 1277.429306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1277.435816] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1277.441943] ? ip6gre_tunnel_init+0x340/0x340 [ 1277.446784] ? lockdep_rtnl_is_held+0x26/0x30 [ 1277.451279] ? ip6gre_tunnel_find+0x496/0x640 [ 1277.455879] ip6gre_newlink+0x298/0x7a0 [ 1277.459931] ? ip6gre_changelink+0x560/0x560 [ 1277.464517] rtnl_newlink+0x1042/0x1600 [ 1277.468961] ? rtnl_link_unregister+0x250/0x250 [ 1277.473641] ? mark_held_locks+0x100/0x100 [ 1277.477976] ? is_bpf_text_address+0xac/0x170 [ 1277.482557] ? find_held_lock+0x35/0x130 [ 1277.486707] ? is_bpf_text_address+0xac/0x170 [ 1277.491202] ? __lock_acquire+0x6ee/0x49c0 [ 1277.495536] ? __lock_acquire+0x6ee/0x49c0 [ 1277.500625] ? lock_downgrade+0x880/0x880 [ 1277.504893] ? mark_held_locks+0x100/0x100 [ 1277.509131] ? mark_held_locks+0x100/0x100 [ 1277.514184] ? __kernel_text_address+0xd/0x40 [ 1277.518709] ? mark_held_locks+0x100/0x100 [ 1277.522964] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1277.527664] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1277.532718] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1277.538478] ? find_held_lock+0x35/0x130 [ 1277.542542] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1277.547011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1277.552649] ? rtnl_link_unregister+0x250/0x250 [ 1277.557761] rtnetlink_rcv_msg+0x463/0xb00 [ 1277.562284] ? rtnetlink_put_metrics+0x560/0x560 [ 1277.568123] ? netdev_pick_tx+0x300/0x300 [ 1277.572367] ? netlink_deliver_tap+0x22d/0xc20 [ 1277.576952] ? find_held_lock+0x35/0x130 [ 1277.581026] netlink_rcv_skb+0x17d/0x460 [ 1277.585097] ? rtnetlink_put_metrics+0x560/0x560 [ 1277.589955] ? netlink_ack+0xb30/0xb30 [ 1277.594127] ? kasan_check_read+0x11/0x20 [ 1277.598334] ? netlink_deliver_tap+0x254/0xc20 [ 1277.603470] rtnetlink_rcv+0x1d/0x30 [ 1277.607210] netlink_unicast+0x53a/0x730 [ 1277.611717] ? netlink_attachskb+0x770/0x770 [ 1277.616144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1277.621686] netlink_sendmsg+0x8ae/0xd70 [ 1277.626015] ? netlink_unicast+0x730/0x730 [ 1277.630604] ? selinux_socket_sendmsg+0x36/0x40 [ 1277.636682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1277.642334] ? security_socket_sendmsg+0x8d/0xc0 [ 1277.647110] ? netlink_unicast+0x730/0x730 [ 1277.651353] sock_sendmsg+0xd7/0x130 [ 1277.655082] ___sys_sendmsg+0x803/0x920 [ 1277.659066] ? copy_msghdr_from_user+0x430/0x430 [ 1277.664038] ? lock_downgrade+0x880/0x880 [ 1277.668749] ? kasan_check_read+0x11/0x20 [ 1277.672909] ? __fget+0x367/0x540 [ 1277.676640] ? iterate_fd+0x360/0x360 [ 1277.680834] ? __fget_light+0x1a9/0x230 [ 1277.685240] ? __fdget+0x1b/0x20 [ 1277.688697] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1277.694334] __sys_sendmsg+0x105/0x1d0 [ 1277.698218] ? __ia32_sys_shutdown+0x80/0x80 [ 1277.702726] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1277.707478] ? do_syscall_64+0x26/0x620 [ 1277.711640] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1277.717019] ? do_syscall_64+0x26/0x620 [ 1277.720996] __x64_sys_sendmsg+0x78/0xb0 [ 1277.725077] do_syscall_64+0xfd/0x620 [ 1277.728879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1277.734083] RIP: 0033:0x45af49 [ 1277.737286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1277.756673] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.766445] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1277.773886] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1277.781340] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1277.789330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1277.796691] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:13 executing program 1 (fault-call:4 fault-nth:15): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1277.937608] FAULT_INJECTION: forcing a failure. [ 1277.937608] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.986185] CPU: 0 PID: 25689 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1277.994659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.005450] Call Trace: [ 1278.008433] dump_stack+0x197/0x210 [ 1278.012093] should_fail.cold+0xa/0x1b [ 1278.016056] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1278.021227] ? lock_downgrade+0x880/0x880 [ 1278.025856] __should_failslab+0x121/0x190 [ 1278.031345] should_failslab+0x9/0x14 [ 1278.035579] kmem_cache_alloc+0x2ae/0x700 [ 1278.040213] ? memcpy+0x46/0x50 [ 1278.043782] ? kstrdup+0x5a/0x70 [ 1278.047188] __kernfs_new_node+0xef/0x6f0 [ 1278.051364] ? mark_held_locks+0x100/0x100 [ 1278.056390] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1278.061421] ? perf_trace_lock_acquire+0xf5/0x580 [ 1278.068049] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 1278.073983] ? find_held_lock+0x35/0x130 [ 1278.078112] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 1278.084205] ? kernfs_activate+0x192/0x1f0 [ 1278.088483] kernfs_new_node+0x99/0x130 [ 1278.093084] kernfs_create_link+0xdd/0x250 [ 1278.097356] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 1278.103355] sysfs_create_link+0x65/0xc0 [ 1278.108216] device_add+0x7ce/0x1760 [ 1278.112038] ? get_device_parent.isra.0+0x570/0x570 [ 1278.117477] ? __init_waitqueue_head+0x36/0x90 [ 1278.122396] ? pm_runtime_init+0x347/0x400 [ 1278.126657] netdev_register_kobject+0x183/0x3b0 [ 1278.131525] register_netdevice+0x875/0xff0 [ 1278.136400] ? netdev_change_features+0xb0/0xb0 [ 1278.141090] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1278.146902] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1278.152250] ? ip6gre_tunnel_init+0x340/0x340 [ 1278.157908] ? lockdep_rtnl_is_held+0x26/0x30 [ 1278.162867] ? ip6gre_tunnel_find+0x496/0x640 [ 1278.167808] ip6gre_newlink+0x298/0x7a0 [ 1278.171802] ? ip6gre_changelink+0x560/0x560 [ 1278.176234] rtnl_newlink+0x1042/0x1600 [ 1278.181064] ? rtnl_link_unregister+0x250/0x250 [ 1278.186838] ? mark_held_locks+0x100/0x100 [ 1278.191348] ? debug_smp_processor_id+0x1c/0x20 [ 1278.196063] ? is_bpf_text_address+0xac/0x170 [ 1278.200564] ? find_held_lock+0x35/0x130 [ 1278.204628] ? is_bpf_text_address+0xac/0x170 [ 1278.210280] ? __lock_acquire+0x6ee/0x49c0 [ 1278.214697] ? __lock_acquire+0x6ee/0x49c0 [ 1278.218964] ? lock_downgrade+0x880/0x880 [ 1278.225483] ? mark_held_locks+0x100/0x100 [ 1278.229761] ? debug_smp_processor_id+0x1c/0x20 [ 1278.234475] ? perf_trace_lock_acquire+0xf5/0x580 [ 1278.239394] ? mark_held_locks+0x100/0x100 [ 1278.243660] ? debug_smp_processor_id+0x1c/0x20 [ 1278.248346] ? perf_trace_lock_acquire+0xf5/0x580 [ 1278.251093] net_ratelimit: 2 callbacks suppressed [ 1278.251102] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.253252] ? find_held_lock+0x35/0x130 [ 1278.258125] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.263084] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1278.263120] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1278.263140] ? rtnl_link_unregister+0x250/0x250 [ 1278.263160] rtnetlink_rcv_msg+0x463/0xb00 [ 1278.267320] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.272312] ? rtnetlink_put_metrics+0x560/0x560 [ 1278.272333] ? netdev_pick_tx+0x300/0x300 [ 1278.272356] ? netlink_deliver_tap+0x22d/0xc20 [ 1278.276791] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.282326] ? find_held_lock+0x35/0x130 [ 1278.282351] netlink_rcv_skb+0x17d/0x460 [ 1278.282371] ? rtnetlink_put_metrics+0x560/0x560 [ 1278.287140] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.291274] ? netlink_ack+0xb30/0xb30 [ 1278.291294] ? kasan_check_read+0x11/0x20 [ 1278.291318] ? netlink_deliver_tap+0x254/0xc20 [ 1278.296358] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.301093] rtnetlink_rcv+0x1d/0x30 [ 1278.301111] netlink_unicast+0x53a/0x730 [ 1278.301136] ? netlink_attachskb+0x770/0x770 [ 1278.305363] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.309859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1278.315025] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.319019] netlink_sendmsg+0x8ae/0xd70 [ 1278.383046] ? netlink_unicast+0x730/0x730 [ 1278.387302] ? selinux_socket_sendmsg+0x36/0x40 [ 1278.391967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1278.397499] ? security_socket_sendmsg+0x8d/0xc0 [ 1278.402259] ? netlink_unicast+0x730/0x730 [ 1278.406511] sock_sendmsg+0xd7/0x130 [ 1278.410270] ___sys_sendmsg+0x803/0x920 [ 1278.414256] ? copy_msghdr_from_user+0x430/0x430 [ 1278.419011] ? lock_downgrade+0x880/0x880 [ 1278.423158] ? kasan_check_read+0x11/0x20 [ 1278.427306] ? __fget+0x367/0x540 [ 1278.430757] ? iterate_fd+0x360/0x360 [ 1278.434652] ? __fget_light+0x1a9/0x230 [ 1278.438647] ? __fdget+0x1b/0x20 [ 1278.442024] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1278.447571] __sys_sendmsg+0x105/0x1d0 [ 1278.451468] ? __ia32_sys_shutdown+0x80/0x80 [ 1278.456535] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1278.461286] ? do_syscall_64+0x26/0x620 [ 1278.465256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1278.470613] ? do_syscall_64+0x26/0x620 [ 1278.474588] __x64_sys_sendmsg+0x78/0xb0 [ 1278.478654] do_syscall_64+0xfd/0x620 [ 1278.482454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1278.487633] RIP: 0033:0x45af49 [ 1278.490834] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1278.509858] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.518346] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000000)=""/129, &(0x7f0000000100)=0x81) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:13 executing program 2: r0 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x113900) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0x6, 0x401]) keyctl$read(0x5, r0, 0x0, 0x0) keyctl$describe(0x11, r0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r3 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r3, 0x0, 0x0) keyctl$describe(0x11, r3, 0x0, 0x0) keyctl$search(0xa, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, r3) modify_ldt$write(0x1, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000080)) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000002c0)={0x4000, "94a5818da4a51872cfc444671b08674c664deca029cc4da479f6cad4229025fe", 0x3, 0x3, 0x4, 0x80008, 0x2, 0x1}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$TIOCSCTTY(r5, 0x540e, 0x991) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001840)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r8, 0xfc83829847e2982f, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400208}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7fff}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x140}, 0x8004) [ 1278.534465] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1278.541743] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1278.549006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1278.556268] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:14 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:14 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:14 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:14 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:14 executing program 1 (fault-call:4 fault-nth:16): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:14 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2002, 0x0) dup2(r3, r4) r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r10, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r8, r9, 0x0, 0x102000004) accept4$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10, 0x80000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r5, @ANYRESDEC=r7], 0x8, 0x1) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x2, 0x10, 0x2, 0x6, 0x3, 0x7, 0x600, 0x1, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400ad08000000000000e68183b32b8be49c20dfee3c7d3c02e9e3a5bc791d92d52ad1d1f569541b17f3ba1d822c6a9ba58977", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c0012000c000100697036746e6c00001c00020014000200ff02000000000000000000000000000104001300"], 0x54}}, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x400000000000002, 0x0, 0xc, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x201ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0) 12:53:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX, @ANYRESDEC=r2], 0x8, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x12c0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x3, 0x0, 0x0, 0xffff}, 0x0, 0x0, r1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001580)={0x14, r4, 0x11, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) [ 1278.873986] FAULT_INJECTION: forcing a failure. [ 1278.873986] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.929733] CPU: 0 PID: 25836 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1278.937670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.947050] Call Trace: [ 1278.949762] dump_stack+0x197/0x210 [ 1278.953680] should_fail.cold+0xa/0x1b [ 1278.957739] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1278.962866] ? lock_downgrade+0x880/0x880 [ 1278.967045] __should_failslab+0x121/0x190 [ 1278.971304] should_failslab+0x9/0x14 [ 1278.975127] kmem_cache_alloc+0x2ae/0x700 [ 1278.979292] ? memcpy+0x46/0x50 [ 1278.982587] ? kstrdup+0x5a/0x70 [ 1278.985974] __kernfs_new_node+0xef/0x6f0 [ 1278.990142] ? mark_held_locks+0x100/0x100 [ 1278.994402] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1278.999176] ? perf_trace_lock_acquire+0xf5/0x580 [ 1279.004047] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 1279.009546] ? find_held_lock+0x35/0x130 [ 1279.013634] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 1279.019111] ? kernfs_activate+0x192/0x1f0 [ 1279.023373] kernfs_new_node+0x99/0x130 [ 1279.027566] kernfs_create_link+0xdd/0x250 [ 1279.031848] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 1279.037184] sysfs_create_link+0x65/0xc0 [ 1279.041264] device_add+0x7ce/0x1760 [ 1279.045007] ? get_device_parent.isra.0+0x570/0x570 [ 1279.050420] ? __init_waitqueue_head+0x36/0x90 [ 1279.055146] ? pm_runtime_init+0x347/0x400 [ 1279.060210] netdev_register_kobject+0x183/0x3b0 [ 1279.065033] register_netdevice+0x875/0xff0 [ 1279.069385] ? netdev_change_features+0xb0/0xb0 [ 1279.074249] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1279.079821] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1279.085036] ? ip6gre_tunnel_init+0x340/0x340 [ 1279.089563] ? lockdep_rtnl_is_held+0x26/0x30 [ 1279.094088] ? ip6gre_tunnel_find+0x496/0x640 [ 1279.098609] ip6gre_newlink+0x298/0x7a0 [ 1279.102616] ? ip6gre_changelink+0x560/0x560 [ 1279.107070] rtnl_newlink+0x1042/0x1600 [ 1279.111090] ? rtnl_link_unregister+0x250/0x250 [ 1279.116048] ? mark_held_locks+0x100/0x100 [ 1279.120282] ? debug_smp_processor_id+0x1c/0x20 [ 1279.124965] ? is_bpf_text_address+0xac/0x170 [ 1279.129559] ? find_held_lock+0x35/0x130 [ 1279.133648] ? is_bpf_text_address+0xac/0x170 [ 1279.138273] ? __lock_acquire+0x6ee/0x49c0 [ 1279.142525] ? __lock_acquire+0x6ee/0x49c0 [ 1279.146766] ? lock_downgrade+0x880/0x880 [ 1279.150931] ? mark_held_locks+0x100/0x100 [ 1279.155172] ? debug_smp_processor_id+0x1c/0x20 [ 1279.159852] ? perf_trace_lock_acquire+0xf5/0x580 [ 1279.164723] ? mark_held_locks+0x100/0x100 [ 1279.168977] ? debug_smp_processor_id+0x1c/0x20 [ 1279.173670] ? perf_trace_lock_acquire+0xf5/0x580 [ 1279.178550] ? find_held_lock+0x35/0x130 [ 1279.182639] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1279.187084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1279.193067] ? rtnl_link_unregister+0x250/0x250 [ 1279.197867] rtnetlink_rcv_msg+0x463/0xb00 [ 1279.202194] ? rtnetlink_put_metrics+0x560/0x560 [ 1279.206946] ? netdev_pick_tx+0x300/0x300 [ 1279.211122] ? netlink_deliver_tap+0x22d/0xc20 [ 1279.215712] ? find_held_lock+0x35/0x130 [ 1279.219785] netlink_rcv_skb+0x17d/0x460 [ 1279.223863] ? rtnetlink_put_metrics+0x560/0x560 [ 1279.228631] ? netlink_ack+0xb30/0xb30 [ 1279.232526] ? kasan_check_read+0x11/0x20 [ 1279.236676] ? netlink_deliver_tap+0x254/0xc20 [ 1279.241290] rtnetlink_rcv+0x1d/0x30 [ 1279.245015] netlink_unicast+0x53a/0x730 [ 1279.249179] ? netlink_attachskb+0x770/0x770 [ 1279.253612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1279.259251] netlink_sendmsg+0x8ae/0xd70 [ 1279.263342] ? netlink_unicast+0x730/0x730 [ 1279.267615] ? selinux_socket_sendmsg+0x36/0x40 [ 1279.272387] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1279.278077] ? security_socket_sendmsg+0x8d/0xc0 [ 1279.283200] ? netlink_unicast+0x730/0x730 [ 1279.287449] sock_sendmsg+0xd7/0x130 [ 1279.291213] ___sys_sendmsg+0x803/0x920 [ 1279.295212] ? copy_msghdr_from_user+0x430/0x430 [ 1279.301027] ? lock_downgrade+0x880/0x880 [ 1279.305195] ? kasan_check_read+0x11/0x20 [ 1279.309343] ? __fget+0x367/0x540 [ 1279.312802] ? iterate_fd+0x360/0x360 [ 1279.316603] ? __fget_light+0x1a9/0x230 [ 1279.320592] ? __fdget+0x1b/0x20 [ 1279.323952] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1279.329498] __sys_sendmsg+0x105/0x1d0 [ 1279.333404] ? __ia32_sys_shutdown+0x80/0x80 [ 1279.337829] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1279.342597] ? do_syscall_64+0x26/0x620 [ 1279.346566] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1279.351936] ? do_syscall_64+0x26/0x620 [ 1279.355913] __x64_sys_sendmsg+0x78/0xb0 [ 1279.359973] do_syscall_64+0xfd/0x620 [ 1279.363773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1279.368979] RIP: 0033:0x45af49 [ 1279.372172] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1279.392026] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1279.399725] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1279.406985] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1279.414423] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1279.421766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1279.429023] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:15 executing program 1 (fault-call:4 fault-nth:17): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:15 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:15 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r1, 0x8}, &(0x7f0000000080)=0x8) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:15 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1279.640363] FAULT_INJECTION: forcing a failure. [ 1279.640363] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.737035] CPU: 0 PID: 26007 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1279.744884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.754258] Call Trace: [ 1279.756886] dump_stack+0x197/0x210 [ 1279.760545] should_fail.cold+0xa/0x1b [ 1279.764459] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1279.769592] ? lock_downgrade+0x880/0x880 [ 1279.773878] __should_failslab+0x121/0x190 [ 1279.778145] should_failslab+0x9/0x14 [ 1279.781962] __kmalloc_track_caller+0x2de/0x750 [ 1279.786653] ? __lock_acquire+0x6ee/0x49c0 [ 1279.790930] ? kstrdup_const+0x66/0x80 [ 1279.794834] kstrdup+0x3a/0x70 [ 1279.798048] kstrdup_const+0x66/0x80 [ 1279.802747] __kernfs_new_node+0xb0/0x6f0 [ 1279.806936] ? mark_held_locks+0x100/0x100 [ 1279.811186] ? kasan_check_write+0x14/0x20 [ 1279.815441] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1279.820344] ? wait_for_completion+0x440/0x440 [ 1279.824956] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 1279.830429] ? find_held_lock+0x35/0x130 [ 1279.834508] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 1279.839976] ? kernfs_activate+0x192/0x1f0 [ 1279.844231] kernfs_new_node+0x99/0x130 [ 1279.848225] kernfs_create_link+0xdd/0x250 [ 1279.852484] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 1279.857786] sysfs_create_link+0x65/0xc0 [ 1279.861869] device_add+0x7ce/0x1760 [ 1279.865875] ? get_device_parent.isra.0+0x570/0x570 [ 1279.870907] ? __init_waitqueue_head+0x36/0x90 [ 1279.875506] ? pm_runtime_init+0x347/0x400 [ 1279.879760] netdev_register_kobject+0x183/0x3b0 [ 1279.884541] register_netdevice+0x875/0xff0 [ 1279.888884] ? netdev_change_features+0xb0/0xb0 [ 1279.893573] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1279.899481] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1279.904684] ? ip6gre_tunnel_init+0x340/0x340 [ 1279.909195] ? lockdep_rtnl_is_held+0x26/0x30 [ 1279.913708] ? ip6gre_tunnel_find+0x496/0x640 [ 1279.918229] ip6gre_newlink+0x298/0x7a0 [ 1279.922231] ? ip6gre_changelink+0x560/0x560 [ 1279.926666] rtnl_newlink+0x1042/0x1600 [ 1279.930676] ? rtnl_link_unregister+0x250/0x250 [ 1279.935377] ? mark_held_locks+0x100/0x100 [ 1279.939631] ? is_bpf_text_address+0xac/0x170 [ 1279.944142] ? find_held_lock+0x35/0x130 [ 1279.948219] ? is_bpf_text_address+0xac/0x170 [ 1279.952737] ? __lock_acquire+0x6ee/0x49c0 [ 1279.956988] ? __lock_acquire+0x6ee/0x49c0 [ 1279.961236] ? lock_downgrade+0x880/0x880 [ 1279.965411] ? mark_held_locks+0x100/0x100 [ 1279.969665] ? mark_held_locks+0x100/0x100 [ 1279.973924] ? __kernel_text_address+0xd/0x40 [ 1279.978460] ? mark_held_locks+0x100/0x100 [ 1279.982720] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1279.987410] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1279.992443] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1279.997516] ? find_held_lock+0x35/0x130 [ 1280.001603] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1280.006044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1280.011608] ? rtnl_link_unregister+0x250/0x250 [ 1280.016302] rtnetlink_rcv_msg+0x463/0xb00 [ 1280.020563] ? rtnetlink_put_metrics+0x560/0x560 [ 1280.025447] ? netdev_pick_tx+0x300/0x300 [ 1280.029617] ? netlink_deliver_tap+0x22d/0xc20 [ 1280.034221] ? find_held_lock+0x35/0x130 [ 1280.038310] netlink_rcv_skb+0x17d/0x460 [ 1280.042398] ? rtnetlink_put_metrics+0x560/0x560 [ 1280.047177] ? netlink_ack+0xb30/0xb30 [ 1280.051087] ? kasan_check_read+0x11/0x20 [ 1280.055261] ? netlink_deliver_tap+0x254/0xc20 [ 1280.059864] rtnetlink_rcv+0x1d/0x30 [ 1280.063597] netlink_unicast+0x53a/0x730 [ 1280.067679] ? netlink_attachskb+0x770/0x770 [ 1280.072105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1280.077694] netlink_sendmsg+0x8ae/0xd70 [ 1280.081790] ? netlink_unicast+0x730/0x730 [ 1280.086747] ? selinux_socket_sendmsg+0x36/0x40 [ 1280.091434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1280.096990] ? security_socket_sendmsg+0x8d/0xc0 [ 1280.101771] ? netlink_unicast+0x730/0x730 [ 1280.106035] sock_sendmsg+0xd7/0x130 [ 1280.109767] ___sys_sendmsg+0x803/0x920 [ 1280.113787] ? copy_msghdr_from_user+0x430/0x430 [ 1280.118561] ? lock_downgrade+0x880/0x880 [ 1280.122724] ? kasan_check_read+0x11/0x20 [ 1280.126898] ? __fget+0x367/0x540 [ 1280.130368] ? iterate_fd+0x360/0x360 [ 1280.134191] ? __fget_light+0x1a9/0x230 [ 1280.138185] ? __fdget+0x1b/0x20 [ 1280.141567] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1280.147122] __sys_sendmsg+0x105/0x1d0 [ 1280.151024] ? __ia32_sys_shutdown+0x80/0x80 [ 1280.156588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1280.161365] ? do_syscall_64+0x26/0x620 [ 1280.165360] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1280.170744] ? do_syscall_64+0x26/0x620 [ 1280.174755] __x64_sys_sendmsg+0x78/0xb0 [ 1280.178846] do_syscall_64+0xfd/0x620 [ 1280.182676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1280.187881] RIP: 0033:0x45af49 [ 1280.191084] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1280.209999] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.217728] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1280.225017] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1280.232302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r3], 0x8, 0x1) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x81, 0xff, 0xf4, 0x20, 0x0, 0xb2, 0x5000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x400, 0xf66, 0x9, 0x6, 0x9, 0x7}, 0xffffffffffffffff, 0xe, r2, 0x8) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x604480) 12:53:15 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x200, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000400)={0x5, @sliced={0xfffc, [0x3, 0xdb6e, 0x9, 0x100, 0x8000, 0xfff, 0x9, 0x40, 0x75, 0x9, 0x7, 0x8, 0x101, 0x5829, 0x6, 0x400, 0x0, 0x3, 0x2, 0x8, 0x8000, 0x2, 0x7ff, 0x800, 0x3f, 0x0, 0x1ff, 0x8, 0x7, 0x2, 0x3, 0x3a20, 0x7ff, 0x3f, 0xe7, 0x2, 0x9, 0x8, 0x1, 0x2, 0x9f, 0x7, 0x0, 0x4, 0x7, 0x47b8, 0x800, 0x9], 0xfff}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000000100c000af3b51f804218cbc8b00000000661079eda443139704baebcd2c00cbb000"/58]) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000001c0)=0x100000) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) [ 1280.239617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1280.246906] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1280.331054] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.336566] protocol 88fb is buggy, dev hsr_slave_1 12:53:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x6c6, 0x1}, 0x14) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:15 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:15 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x212101, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x8, 0x9}, 0x90) 12:53:16 executing program 1 (fault-call:4 fault-nth:18): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:16 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20400}, 0xfffffff1, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b00000b4d5cbbfaf8c00000001d200", @ANYRES16=r2, @ANYBLOB="000025bd7000fedbdf250200000008006200000100000800010002000000050059000400000008006a00040000000c009900ffff0000ffffffff140002007866726d30000000000000000000000008003f000100000008000c010180ffff4400250005000500050000000000030004000000050005003f000000050005007f000000050001000700000006000200ff7f0000060003000000000005000100fb0000000800260001000100"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x9181036ce8c4e5df) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000280)={'erspan0\x00', 0x9}) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r6, r7, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) 12:53:16 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000200)={"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"}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70b, 0xfffffffffffffff7}, 0x8000, 0x0, 0x0, 0x6, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1280.735182] FAULT_INJECTION: forcing a failure. [ 1280.735182] name failslab, interval 1, probability 0, space 0, times 0 12:53:16 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1280.806703] CPU: 0 PID: 26402 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1280.815255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.824619] Call Trace: [ 1280.827220] dump_stack+0x197/0x210 [ 1280.830859] should_fail.cold+0xa/0x1b [ 1280.834775] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1280.839901] ? lock_downgrade+0x880/0x880 [ 1280.844077] __should_failslab+0x121/0x190 [ 1280.848309] should_failslab+0x9/0x14 [ 1280.852123] kmem_cache_alloc+0x2ae/0x700 [ 1280.856300] ? lock_downgrade+0x880/0x880 [ 1280.860454] __kernfs_new_node+0xef/0x6f0 [ 1280.864603] ? kasan_check_write+0x14/0x20 [ 1280.868837] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1280.873589] ? wait_for_completion+0x440/0x440 [ 1280.878171] ? mutex_unlock+0xd/0x10 [ 1280.881876] ? kernfs_activate+0x192/0x1f0 [ 1280.886107] kernfs_new_node+0x99/0x130 [ 1280.890084] __kernfs_create_file+0x51/0x33b [ 1280.894487] sysfs_add_file_mode_ns+0x222/0x560 [ 1280.899151] internal_create_group+0x383/0xc30 [ 1280.903754] ? remove_files.isra.0+0x190/0x190 [ 1280.908334] ? kernfs_put+0x3c2/0x5d0 [ 1280.912146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1280.917683] ? kernfs_create_link+0x1d2/0x250 [ 1280.922178] sysfs_create_groups+0x9b/0x141 [ 1280.926495] device_add+0x87e/0x1760 [ 1280.930214] ? get_device_parent.isra.0+0x570/0x570 [ 1280.935313] ? __init_waitqueue_head+0x36/0x90 [ 1280.939897] ? pm_runtime_init+0x347/0x400 [ 1280.944129] netdev_register_kobject+0x183/0x3b0 [ 1280.950202] register_netdevice+0x875/0xff0 [ 1280.954541] ? netdev_change_features+0xb0/0xb0 [ 1280.959201] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1280.964746] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1280.969929] ? ip6gre_tunnel_init+0x340/0x340 [ 1280.974415] ? lockdep_rtnl_is_held+0x26/0x30 [ 1280.978905] ? ip6gre_tunnel_find+0x496/0x640 [ 1280.983580] ip6gre_newlink+0x298/0x7a0 [ 1280.987910] ? ip6gre_changelink+0x560/0x560 [ 1280.992313] rtnl_newlink+0x1042/0x1600 [ 1280.996287] ? rtnl_link_unregister+0x250/0x250 [ 1281.000970] ? mark_held_locks+0x100/0x100 [ 1281.005223] ? __lock_acquire+0x6ee/0x49c0 [ 1281.009445] ? cpuacct_charge+0x1db/0x360 [ 1281.013587] ? __lock_is_held+0xb6/0x140 [ 1281.017643] ? mark_held_locks+0x100/0x100 [ 1281.021889] ? mark_held_locks+0x100/0x100 [ 1281.026118] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1281.030792] ? finish_task_switch+0x146/0x7c0 [ 1281.035379] ? finish_task_switch+0x118/0x7c0 [ 1281.039862] ? switch_mm_irqs_off+0x7fa/0x1360 [ 1281.044437] ? __mutex_lock+0xa67/0x1300 [ 1281.048500] ? find_held_lock+0x35/0x130 [ 1281.052605] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1281.058135] ? rtnl_link_unregister+0x250/0x250 [ 1281.062795] rtnetlink_rcv_msg+0x463/0xb00 [ 1281.067025] ? rtnetlink_put_metrics+0x560/0x560 [ 1281.071771] ? netdev_pick_tx+0x300/0x300 [ 1281.075918] ? netlink_deliver_tap+0x22d/0xc20 [ 1281.080497] ? find_held_lock+0x35/0x130 [ 1281.084556] netlink_rcv_skb+0x17d/0x460 [ 1281.088610] ? rtnetlink_put_metrics+0x560/0x560 [ 1281.093358] ? netlink_ack+0xb30/0xb30 [ 1281.097266] ? kasan_check_read+0x11/0x20 [ 1281.101425] ? netlink_deliver_tap+0x254/0xc20 [ 1281.106015] rtnetlink_rcv+0x1d/0x30 [ 1281.109767] netlink_unicast+0x53a/0x730 [ 1281.113854] ? netlink_attachskb+0x770/0x770 [ 1281.118278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.123824] netlink_sendmsg+0x8ae/0xd70 [ 1281.127890] ? netlink_unicast+0x730/0x730 [ 1281.132138] ? selinux_socket_sendmsg+0x36/0x40 [ 1281.136798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.142343] ? security_socket_sendmsg+0x8d/0xc0 [ 1281.147233] ? netlink_unicast+0x730/0x730 [ 1281.151487] sock_sendmsg+0xd7/0x130 [ 1281.155351] ___sys_sendmsg+0x803/0x920 [ 1281.159366] ? copy_msghdr_from_user+0x430/0x430 [ 1281.164124] ? lock_downgrade+0x880/0x880 [ 1281.168289] ? kasan_check_read+0x11/0x20 [ 1281.172453] ? __fget+0x367/0x540 [ 1281.175916] ? iterate_fd+0x360/0x360 [ 1281.179730] ? __fget_light+0x1a9/0x230 [ 1281.183699] ? __fdget+0x1b/0x20 [ 1281.187060] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1281.192593] __sys_sendmsg+0x105/0x1d0 [ 1281.196631] ? __ia32_sys_shutdown+0x80/0x80 [ 1281.201060] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1281.205841] ? do_syscall_64+0x26/0x620 [ 1281.209837] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1281.215211] ? do_syscall_64+0x26/0x620 [ 1281.219208] __x64_sys_sendmsg+0x78/0xb0 [ 1281.223271] do_syscall_64+0xfd/0x620 [ 1281.227086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1281.232282] RIP: 0033:0x45af49 [ 1281.235508] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1281.255480] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1281.263197] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1281.270475] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1281.277755] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1281.285026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1281.292555] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:16 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:16 executing program 1 (fault-call:4 fault-nth:19): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:16 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = accept(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x3, 0x4) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000400)=0xe8) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x6220108d}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r3, 0x517f8216b5b6dd2b, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0xffffc80a}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x68}}, 0x4000000) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x1400) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50e402ba5e8d5b80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2c7d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x810) 12:53:17 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1281.569342] FAULT_INJECTION: forcing a failure. [ 1281.569342] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.584101] CPU: 1 PID: 26433 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1281.592024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1281.601383] Call Trace: [ 1281.603980] dump_stack+0x197/0x210 [ 1281.607625] should_fail.cold+0xa/0x1b [ 1281.611529] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1281.616716] ? lock_downgrade+0x880/0x880 [ 1281.620867] __should_failslab+0x121/0x190 [ 1281.625097] should_failslab+0x9/0x14 [ 1281.628889] kmem_cache_alloc+0x2ae/0x700 [ 1281.633043] ? lock_downgrade+0x880/0x880 [ 1281.637190] __kernfs_new_node+0xef/0x6f0 [ 1281.641691] ? kasan_check_write+0x14/0x20 [ 1281.645948] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1281.650713] ? wait_for_completion+0x440/0x440 [ 1281.655307] ? mutex_unlock+0xd/0x10 [ 1281.659022] ? kernfs_activate+0x192/0x1f0 [ 1281.663256] kernfs_new_node+0x99/0x130 [ 1281.667242] __kernfs_create_file+0x51/0x33b [ 1281.671649] sysfs_add_file_mode_ns+0x222/0x560 [ 1281.676423] internal_create_group+0x383/0xc30 [ 1281.681011] ? remove_files.isra.0+0x190/0x190 [ 1281.685586] ? kernfs_put+0x3c2/0x5d0 [ 1281.689383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.694916] ? kernfs_create_link+0x1d2/0x250 [ 1281.699416] sysfs_create_groups+0x9b/0x141 [ 1281.703734] device_add+0x87e/0x1760 [ 1281.707450] ? get_device_parent.isra.0+0x570/0x570 [ 1281.712459] ? __init_waitqueue_head+0x36/0x90 [ 1281.717042] ? pm_runtime_init+0x347/0x400 [ 1281.721280] netdev_register_kobject+0x183/0x3b0 [ 1281.726047] register_netdevice+0x875/0xff0 [ 1281.730377] ? netdev_change_features+0xb0/0xb0 [ 1281.735042] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1281.740582] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1281.745773] ? ip6gre_tunnel_init+0x340/0x340 [ 1281.750268] ? lockdep_rtnl_is_held+0x26/0x30 [ 1281.754765] ? ip6gre_tunnel_find+0x496/0x640 [ 1281.759262] ip6gre_newlink+0x298/0x7a0 [ 1281.763234] ? ip6gre_changelink+0x560/0x560 [ 1281.767658] rtnl_newlink+0x1042/0x1600 [ 1281.771649] ? rtnl_link_unregister+0x250/0x250 [ 1281.776314] ? mark_held_locks+0x100/0x100 [ 1281.780565] ? is_bpf_text_address+0xac/0x170 [ 1281.785065] ? find_held_lock+0x35/0x130 [ 1281.789122] ? is_bpf_text_address+0xac/0x170 [ 1281.793614] ? __lock_acquire+0x6ee/0x49c0 [ 1281.797845] ? __lock_acquire+0x6ee/0x49c0 [ 1281.802092] ? lock_downgrade+0x880/0x880 [ 1281.806351] ? mark_held_locks+0x100/0x100 [ 1281.810594] ? mark_held_locks+0x100/0x100 [ 1281.815549] ? __kernel_text_address+0xd/0x40 [ 1281.820092] ? mark_held_locks+0x100/0x100 [ 1281.824344] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1281.829025] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1281.834084] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1281.839166] ? find_held_lock+0x35/0x130 [ 1281.843230] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1281.847653] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1281.853188] ? rtnl_link_unregister+0x250/0x250 [ 1281.857864] rtnetlink_rcv_msg+0x463/0xb00 [ 1281.862098] ? rtnetlink_put_metrics+0x560/0x560 [ 1281.866859] ? netdev_pick_tx+0x300/0x300 [ 1281.871006] ? netlink_deliver_tap+0x22d/0xc20 [ 1281.875591] ? find_held_lock+0x35/0x130 [ 1281.879662] netlink_rcv_skb+0x17d/0x460 [ 1281.883721] ? rtnetlink_put_metrics+0x560/0x560 [ 1281.888486] ? netlink_ack+0xb30/0xb30 [ 1281.892469] ? kasan_check_read+0x11/0x20 [ 1281.896615] ? netlink_deliver_tap+0x254/0xc20 [ 1281.901203] rtnetlink_rcv+0x1d/0x30 [ 1281.904909] netlink_unicast+0x53a/0x730 [ 1281.908968] ? netlink_attachskb+0x770/0x770 [ 1281.913403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.919063] netlink_sendmsg+0x8ae/0xd70 [ 1281.923136] ? netlink_unicast+0x730/0x730 [ 1281.927375] ? selinux_socket_sendmsg+0x36/0x40 [ 1281.932039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.937579] ? security_socket_sendmsg+0x8d/0xc0 [ 1281.942343] ? netlink_unicast+0x730/0x730 [ 1281.946577] sock_sendmsg+0xd7/0x130 [ 1281.950288] ___sys_sendmsg+0x803/0x920 [ 1281.954261] ? copy_msghdr_from_user+0x430/0x430 [ 1281.959016] ? lock_downgrade+0x880/0x880 [ 1281.963170] ? kasan_check_read+0x11/0x20 [ 1281.967318] ? __fget+0x367/0x540 [ 1281.970769] ? iterate_fd+0x360/0x360 [ 1281.974577] ? __fget_light+0x1a9/0x230 [ 1281.978545] ? __fdget+0x1b/0x20 [ 1281.981904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1281.987438] __sys_sendmsg+0x105/0x1d0 [ 1281.991330] ? __ia32_sys_shutdown+0x80/0x80 [ 1281.995765] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1282.000526] ? do_syscall_64+0x26/0x620 [ 1282.004492] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1282.009851] ? do_syscall_64+0x26/0x620 [ 1282.013826] __x64_sys_sendmsg+0x78/0xb0 [ 1282.017896] do_syscall_64+0xfd/0x620 [ 1282.021695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1282.026877] RIP: 0033:0x45af49 [ 1282.030061] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1282.048954] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.056656] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1282.063917] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1282.071188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1282.079058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1282.086318] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:17 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x6, 0x2c, 0xc, 0x11, 0x0, 0x10001, 0x1, 0xd, 0x1}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:17 executing program 1 (fault-call:4 fault-nth:20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:17 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x8) dup(0xffffffffffffffff) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:17 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x7, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0e00e50f81bcab5aecff12edd3b6aa75f7bf9de8164e8eacb6d397ac958f99d048acbaadbbaeb0e7ff5867eca4f1584c0f83912996d9a1554575e7b93a3b2c68f573b691927cff5855c2324304fb8759363038a2e8ca7ed02c81c7697e86eff9f3c62465419be52bce2773b87be234a5f5926f4be1faa9fa413aa9ad571b1b73e5d8403b6aa39645ff0fef77dac3eea384d3cca3e1020e200f23fc738219d3dc121d4780e9d6c648650c039f1b897f4263e62eb221a4d96cc31560a6a15047cc8f1606be4d5ec5a79a837f761832b05f499aa6499786", @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYBLOB="f4", @ANYRES32, @ANYRESHEX=r3, @ANYRESDEC=r5], 0x8, 0x1) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x15, 0x3f, 0x0, 0x5, 0x0, 0x1, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, @perf_bp, 0x20000, 0x0, 0x1, 0x4, 0x8000, 0x5, 0x7ff}, r2, 0x2, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:17 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) fcntl$dupfd(r1, 0x0, r0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1282.389159] FAULT_INJECTION: forcing a failure. [ 1282.389159] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.435243] CPU: 1 PID: 26658 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1282.443096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.452470] Call Trace: [ 1282.455091] dump_stack+0x197/0x210 [ 1282.458752] should_fail.cold+0xa/0x1b [ 1282.462695] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1282.467818] ? lock_downgrade+0x880/0x880 [ 1282.471971] __should_failslab+0x121/0x190 [ 1282.476218] should_failslab+0x9/0x14 [ 1282.480175] kmem_cache_alloc+0x2ae/0x700 [ 1282.484325] ? lock_downgrade+0x880/0x880 [ 1282.488512] __kernfs_new_node+0xef/0x6f0 [ 1282.492655] ? kasan_check_write+0x14/0x20 [ 1282.496883] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1282.501647] ? wait_for_completion+0x440/0x440 [ 1282.506225] ? mutex_unlock+0xd/0x10 [ 1282.509931] ? kernfs_activate+0x192/0x1f0 [ 1282.514176] kernfs_new_node+0x99/0x130 [ 1282.519030] __kernfs_create_file+0x51/0x33b [ 1282.523456] sysfs_add_file_mode_ns+0x222/0x560 [ 1282.528123] internal_create_group+0x383/0xc30 [ 1282.532714] ? remove_files.isra.0+0x190/0x190 [ 1282.537304] ? kernfs_put+0x3c2/0x5d0 [ 1282.541119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1282.546654] ? kernfs_create_link+0x1d2/0x250 [ 1282.551147] sysfs_create_groups+0x9b/0x141 [ 1282.556182] device_add+0x87e/0x1760 [ 1282.559892] ? get_device_parent.isra.0+0x570/0x570 [ 1282.564904] ? __init_waitqueue_head+0x36/0x90 [ 1282.569479] ? pm_runtime_init+0x347/0x400 [ 1282.573712] netdev_register_kobject+0x183/0x3b0 [ 1282.578474] register_netdevice+0x875/0xff0 [ 1282.582804] ? netdev_change_features+0xb0/0xb0 [ 1282.587466] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1282.593548] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1282.598760] ? ip6gre_tunnel_init+0x340/0x340 [ 1282.603266] ? lockdep_rtnl_is_held+0x26/0x30 [ 1282.607757] ? ip6gre_tunnel_find+0x496/0x640 [ 1282.612246] ip6gre_newlink+0x298/0x7a0 [ 1282.616320] ? ip6gre_changelink+0x560/0x560 [ 1282.620796] rtnl_newlink+0x1042/0x1600 [ 1282.624791] ? rtnl_link_unregister+0x250/0x250 [ 1282.629459] ? mark_held_locks+0x100/0x100 [ 1282.633871] ? is_bpf_text_address+0xac/0x170 [ 1282.638386] ? find_held_lock+0x35/0x130 [ 1282.642456] ? is_bpf_text_address+0xac/0x170 [ 1282.646951] ? __lock_acquire+0x6ee/0x49c0 [ 1282.651195] ? __lock_acquire+0x6ee/0x49c0 [ 1282.655427] ? lock_downgrade+0x880/0x880 [ 1282.659587] ? mark_held_locks+0x100/0x100 [ 1282.663827] ? mark_held_locks+0x100/0x100 [ 1282.668059] ? __kernel_text_address+0xd/0x40 [ 1282.672863] ? mark_held_locks+0x100/0x100 [ 1282.678143] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1282.682906] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1282.688924] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1282.694255] ? find_held_lock+0x35/0x130 [ 1282.698345] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1282.702871] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1282.709489] ? rtnl_link_unregister+0x250/0x250 [ 1282.715090] rtnetlink_rcv_msg+0x463/0xb00 [ 1282.720101] ? rtnetlink_put_metrics+0x560/0x560 [ 1282.724896] ? netdev_pick_tx+0x300/0x300 [ 1282.729063] ? netlink_deliver_tap+0x22d/0xc20 [ 1282.733726] ? find_held_lock+0x35/0x130 [ 1282.738972] netlink_rcv_skb+0x17d/0x460 [ 1282.745717] ? rtnetlink_put_metrics+0x560/0x560 [ 1282.750476] ? netlink_ack+0xb30/0xb30 [ 1282.754390] ? kasan_check_read+0x11/0x20 [ 1282.758539] ? netlink_deliver_tap+0x254/0xc20 [ 1282.763122] rtnetlink_rcv+0x1d/0x30 [ 1282.766835] netlink_unicast+0x53a/0x730 [ 1282.770897] ? netlink_attachskb+0x770/0x770 [ 1282.775344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1282.781398] netlink_sendmsg+0x8ae/0xd70 [ 1282.785470] ? netlink_unicast+0x730/0x730 [ 1282.789737] ? selinux_socket_sendmsg+0x36/0x40 [ 1282.794611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1282.800670] ? security_socket_sendmsg+0x8d/0xc0 [ 1282.805435] ? netlink_unicast+0x730/0x730 [ 1282.809958] sock_sendmsg+0xd7/0x130 [ 1282.813701] ___sys_sendmsg+0x803/0x920 [ 1282.817690] ? copy_msghdr_from_user+0x430/0x430 [ 1282.822460] ? lock_downgrade+0x880/0x880 [ 1282.826606] ? kasan_check_read+0x11/0x20 [ 1282.830752] ? __fget+0x367/0x540 [ 1282.834198] ? iterate_fd+0x360/0x360 [ 1282.838005] ? __fget_light+0x1a9/0x230 [ 1282.841983] ? __fdget+0x1b/0x20 [ 1282.845343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1282.850872] __sys_sendmsg+0x105/0x1d0 [ 1282.854763] ? __ia32_sys_shutdown+0x80/0x80 [ 1282.859183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1282.863937] ? do_syscall_64+0x26/0x620 [ 1282.867918] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1282.873287] ? do_syscall_64+0x26/0x620 [ 1282.877291] __x64_sys_sendmsg+0x78/0xb0 [ 1282.881347] do_syscall_64+0xfd/0x620 [ 1282.885143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1282.890319] RIP: 0033:0x45af49 [ 1282.893513] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1282.913414] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.921128] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1282.928400] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 12:53:18 executing program 1 (fault-call:4 fault-nth:21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1282.935681] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1282.942948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1282.950212] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:18 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) fcntl$dupfd(r1, 0x0, r0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:18 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1283.096513] FAULT_INJECTION: forcing a failure. [ 1283.096513] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.112332] CPU: 0 PID: 26742 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1283.120178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1283.129544] Call Trace: [ 1283.132158] dump_stack+0x197/0x210 [ 1283.135816] should_fail.cold+0xa/0x1b [ 1283.139734] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1283.144868] ? lock_downgrade+0x880/0x880 [ 1283.149113] __should_failslab+0x121/0x190 [ 1283.153372] should_failslab+0x9/0x14 [ 1283.157191] kmem_cache_alloc+0x2ae/0x700 [ 1283.161358] ? lock_downgrade+0x880/0x880 [ 1283.165532] __kernfs_new_node+0xef/0x6f0 [ 1283.169704] ? kasan_check_write+0x14/0x20 [ 1283.173965] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1283.178752] ? wait_for_completion+0x440/0x440 [ 1283.183377] ? mutex_unlock+0xd/0x10 [ 1283.187114] ? kernfs_activate+0x192/0x1f0 [ 1283.191379] kernfs_new_node+0x99/0x130 12:53:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="dd050000000800bc15dd94458f2070531832d230f2e50b9a8c62c29b28f907e6844ec4f4f0d6e76e4681831b89a61ab043e32718a1929cb128a68a76a1d510db9a9b21ffdae76d1e06c01db00500"/87, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x2, 0x70, 0x8, 0x27, 0x40, 0x18, 0x0, 0x100, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x401, 0x9}, 0xa11, 0x0, 0x357, 0x5, 0x5, 0x2, 0x7ff}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={&(0x7f0000000300)=[0xab], 0x1, 0x3f, 0x4, 0x81, 0x2, 0xef5, 0x7f, {0x1, 0x6, 0x1, 0x1, 0x5, 0x4, 0x9, 0x7, 0x7, 0x800, 0x1f, 0x4, 0x3f, 0x8, "2fc78296ec963d70c76fc537e1983c9047b3b5c996baf391a8ebb8d88e3ad9bb"}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x2040) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1283.195372] __kernfs_create_file+0x51/0x33b [ 1283.199788] sysfs_add_file_mode_ns+0x222/0x560 [ 1283.204483] internal_create_group+0x383/0xc30 [ 1283.209102] ? remove_files.isra.0+0x190/0x190 [ 1283.213716] ? kernfs_put+0x3c2/0x5d0 [ 1283.217536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1283.223096] ? kernfs_create_link+0x1d2/0x250 [ 1283.227644] sysfs_create_groups+0x9b/0x141 [ 1283.231987] device_add+0x87e/0x1760 [ 1283.235740] ? get_device_parent.isra.0+0x570/0x570 [ 1283.240773] ? __init_waitqueue_head+0x36/0x90 [ 1283.245380] ? pm_runtime_init+0x347/0x400 [ 1283.249652] netdev_register_kobject+0x183/0x3b0 [ 1283.254571] register_netdevice+0x875/0xff0 [ 1283.258931] ? netdev_change_features+0xb0/0xb0 [ 1283.263643] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1283.269219] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1283.274427] ? ip6gre_tunnel_init+0x340/0x340 [ 1283.279883] ? lockdep_rtnl_is_held+0x26/0x30 [ 1283.284384] ? ip6gre_tunnel_find+0x496/0x640 [ 1283.288884] ip6gre_newlink+0x298/0x7a0 [ 1283.292861] ? ip6gre_changelink+0x560/0x560 [ 1283.297268] rtnl_newlink+0x1042/0x1600 [ 1283.301260] ? rtnl_link_unregister+0x250/0x250 [ 1283.305941] ? mark_held_locks+0x100/0x100 [ 1283.310207] ? is_bpf_text_address+0xac/0x170 [ 1283.314709] ? find_held_lock+0x35/0x130 [ 1283.318770] ? is_bpf_text_address+0xac/0x170 [ 1283.323266] ? __lock_acquire+0x6ee/0x49c0 [ 1283.327496] ? __lock_acquire+0x6ee/0x49c0 [ 1283.331724] ? lock_downgrade+0x880/0x880 [ 1283.336149] ? mark_held_locks+0x100/0x100 [ 1283.340389] ? mark_held_locks+0x100/0x100 [ 1283.344620] ? __kernel_text_address+0xd/0x40 [ 1283.349137] ? mark_held_locks+0x100/0x100 [ 1283.353382] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1283.358051] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1283.363064] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1283.368116] ? find_held_lock+0x35/0x130 [ 1283.372189] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1283.376609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1283.382141] ? rtnl_link_unregister+0x250/0x250 [ 1283.386806] rtnetlink_rcv_msg+0x463/0xb00 [ 1283.391042] ? rtnetlink_put_metrics+0x560/0x560 [ 1283.395820] ? netdev_pick_tx+0x300/0x300 [ 1283.399992] ? netlink_deliver_tap+0x22d/0xc20 [ 1283.404594] ? find_held_lock+0x35/0x130 [ 1283.408719] netlink_rcv_skb+0x17d/0x460 [ 1283.412791] ? rtnetlink_put_metrics+0x560/0x560 [ 1283.417558] ? netlink_ack+0xb30/0xb30 [ 1283.421442] ? kasan_check_read+0x11/0x20 [ 1283.425868] ? netlink_deliver_tap+0x254/0xc20 [ 1283.430454] rtnetlink_rcv+0x1d/0x30 [ 1283.434165] netlink_unicast+0x53a/0x730 [ 1283.438236] ? netlink_attachskb+0x770/0x770 [ 1283.442740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1283.448278] netlink_sendmsg+0x8ae/0xd70 [ 1283.452340] ? netlink_unicast+0x730/0x730 [ 1283.456577] ? selinux_socket_sendmsg+0x36/0x40 [ 1283.461237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1283.466774] ? security_socket_sendmsg+0x8d/0xc0 [ 1283.471532] ? netlink_unicast+0x730/0x730 [ 1283.475762] sock_sendmsg+0xd7/0x130 [ 1283.479481] ___sys_sendmsg+0x803/0x920 [ 1283.483468] ? copy_msghdr_from_user+0x430/0x430 [ 1283.488407] ? lock_downgrade+0x880/0x880 [ 1283.492555] ? kasan_check_read+0x11/0x20 [ 1283.496709] ? __fget+0x367/0x540 [ 1283.500160] ? iterate_fd+0x360/0x360 [ 1283.503967] ? __fget_light+0x1a9/0x230 [ 1283.507935] ? __fdget+0x1b/0x20 [ 1283.511296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1283.516838] __sys_sendmsg+0x105/0x1d0 [ 1283.520728] ? __ia32_sys_shutdown+0x80/0x80 [ 1283.525143] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1283.529903] ? do_syscall_64+0x26/0x620 [ 1283.533873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1283.539229] ? do_syscall_64+0x26/0x620 [ 1283.543563] __x64_sys_sendmsg+0x78/0xb0 [ 1283.547626] do_syscall_64+0xfd/0x620 [ 1283.551424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1283.556613] RIP: 0033:0x45af49 [ 1283.561452] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1283.580533] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.588244] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1283.595505] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1283.602867] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1283.610137] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1283.617399] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1283.625875] net_ratelimit: 16 callbacks suppressed [ 1283.625883] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.626709] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.631806] protocol 88fb is buggy, dev hsr_slave_1 12:53:19 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4182800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x10, 0x70bd29, 0x25dfdbfb, {0x6, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1283.636854] protocol 88fb is buggy, dev hsr_slave_1 12:53:19 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) fcntl$dupfd(r1, 0x0, r0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:19 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000dc0)='./file0\x00', 0x400, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000400)=ANY=[@ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=r1, @ANYBLOB="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"], 0x934}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40010010}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, 0x2, 0x7, 0x800, 0x70bd28, 0x25dfdbfc, {0x9d06f8a416a73277, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8ac}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:19 executing program 1 (fault-call:4 fault-nth:22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:19 executing program 5: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x200, 0x101000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1283.877850] FAULT_INJECTION: forcing a failure. [ 1283.877850] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.894283] CPU: 1 PID: 26894 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1283.902131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1283.911508] Call Trace: [ 1283.914125] dump_stack+0x197/0x210 [ 1283.917789] should_fail.cold+0xa/0x1b [ 1283.921716] ? fault_create_debugfs_attr+0x1e0/0x1e0 12:53:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$eventfd(r1, &(0x7f0000000140)=0x10001, 0x8) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xa, 0x4c80) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x0, 0x6, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) [ 1283.926837] ? lock_downgrade+0x880/0x880 [ 1283.931006] __should_failslab+0x121/0x190 [ 1283.935262] should_failslab+0x9/0x14 [ 1283.939083] kmem_cache_alloc+0x2ae/0x700 [ 1283.943261] ? lock_downgrade+0x880/0x880 [ 1283.947421] __kernfs_new_node+0xef/0x6f0 [ 1283.951705] ? kasan_check_write+0x14/0x20 [ 1283.955966] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1283.960724] ? wait_for_completion+0x440/0x440 [ 1283.965334] ? mutex_unlock+0xd/0x10 [ 1283.969077] ? kernfs_activate+0x192/0x1f0 [ 1283.973322] kernfs_new_node+0x99/0x130 [ 1283.977338] __kernfs_create_file+0x51/0x33b [ 1283.981754] sysfs_add_file_mode_ns+0x222/0x560 [ 1283.986471] internal_create_group+0x383/0xc30 [ 1283.991077] ? remove_files.isra.0+0x190/0x190 [ 1283.995662] ? kernfs_put+0x3c2/0x5d0 [ 1283.999455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1284.004987] ? kernfs_create_link+0x1d2/0x250 [ 1284.009473] sysfs_create_groups+0x9b/0x141 [ 1284.013900] device_add+0x87e/0x1760 [ 1284.017619] ? get_device_parent.isra.0+0x570/0x570 [ 1284.022639] ? __init_waitqueue_head+0x36/0x90 [ 1284.027227] ? pm_runtime_init+0x347/0x400 [ 1284.031460] netdev_register_kobject+0x183/0x3b0 [ 1284.036233] register_netdevice+0x875/0xff0 [ 1284.040549] ? netdev_change_features+0xb0/0xb0 [ 1284.045220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1284.050775] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1284.055971] ? ip6gre_tunnel_init+0x340/0x340 [ 1284.060478] ? lockdep_rtnl_is_held+0x26/0x30 [ 1284.064976] ? ip6gre_tunnel_find+0x496/0x640 [ 1284.069471] ip6gre_newlink+0x298/0x7a0 [ 1284.073440] ? ip6gre_changelink+0x560/0x560 [ 1284.077847] rtnl_newlink+0x1042/0x1600 [ 1284.081817] ? rtnl_link_unregister+0x250/0x250 [ 1284.086533] ? mark_held_locks+0x100/0x100 [ 1284.090772] ? debug_smp_processor_id+0x1c/0x20 [ 1284.095439] ? is_bpf_text_address+0xac/0x170 [ 1284.099938] ? find_held_lock+0x35/0x130 [ 1284.104014] ? is_bpf_text_address+0xac/0x170 [ 1284.109124] ? __lock_acquire+0x6ee/0x49c0 [ 1284.113352] ? __lock_acquire+0x6ee/0x49c0 [ 1284.117574] ? lock_downgrade+0x880/0x880 [ 1284.121731] ? mark_held_locks+0x100/0x100 [ 1284.125980] ? debug_smp_processor_id+0x1c/0x20 [ 1284.130653] ? perf_trace_lock_acquire+0xf5/0x580 [ 1284.135548] ? mark_held_locks+0x100/0x100 [ 1284.139773] ? debug_smp_processor_id+0x1c/0x20 [ 1284.144433] ? perf_trace_lock_acquire+0xf5/0x580 [ 1284.149286] ? find_held_lock+0x35/0x130 [ 1284.153429] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1284.157860] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1284.167735] ? rtnl_link_unregister+0x250/0x250 [ 1284.172394] rtnetlink_rcv_msg+0x463/0xb00 [ 1284.176623] ? rtnetlink_put_metrics+0x560/0x560 [ 1284.181375] ? netdev_pick_tx+0x300/0x300 [ 1284.185534] ? netlink_deliver_tap+0x22d/0xc20 [ 1284.190105] ? find_held_lock+0x35/0x130 [ 1284.194171] netlink_rcv_skb+0x17d/0x460 [ 1284.198224] ? rtnetlink_put_metrics+0x560/0x560 [ 1284.202970] ? netlink_ack+0xb30/0xb30 [ 1284.206845] ? kasan_check_read+0x11/0x20 [ 1284.210992] ? netlink_deliver_tap+0x254/0xc20 [ 1284.215681] rtnetlink_rcv+0x1d/0x30 [ 1284.219401] netlink_unicast+0x53a/0x730 [ 1284.223484] ? netlink_attachskb+0x770/0x770 [ 1284.227885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1284.233424] netlink_sendmsg+0x8ae/0xd70 [ 1284.237481] ? netlink_unicast+0x730/0x730 [ 1284.241727] ? selinux_socket_sendmsg+0x36/0x40 [ 1284.246394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1284.251927] ? security_socket_sendmsg+0x8d/0xc0 [ 1284.256777] ? netlink_unicast+0x730/0x730 [ 1284.261077] sock_sendmsg+0xd7/0x130 [ 1284.264798] ___sys_sendmsg+0x803/0x920 [ 1284.269036] ? copy_msghdr_from_user+0x430/0x430 [ 1284.273786] ? lock_downgrade+0x880/0x880 [ 1284.277924] ? kasan_check_read+0x11/0x20 [ 1284.282152] ? __fget+0x367/0x540 [ 1284.285594] ? iterate_fd+0x360/0x360 [ 1284.289428] ? __fget_light+0x1a9/0x230 [ 1284.293408] ? __fdget+0x1b/0x20 [ 1284.296769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1284.302308] __sys_sendmsg+0x105/0x1d0 [ 1284.306794] ? __ia32_sys_shutdown+0x80/0x80 [ 1284.312156] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1284.316920] ? do_syscall_64+0x26/0x620 [ 1284.320897] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1284.326316] ? do_syscall_64+0x26/0x620 [ 1284.330403] __x64_sys_sendmsg+0x78/0xb0 [ 1284.334561] do_syscall_64+0xfd/0x620 [ 1284.338375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1284.343587] RIP: 0033:0x45af49 [ 1284.346784] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1284.366381] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1284.374812] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1284.382083] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1284.389561] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1284.396831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1284.404093] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:19 executing program 1 (fault-call:4 fault-nth:23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:20 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1284.493552] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.498676] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.503865] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.508969] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.514179] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.519258] protocol 88fb is buggy, dev hsr_slave_1 12:53:20 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1284.623768] FAULT_INJECTION: forcing a failure. [ 1284.623768] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.664934] CPU: 1 PID: 26972 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1284.672790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.682251] Call Trace: [ 1284.685633] dump_stack+0x197/0x210 [ 1284.689297] should_fail.cold+0xa/0x1b [ 1284.693214] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1284.698861] ? lock_downgrade+0x880/0x880 [ 1284.704010] __should_failslab+0x121/0x190 [ 1284.708269] should_failslab+0x9/0x14 [ 1284.712448] kmem_cache_alloc+0x2ae/0x700 [ 1284.716730] ? lock_downgrade+0x880/0x880 [ 1284.721080] __kernfs_new_node+0xef/0x6f0 [ 1284.725246] ? kasan_check_write+0x14/0x20 [ 1284.729529] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1284.734309] ? wait_for_completion+0x440/0x440 [ 1284.740142] ? mutex_unlock+0xd/0x10 [ 1284.743883] ? kernfs_activate+0x192/0x1f0 [ 1284.748154] kernfs_new_node+0x99/0x130 [ 1284.752158] __kernfs_create_file+0x51/0x33b [ 1284.756605] sysfs_add_file_mode_ns+0x222/0x560 [ 1284.761311] internal_create_group+0x383/0xc30 [ 1284.766369] ? remove_files.isra.0+0x190/0x190 [ 1284.771165] ? kernfs_put+0x3c2/0x5d0 [ 1284.775387] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1284.781385] ? kernfs_create_link+0x1d2/0x250 [ 1284.785917] sysfs_create_groups+0x9b/0x141 [ 1284.790268] device_add+0x87e/0x1760 [ 1284.794008] ? get_device_parent.isra.0+0x570/0x570 [ 1284.799049] ? __init_waitqueue_head+0x36/0x90 [ 1284.803756] ? pm_runtime_init+0x347/0x400 [ 1284.808036] netdev_register_kobject+0x183/0x3b0 12:53:20 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8, 0x1) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6c8f04cafde33736}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x7, 0x600, 0x70bd2d, 0x25dfdbfb, {0xc, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20010084) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r8, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) r9 = syz_open_dev$vcsu(&(0x7f00000003c0)='/dev/vcsu#\x00', 0xcc, 0x800) r10 = getpid() sched_setscheduler(r10, 0x0, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r11, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r10, @ANYRESDEC=r12], 0x8, 0x1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x90208444}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r8, 0x500, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) r13 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) fcntl$F_GET_RW_HINT(r13, 0x40b, &(0x7f0000000140)) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc8020, 0x0) r15 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r15, 0x540b, 0x2) ioctl$KDGETMODE(r15, 0x4b3b, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_VERSION(r14, 0xc0106407, &(0x7f0000000040)={0x7, 0x1, 0x1000, 0x8}) dup(0xffffffffffffffff) fcntl$setflags(r15, 0x2, 0x3) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1284.813029] register_netdevice+0x875/0xff0 [ 1284.818039] ? netdev_change_features+0xb0/0xb0 [ 1284.824841] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1284.832088] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1284.838263] ? ip6gre_tunnel_init+0x340/0x340 [ 1284.843399] ? lockdep_rtnl_is_held+0x26/0x30 [ 1284.848005] ? ip6gre_tunnel_find+0x496/0x640 [ 1284.852521] ip6gre_newlink+0x298/0x7a0 [ 1284.856523] ? ip6gre_changelink+0x560/0x560 [ 1284.860950] rtnl_newlink+0x1042/0x1600 [ 1284.865408] ? rtnl_link_unregister+0x250/0x250 [ 1284.871846] ? mark_held_locks+0x100/0x100 [ 1284.876544] ? is_bpf_text_address+0xac/0x170 [ 1284.881061] ? find_held_lock+0x35/0x130 [ 1284.885125] ? is_bpf_text_address+0xac/0x170 [ 1284.889643] ? __lock_acquire+0x6ee/0x49c0 [ 1284.893880] ? __lock_acquire+0x6ee/0x49c0 [ 1284.899052] ? lock_downgrade+0x880/0x880 [ 1284.903405] ? mark_held_locks+0x100/0x100 [ 1284.907727] ? mark_held_locks+0x100/0x100 [ 1284.911971] ? __kernel_text_address+0xd/0x40 [ 1284.916496] ? mark_held_locks+0x100/0x100 [ 1284.920733] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1284.925415] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1284.930435] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1284.935489] ? find_held_lock+0x35/0x130 [ 1284.939545] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1284.943978] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1284.949513] ? rtnl_link_unregister+0x250/0x250 [ 1284.954204] rtnetlink_rcv_msg+0x463/0xb00 [ 1284.958448] ? rtnetlink_put_metrics+0x560/0x560 [ 1284.963202] ? netdev_pick_tx+0x300/0x300 [ 1284.967450] ? netlink_deliver_tap+0x22d/0xc20 [ 1284.972040] ? find_held_lock+0x35/0x130 [ 1284.976112] netlink_rcv_skb+0x17d/0x460 [ 1284.980178] ? rtnetlink_put_metrics+0x560/0x560 [ 1284.984942] ? netlink_ack+0xb30/0xb30 [ 1284.988824] ? kasan_check_read+0x11/0x20 [ 1284.992973] ? netlink_deliver_tap+0x254/0xc20 [ 1284.997559] rtnetlink_rcv+0x1d/0x30 [ 1285.001265] netlink_unicast+0x53a/0x730 [ 1285.005323] ? netlink_attachskb+0x770/0x770 [ 1285.009726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.015273] netlink_sendmsg+0x8ae/0xd70 [ 1285.019339] ? netlink_unicast+0x730/0x730 [ 1285.023576] ? selinux_socket_sendmsg+0x36/0x40 [ 1285.028249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.033800] ? security_socket_sendmsg+0x8d/0xc0 [ 1285.038560] ? netlink_unicast+0x730/0x730 [ 1285.042824] sock_sendmsg+0xd7/0x130 [ 1285.046546] ___sys_sendmsg+0x803/0x920 [ 1285.050528] ? copy_msghdr_from_user+0x430/0x430 [ 1285.055342] ? lock_downgrade+0x880/0x880 [ 1285.059504] ? kasan_check_read+0x11/0x20 [ 1285.063653] ? __fget+0x367/0x540 [ 1285.067123] ? iterate_fd+0x360/0x360 [ 1285.070931] ? __fget_light+0x1a9/0x230 [ 1285.074932] ? __fdget+0x1b/0x20 [ 1285.078292] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1285.083851] __sys_sendmsg+0x105/0x1d0 [ 1285.087734] ? __ia32_sys_shutdown+0x80/0x80 [ 1285.092149] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1285.096900] ? do_syscall_64+0x26/0x620 [ 1285.100874] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1285.106263] ? do_syscall_64+0x26/0x620 [ 1285.110236] __x64_sys_sendmsg+0x78/0xb0 [ 1285.114305] do_syscall_64+0xfd/0x620 [ 1285.118118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1285.123320] RIP: 0033:0x45af49 [ 1285.126527] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1285.145548] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.153252] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1285.160515] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 12:53:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000040)="dc69064f525b23c408e3b04f57c5bfcc783fe88b088c55c49f82a6e84b38d7ed00d7dd84637ef388c93ba2b2553a8e92a37ee8ed7706ed0bc8d70f0709af", 0x3e}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1285.167778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1285.175048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1285.182570] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:20 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:20 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x2) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:20 executing program 1 (fault-call:4 fault-nth:24): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1285.347765] FAULT_INJECTION: forcing a failure. [ 1285.347765] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.388771] CPU: 0 PID: 27130 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1285.396621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.405993] Call Trace: [ 1285.408619] dump_stack+0x197/0x210 [ 1285.412268] should_fail.cold+0xa/0x1b [ 1285.416198] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1285.421313] ? lock_downgrade+0x880/0x880 [ 1285.425472] __should_failslab+0x121/0x190 [ 1285.429706] should_failslab+0x9/0x14 [ 1285.433503] kmem_cache_alloc+0x2ae/0x700 [ 1285.437654] ? lock_downgrade+0x880/0x880 [ 1285.441797] __kernfs_new_node+0xef/0x6f0 [ 1285.445936] ? kasan_check_write+0x14/0x20 [ 1285.450173] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1285.454924] ? wait_for_completion+0x440/0x440 [ 1285.459510] ? mutex_unlock+0xd/0x10 [ 1285.463215] ? kernfs_activate+0x192/0x1f0 [ 1285.467444] kernfs_new_node+0x99/0x130 [ 1285.471426] __kernfs_create_file+0x51/0x33b [ 1285.476725] sysfs_add_file_mode_ns+0x222/0x560 [ 1285.481410] internal_create_group+0x383/0xc30 [ 1285.486011] ? remove_files.isra.0+0x190/0x190 [ 1285.490588] ? kernfs_put+0x3c2/0x5d0 [ 1285.494399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.500018] ? kernfs_create_link+0x1d2/0x250 [ 1285.504525] sysfs_create_groups+0x9b/0x141 [ 1285.508842] device_add+0x87e/0x1760 [ 1285.513261] ? get_device_parent.isra.0+0x570/0x570 [ 1285.518372] ? __init_waitqueue_head+0x36/0x90 [ 1285.522967] ? pm_runtime_init+0x347/0x400 [ 1285.527209] netdev_register_kobject+0x183/0x3b0 [ 1285.531965] register_netdevice+0x875/0xff0 [ 1285.536285] ? netdev_change_features+0xb0/0xb0 [ 1285.540978] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1285.556519] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1285.563406] ? ip6gre_tunnel_init+0x340/0x340 [ 1285.568882] ? lockdep_rtnl_is_held+0x26/0x30 [ 1285.573862] ? ip6gre_tunnel_find+0x496/0x640 [ 1285.578844] ip6gre_newlink+0x298/0x7a0 [ 1285.583091] ? ip6gre_changelink+0x560/0x560 [ 1285.587503] rtnl_newlink+0x1042/0x1600 [ 1285.592036] ? rtnl_link_unregister+0x250/0x250 [ 1285.597444] ? mark_held_locks+0x100/0x100 [ 1285.601994] ? debug_smp_processor_id+0x1c/0x20 [ 1285.607496] ? is_bpf_text_address+0xac/0x170 [ 1285.615146] ? find_held_lock+0x35/0x130 [ 1285.619512] ? is_bpf_text_address+0xac/0x170 [ 1285.624105] ? __lock_acquire+0x6ee/0x49c0 [ 1285.628716] ? __lock_acquire+0x6ee/0x49c0 [ 1285.632985] ? lock_downgrade+0x880/0x880 [ 1285.637265] ? mark_held_locks+0x100/0x100 [ 1285.641683] ? debug_smp_processor_id+0x1c/0x20 [ 1285.646346] ? perf_trace_lock_acquire+0xf5/0x580 [ 1285.652718] ? mark_held_locks+0x100/0x100 [ 1285.656980] ? debug_smp_processor_id+0x1c/0x20 [ 1285.662905] ? perf_trace_lock_acquire+0xf5/0x580 [ 1285.668247] ? find_held_lock+0x35/0x130 [ 1285.672318] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1285.676735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1285.682271] ? rtnl_link_unregister+0x250/0x250 [ 1285.686940] rtnetlink_rcv_msg+0x463/0xb00 [ 1285.691175] ? rtnetlink_put_metrics+0x560/0x560 [ 1285.695933] ? netdev_pick_tx+0x300/0x300 [ 1285.700078] ? netlink_deliver_tap+0x22d/0xc20 [ 1285.704654] ? find_held_lock+0x35/0x130 [ 1285.709086] netlink_rcv_skb+0x17d/0x460 [ 1285.713143] ? rtnetlink_put_metrics+0x560/0x560 [ 1285.717905] ? netlink_ack+0xb30/0xb30 [ 1285.722315] ? kasan_check_read+0x11/0x20 [ 1285.726591] ? netlink_deliver_tap+0x254/0xc20 [ 1285.732138] rtnetlink_rcv+0x1d/0x30 [ 1285.735851] netlink_unicast+0x53a/0x730 [ 1285.739922] ? netlink_attachskb+0x770/0x770 [ 1285.744326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.749861] netlink_sendmsg+0x8ae/0xd70 [ 1285.753942] ? netlink_unicast+0x730/0x730 [ 1285.758183] ? selinux_socket_sendmsg+0x36/0x40 [ 1285.762865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.768414] ? security_socket_sendmsg+0x8d/0xc0 [ 1285.773185] ? netlink_unicast+0x730/0x730 [ 1285.777431] sock_sendmsg+0xd7/0x130 [ 1285.781146] ___sys_sendmsg+0x803/0x920 [ 1285.785147] ? copy_msghdr_from_user+0x430/0x430 [ 1285.790432] ? lock_downgrade+0x880/0x880 [ 1285.794605] ? kasan_check_read+0x11/0x20 [ 1285.798754] ? __fget+0x367/0x540 [ 1285.802212] ? iterate_fd+0x360/0x360 [ 1285.806023] ? __fget_light+0x1a9/0x230 [ 1285.809989] ? __fdget+0x1b/0x20 [ 1285.813352] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1285.818953] __sys_sendmsg+0x105/0x1d0 [ 1285.822868] ? __ia32_sys_shutdown+0x80/0x80 [ 1285.827291] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1285.832042] ? do_syscall_64+0x26/0x620 [ 1285.836012] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1285.841366] ? do_syscall_64+0x26/0x620 [ 1285.845337] __x64_sys_sendmsg+0x78/0xb0 [ 1285.849406] do_syscall_64+0xfd/0x620 [ 1285.853202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1285.858403] RIP: 0033:0x45af49 [ 1285.861600] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1285.880494] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.888194] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1285.895455] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1285.902846] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1285.910122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1285.917394] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:21 executing program 1 (fault-call:4 fault-nth:25): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:21 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:21 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:21 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r0, 0x0, 0x0) keyctl$describe(0x11, r0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="c2c53311071b35b21eebb7a1b8a491f979d8941c50fe253b688b4b3282ec00d78d94eaf8b023e886fc668f3d417c66d6351e25f3a9c58916a967774d964eb461afb6b0061c051fcf3722cf596021e8d5557c1776b60fcaaeb2cc7ca727ace84252e05eeabeba9163ffe7ab16b0066fb246ecbe00d023d7963057319e272609a2ccdee8883f43f21b8299a05acb098e170b9e379c66929a2217a245ee99d1f1861add974d8cef0476b0d461f166fe2d5bf9cc0ac437762b0d51", 0xb9, r0) r2 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r2, 0x0, 0x0) keyctl$describe(0x11, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r3, 0xfffffffffffffffb, 0x1) [ 1286.138899] FAULT_INJECTION: forcing a failure. [ 1286.138899] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.191178] CPU: 1 PID: 27247 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1286.199025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.208408] Call Trace: [ 1286.211013] dump_stack+0x197/0x210 [ 1286.214656] should_fail.cold+0xa/0x1b [ 1286.218554] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1286.224014] ? lock_downgrade+0x880/0x880 [ 1286.228174] __should_failslab+0x121/0x190 [ 1286.232419] should_failslab+0x9/0x14 [ 1286.236235] kmem_cache_alloc+0x2ae/0x700 [ 1286.240392] ? lock_downgrade+0x880/0x880 [ 1286.244550] __kernfs_new_node+0xef/0x6f0 [ 1286.248708] ? kasan_check_write+0x14/0x20 [ 1286.252947] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1286.257705] ? wait_for_completion+0x440/0x440 [ 1286.262315] ? mutex_unlock+0xd/0x10 [ 1286.266025] ? kernfs_activate+0x192/0x1f0 [ 1286.270347] kernfs_new_node+0x99/0x130 [ 1286.274359] __kernfs_create_file+0x51/0x33b [ 1286.278775] sysfs_add_file_mode_ns+0x222/0x560 [ 1286.283448] internal_create_group+0x383/0xc30 [ 1286.288049] ? remove_files.isra.0+0x190/0x190 [ 1286.292624] ? kernfs_put+0x3c2/0x5d0 [ 1286.296424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1286.301956] ? kernfs_create_link+0x1d2/0x250 [ 1286.306461] sysfs_create_groups+0x9b/0x141 [ 1286.310793] device_add+0x87e/0x1760 [ 1286.314601] ? get_device_parent.isra.0+0x570/0x570 [ 1286.319611] ? __init_waitqueue_head+0x36/0x90 [ 1286.324194] ? pm_runtime_init+0x347/0x400 [ 1286.328434] netdev_register_kobject+0x183/0x3b0 [ 1286.333191] register_netdevice+0x875/0xff0 [ 1286.337514] ? netdev_change_features+0xb0/0xb0 [ 1286.342180] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1286.347763] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1286.352948] ? ip6gre_tunnel_init+0x340/0x340 [ 1286.357457] ? lockdep_rtnl_is_held+0x26/0x30 [ 1286.361951] ? ip6gre_tunnel_find+0x496/0x640 [ 1286.366456] ip6gre_newlink+0x298/0x7a0 [ 1286.370437] ? ip6gre_changelink+0x560/0x560 [ 1286.374872] rtnl_newlink+0x1042/0x1600 [ 1286.378859] ? rtnl_link_unregister+0x250/0x250 [ 1286.383547] ? mark_held_locks+0x100/0x100 [ 1286.387793] ? is_bpf_text_address+0xac/0x170 [ 1286.392384] ? find_held_lock+0x35/0x130 [ 1286.396448] ? is_bpf_text_address+0xac/0x170 [ 1286.401996] ? __lock_acquire+0x6ee/0x49c0 [ 1286.406230] ? __lock_acquire+0x6ee/0x49c0 [ 1286.410737] ? lock_downgrade+0x880/0x880 [ 1286.414901] ? mark_held_locks+0x100/0x100 [ 1286.419285] ? mark_held_locks+0x100/0x100 [ 1286.423523] ? __kernel_text_address+0xd/0x40 [ 1286.428063] ? mark_held_locks+0x100/0x100 [ 1286.432305] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1286.436976] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1286.441990] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1286.447047] ? find_held_lock+0x35/0x130 [ 1286.451109] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1286.455545] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.461083] ? rtnl_link_unregister+0x250/0x250 [ 1286.465753] rtnetlink_rcv_msg+0x463/0xb00 [ 1286.469996] ? rtnetlink_put_metrics+0x560/0x560 [ 1286.474768] ? netdev_pick_tx+0x300/0x300 [ 1286.478954] ? netlink_deliver_tap+0x22d/0xc20 [ 1286.483649] ? find_held_lock+0x35/0x130 [ 1286.487721] netlink_rcv_skb+0x17d/0x460 [ 1286.491795] ? rtnetlink_put_metrics+0x560/0x560 [ 1286.496574] ? netlink_ack+0xb30/0xb30 [ 1286.500496] ? kasan_check_read+0x11/0x20 [ 1286.504655] ? netlink_deliver_tap+0x254/0xc20 [ 1286.509255] rtnetlink_rcv+0x1d/0x30 [ 1286.512987] netlink_unicast+0x53a/0x730 [ 1286.517059] ? netlink_attachskb+0x770/0x770 [ 1286.521470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1286.527017] netlink_sendmsg+0x8ae/0xd70 [ 1286.531092] ? netlink_unicast+0x730/0x730 [ 1286.535326] ? selinux_socket_sendmsg+0x36/0x40 [ 1286.539989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1286.549165] ? security_socket_sendmsg+0x8d/0xc0 [ 1286.553918] ? netlink_unicast+0x730/0x730 [ 1286.558163] sock_sendmsg+0xd7/0x130 [ 1286.561877] ___sys_sendmsg+0x803/0x920 [ 1286.565858] ? copy_msghdr_from_user+0x430/0x430 [ 1286.570642] ? lock_downgrade+0x880/0x880 [ 1286.575113] ? kasan_check_read+0x11/0x20 [ 1286.579274] ? __fget+0x367/0x540 [ 1286.582740] ? iterate_fd+0x360/0x360 [ 1286.586556] ? __fget_light+0x1a9/0x230 [ 1286.590528] ? __fdget+0x1b/0x20 [ 1286.593894] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.599606] __sys_sendmsg+0x105/0x1d0 [ 1286.603492] ? __ia32_sys_shutdown+0x80/0x80 [ 1286.607921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1286.612674] ? do_syscall_64+0x26/0x620 [ 1286.616643] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.623229] ? do_syscall_64+0x26/0x620 [ 1286.627360] __x64_sys_sendmsg+0x78/0xb0 [ 1286.631462] do_syscall_64+0xfd/0x620 [ 1286.635278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.640720] RIP: 0033:0x45af49 [ 1286.644459] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1286.663610] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.671337] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1286.678602] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1286.685870] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:22 executing program 0: socket$inet(0x2, 0x800, 0x1a) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1286.693594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1286.701127] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:22 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:22 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r3 = getuid() ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000400)={{0xffffffffffffffff, 0x0, 0x9, 0x0, 0x7f}, 0x9, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0x3f, 0x9, 0x7, 0xab}) r4 = dup(r0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000680)={0x0, {0x7fff, 0x80000001}}) setresuid(0xee01, r3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) setsockopt$packet_int(r6, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000140)=0x0) write$P9_RGETLOCK(r6, &(0x7f00000003c0)={0x2b, 0x37, 0x2, {0x7, 0x8, 0x1, r9, 0xd, '/selinux/mls\x00'}}, 0x2b) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1bc, 0x41, 0x10, 0x70bd26, 0x25dfdbfb, {0x1d}, [@nested={0x1a7, 0x78, 0x0, 0x1, [@typed={0x10, 0x7c, 0x0, 0x0, @str='/dev/audio#\x00'}, @typed={0x8, 0x86, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@broadcast}, @generic="37086270a302909895f4d2dead1c8160713bfe3ac84346510a1d84a2ef7a69cc48b83c09ec4f669e7b6ec386dc77d120bcdad396b6c81b41ef874badd375f52554ffab80bddbcaf56465473ec1d986c4e877a5eaead36cd64cf69b82cbf149aed742f29de1b053254fdc18999d68c938528023302d12c1676395247527cf6bcf38410bae61bd763368b108c46e68e055d47238cd3ff76cd834421ecc288030afec9ed32027e495f3a1505ba18c384ff715e0529c0ffc936244321d95db3b94dfcbabdfab2292f98a4b9848e2108627db4104d4c5ff392c237783533831b4a993cb13dd140a593c50b8c5472a", @generic="00ec753d085f997d4b5828e71d7196d65e1b85faa17fe297be0650f7a48c29afd789b76b00b08043c7e01e84fe35717dab420b07a2a7418df24d5c6360154909b30e93ac7dcb691c407ca17aafeeafb4f8b9d27a78922d72f88490ebcb3c9d95ab515c1c694251043984ba4659e269b42c3e101841cba84a2cb09bd37a96c38d73e1f3ec6921f62085310bb0a0c6d373462447b28818fd"]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x20000851) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r10, 0x7709, 0x0) r11 = getpid() sched_setscheduler(r11, 0x0, 0x0) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="6a48966c9c992cfee789845850fbb9150e03dc6ec95094e959dcea00f04c88bfad30010000000000000084a67b2751e1cfc950b3a4a1a37ca2d27d88a1f4e4a70fc994ae5c6299516d33d230de9da643790578699547dcc1da739a4842d2d7bbabd278cc34095195731735abb0dd7c14bfc4eb49a53a11c24d9123982a1c158551cd45622a9aac11c885f670163bf2fe2a8524920ed68147a6ea4b74f4b8a23f8ac7424e0e2572094ad511a3651df4141331b42b9fdf1cfd4334e5d83eecc32dbf33e2f70bfa87d05102a69e2bbf87b093b740b5840243", @ANYRES32, @ANYRES32=r12, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r11, @ANYRESDEC=r13], 0x8, 0x1) ioctl$RTC_IRQP_SET(r12, 0x4008700c, 0x1ec6) 12:53:22 executing program 1 (fault-call:4 fault-nth:26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1286.937144] FAULT_INJECTION: forcing a failure. [ 1286.937144] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.962320] CPU: 1 PID: 27321 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1286.971473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.980968] Call Trace: [ 1286.983590] dump_stack+0x197/0x210 [ 1286.987951] should_fail.cold+0xa/0x1b [ 1286.991885] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1286.997189] ? lock_downgrade+0x880/0x880 [ 1287.001377] __should_failslab+0x121/0x190 [ 1287.005648] should_failslab+0x9/0x14 [ 1287.009458] kmem_cache_alloc+0x2ae/0x700 [ 1287.013709] ? lock_downgrade+0x880/0x880 [ 1287.017874] __kernfs_new_node+0xef/0x6f0 [ 1287.022025] ? kasan_check_write+0x14/0x20 [ 1287.026257] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1287.031018] ? wait_for_completion+0x440/0x440 [ 1287.035700] ? mutex_unlock+0xd/0x10 [ 1287.039440] ? kernfs_activate+0x192/0x1f0 [ 1287.044131] kernfs_new_node+0x99/0x130 [ 1287.048119] __kernfs_create_file+0x51/0x33b [ 1287.052529] sysfs_add_file_mode_ns+0x222/0x560 [ 1287.057220] internal_create_group+0x383/0xc30 [ 1287.061830] ? remove_files.isra.0+0x190/0x190 [ 1287.066432] ? kernfs_put+0x3c2/0x5d0 [ 1287.070260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1287.075819] ? kernfs_create_link+0x1d2/0x250 [ 1287.080334] sysfs_create_groups+0x9b/0x141 [ 1287.084685] device_add+0x87e/0x1760 [ 1287.088705] ? get_device_parent.isra.0+0x570/0x570 [ 1287.093732] ? __init_waitqueue_head+0x36/0x90 [ 1287.098313] ? pm_runtime_init+0x347/0x400 [ 1287.102824] netdev_register_kobject+0x183/0x3b0 [ 1287.107965] register_netdevice+0x875/0xff0 [ 1287.112486] ? netdev_change_features+0xb0/0xb0 [ 1287.117674] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1287.123741] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1287.129218] ? ip6gre_tunnel_init+0x340/0x340 [ 1287.136192] ? lockdep_rtnl_is_held+0x26/0x30 [ 1287.141925] ? ip6gre_tunnel_find+0x496/0x640 [ 1287.147761] ip6gre_newlink+0x298/0x7a0 [ 1287.151749] ? ip6gre_changelink+0x560/0x560 [ 1287.156538] rtnl_newlink+0x1042/0x1600 [ 1287.160705] ? rtnl_link_unregister+0x250/0x250 [ 1287.166690] ? mark_held_locks+0x100/0x100 [ 1287.170936] ? debug_smp_processor_id+0x1c/0x20 [ 1287.175621] ? is_bpf_text_address+0xac/0x170 [ 1287.180126] ? find_held_lock+0x35/0x130 [ 1287.184186] ? is_bpf_text_address+0xac/0x170 [ 1287.188846] ? __lock_acquire+0x6ee/0x49c0 [ 1287.193266] ? __lock_acquire+0x6ee/0x49c0 [ 1287.198822] ? lock_downgrade+0x880/0x880 [ 1287.203195] ? mark_held_locks+0x100/0x100 [ 1287.207804] ? debug_smp_processor_id+0x1c/0x20 [ 1287.213361] ? perf_trace_lock_acquire+0xf5/0x580 [ 1287.218717] ? mark_held_locks+0x100/0x100 [ 1287.223629] ? debug_smp_processor_id+0x1c/0x20 [ 1287.228439] ? perf_trace_lock_acquire+0xf5/0x580 [ 1287.233609] ? find_held_lock+0x35/0x130 [ 1287.237769] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1287.242729] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1287.248661] ? rtnl_link_unregister+0x250/0x250 [ 1287.254171] rtnetlink_rcv_msg+0x463/0xb00 [ 1287.259563] ? rtnetlink_put_metrics+0x560/0x560 [ 1287.265649] ? netdev_pick_tx+0x300/0x300 [ 1287.269827] ? netlink_deliver_tap+0x22d/0xc20 [ 1287.277210] ? find_held_lock+0x35/0x130 [ 1287.281294] netlink_rcv_skb+0x17d/0x460 [ 1287.285374] ? rtnetlink_put_metrics+0x560/0x560 [ 1287.290143] ? netlink_ack+0xb30/0xb30 [ 1287.294124] ? kasan_check_read+0x11/0x20 [ 1287.298375] ? netlink_deliver_tap+0x254/0xc20 [ 1287.303148] rtnetlink_rcv+0x1d/0x30 [ 1287.306887] netlink_unicast+0x53a/0x730 [ 1287.311128] ? netlink_attachskb+0x770/0x770 [ 1287.315551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1287.321109] netlink_sendmsg+0x8ae/0xd70 [ 1287.325174] ? netlink_unicast+0x730/0x730 [ 1287.329415] ? selinux_socket_sendmsg+0x36/0x40 [ 1287.334078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1287.340131] ? security_socket_sendmsg+0x8d/0xc0 [ 1287.344887] ? netlink_unicast+0x730/0x730 [ 1287.349208] sock_sendmsg+0xd7/0x130 [ 1287.352933] ___sys_sendmsg+0x803/0x920 [ 1287.356923] ? copy_msghdr_from_user+0x430/0x430 [ 1287.361683] ? lock_downgrade+0x880/0x880 [ 1287.365844] ? kasan_check_read+0x11/0x20 [ 1287.370078] ? __fget+0x367/0x540 [ 1287.373533] ? iterate_fd+0x360/0x360 [ 1287.377354] ? __fget_light+0x1a9/0x230 [ 1287.381328] ? __fdget+0x1b/0x20 [ 1287.384690] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1287.390227] __sys_sendmsg+0x105/0x1d0 [ 1287.394124] ? __ia32_sys_shutdown+0x80/0x80 [ 1287.398545] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1287.403305] ? do_syscall_64+0x26/0x620 [ 1287.407547] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1287.412909] ? do_syscall_64+0x26/0x620 [ 1287.416894] __x64_sys_sendmsg+0x78/0xb0 [ 1287.420956] do_syscall_64+0xfd/0x620 [ 1287.425463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1287.430649] RIP: 0033:0x45af49 [ 1287.433839] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1287.452873] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1287.460855] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1287.468135] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1287.475406] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3dfe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x40000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fff) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/18) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x24402) [ 1287.487009] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1287.494357] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:23 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:23 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc41b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:23 executing program 1 (fault-call:4 fault-nth:27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:23 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0xd75f3e940af157e4, &(0x7f00000003c0)=0x7fffffff, 0x576e4cf53b56063d) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="290000000606100025bd7000fbdbdf25030000000900020073797a31000000000900030073797a310000000005000100070000000900030073797a30000000000900020073797a3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) fcntl$dupfd(r3, 0x0, r2) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8, 0x1) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000d00)=""/269) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r7 = getpid() sched_setscheduler(r7, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r8, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r7, @ANYRESDEC=r9], 0x8, 0x1) write$FUSE_WRITE(r8, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x7}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000, 0x81}, 0x1a228, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = getpid() sched_setscheduler(r10, 0x0, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r11, @ANYBLOB, @ANYBLOB="424e5bf5c5", @ANYRES32, @ANYPTR64=&(0x7f0000000e40)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRESOCT=r13], @ANYRESDEC=r12], 0x8, 0x1) fchmodat(r11, &(0x7f0000000300)='./file0\x00', 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r14+30000000}, 0x0) 12:53:23 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x402000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000140)={0x9, 0x7, 0xca, 0xb, 0x40000000}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x595d, 0x111800) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7fff, 0x505) [ 1287.860299] FAULT_INJECTION: forcing a failure. [ 1287.860299] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.900675] CPU: 1 PID: 27396 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1287.908529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.918946] Call Trace: [ 1287.921556] dump_stack+0x197/0x210 [ 1287.925205] should_fail.cold+0xa/0x1b [ 1287.929129] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1287.934245] ? lock_downgrade+0x880/0x880 [ 1287.938414] __should_failslab+0x121/0x190 [ 1287.942682] should_failslab+0x9/0x14 [ 1287.946492] kmem_cache_alloc+0x2ae/0x700 [ 1287.950647] ? lock_downgrade+0x880/0x880 [ 1287.954814] __kernfs_new_node+0xef/0x6f0 [ 1287.958985] ? kasan_check_write+0x14/0x20 [ 1287.963230] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1287.969091] ? wait_for_completion+0x440/0x440 [ 1287.973867] ? mutex_unlock+0xd/0x10 [ 1287.977589] ? kernfs_activate+0x192/0x1f0 [ 1287.981832] kernfs_new_node+0x99/0x130 [ 1287.985906] __kernfs_create_file+0x51/0x33b [ 1287.990333] sysfs_add_file_mode_ns+0x222/0x560 [ 1287.995018] internal_create_group+0x383/0xc30 [ 1287.999621] ? remove_files.isra.0+0x190/0x190 [ 1288.004306] ? kernfs_put+0x3c2/0x5d0 [ 1288.008118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.013665] ? kernfs_create_link+0x1d2/0x250 [ 1288.018783] sysfs_create_groups+0x9b/0x141 [ 1288.023111] device_add+0x87e/0x1760 [ 1288.026859] ? get_device_parent.isra.0+0x570/0x570 [ 1288.031879] ? __init_waitqueue_head+0x36/0x90 [ 1288.036466] ? pm_runtime_init+0x347/0x400 [ 1288.040714] netdev_register_kobject+0x183/0x3b0 [ 1288.045482] register_netdevice+0x875/0xff0 [ 1288.049812] ? netdev_change_features+0xb0/0xb0 [ 1288.054493] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1288.060145] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1288.065390] ? ip6gre_tunnel_init+0x340/0x340 [ 1288.069906] ? lockdep_rtnl_is_held+0x26/0x30 [ 1288.074410] ? ip6gre_tunnel_find+0x496/0x640 [ 1288.078941] ip6gre_newlink+0x298/0x7a0 [ 1288.082925] ? ip6gre_changelink+0x560/0x560 [ 1288.087604] rtnl_newlink+0x1042/0x1600 [ 1288.091600] ? rtnl_link_unregister+0x250/0x250 [ 1288.096276] ? mark_held_locks+0x100/0x100 [ 1288.100695] ? debug_smp_processor_id+0x1c/0x20 [ 1288.105379] ? is_bpf_text_address+0xac/0x170 [ 1288.109898] ? find_held_lock+0x35/0x130 [ 1288.113967] ? is_bpf_text_address+0xac/0x170 [ 1288.118472] ? __lock_acquire+0x6ee/0x49c0 [ 1288.122723] ? __lock_acquire+0x6ee/0x49c0 [ 1288.126967] ? lock_downgrade+0x880/0x880 [ 1288.131157] ? mark_held_locks+0x100/0x100 [ 1288.135423] ? debug_smp_processor_id+0x1c/0x20 [ 1288.140097] ? perf_trace_lock_acquire+0xf5/0x580 [ 1288.144975] ? mark_held_locks+0x100/0x100 [ 1288.149215] ? debug_smp_processor_id+0x1c/0x20 [ 1288.153910] ? perf_trace_lock_acquire+0xf5/0x580 [ 1288.158807] ? find_held_lock+0x35/0x130 [ 1288.162879] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1288.167335] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1288.172884] ? rtnl_link_unregister+0x250/0x250 [ 1288.177666] rtnetlink_rcv_msg+0x463/0xb00 [ 1288.181917] ? rtnetlink_put_metrics+0x560/0x560 [ 1288.188598] ? netdev_pick_tx+0x300/0x300 [ 1288.193869] ? netlink_deliver_tap+0x22d/0xc20 [ 1288.198817] ? find_held_lock+0x35/0x130 [ 1288.202999] netlink_rcv_skb+0x17d/0x460 [ 1288.207176] ? rtnetlink_put_metrics+0x560/0x560 [ 1288.212727] ? netlink_ack+0xb30/0xb30 [ 1288.216988] ? kasan_check_read+0x11/0x20 [ 1288.221152] ? netlink_deliver_tap+0x254/0xc20 [ 1288.225756] rtnetlink_rcv+0x1d/0x30 [ 1288.229817] netlink_unicast+0x53a/0x730 [ 1288.234415] ? netlink_attachskb+0x770/0x770 [ 1288.239093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.245259] netlink_sendmsg+0x8ae/0xd70 [ 1288.249342] ? netlink_unicast+0x730/0x730 [ 1288.253702] ? selinux_socket_sendmsg+0x36/0x40 [ 1288.258858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.264417] ? security_socket_sendmsg+0x8d/0xc0 [ 1288.269231] ? netlink_unicast+0x730/0x730 [ 1288.274190] sock_sendmsg+0xd7/0x130 [ 1288.278750] ___sys_sendmsg+0x803/0x920 [ 1288.283111] ? copy_msghdr_from_user+0x430/0x430 [ 1288.288325] ? lock_downgrade+0x880/0x880 [ 1288.292600] ? kasan_check_read+0x11/0x20 [ 1288.296850] ? __fget+0x367/0x540 [ 1288.300401] ? iterate_fd+0x360/0x360 [ 1288.304224] ? __fget_light+0x1a9/0x230 [ 1288.308307] ? __fdget+0x1b/0x20 [ 1288.311687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1288.317234] __sys_sendmsg+0x105/0x1d0 [ 1288.321226] ? __ia32_sys_shutdown+0x80/0x80 [ 1288.326092] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1288.330854] ? do_syscall_64+0x26/0x620 [ 1288.334859] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1288.340245] ? do_syscall_64+0x26/0x620 [ 1288.344253] __x64_sys_sendmsg+0x78/0xb0 [ 1288.348352] do_syscall_64+0xfd/0x620 [ 1288.352176] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1288.357372] RIP: 0033:0x45af49 [ 1288.360575] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1288.379483] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.387292] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1288.394582] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1288.401857] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1288.409133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1288.416413] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:23 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:23 executing program 1 (fault-call:4 fault-nth:28): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000300)='u:r:untrusted_app:s0:c512,c768\x00', 0xb4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r1 = gettid() gettid() r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) kcmp(r1, 0x0, 0x3, r2, r0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x210007fd, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1288.564111] FAULT_INJECTION: forcing a failure. [ 1288.564111] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.597655] CPU: 0 PID: 27515 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1288.605781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.616626] Call Trace: [ 1288.619238] dump_stack+0x197/0x210 [ 1288.622893] should_fail.cold+0xa/0x1b [ 1288.626819] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1288.633888] ? lock_downgrade+0x880/0x880 [ 1288.638875] __should_failslab+0x121/0x190 [ 1288.644194] should_failslab+0x9/0x14 [ 1288.648072] kmem_cache_alloc+0x2ae/0x700 [ 1288.655515] ? lock_downgrade+0x880/0x880 [ 1288.661358] __kernfs_new_node+0xef/0x6f0 [ 1288.664303] sd 0:0:1:0: [sg0] tag#275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1288.665635] ? kasan_check_write+0x14/0x20 [ 1288.665660] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1288.677228] sd 0:0:1:0: [sg0] tag#275 CDB: Third party copy in, sa=0x1f [ 1288.681202] ? wait_for_completion+0x440/0x440 [ 1288.681226] ? mutex_unlock+0xd/0x10 [ 1288.681240] ? kernfs_activate+0x192/0x1f0 [ 1288.681260] kernfs_new_node+0x99/0x130 [ 1288.681283] __kernfs_create_file+0x51/0x33b [ 1288.681305] sysfs_add_file_mode_ns+0x222/0x560 [ 1288.681331] internal_create_group+0x383/0xc30 [ 1288.681359] ? remove_files.isra.0+0x190/0x190 [ 1288.681374] ? kernfs_put+0x3c2/0x5d0 [ 1288.681392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.681408] ? kernfs_create_link+0x1d2/0x250 [ 1288.681433] sysfs_create_groups+0x9b/0x141 [ 1288.681453] device_add+0x87e/0x1760 [ 1288.681475] ? get_device_parent.isra.0+0x570/0x570 12:53:24 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) fcntl$dupfd(r1, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1288.681493] ? __init_waitqueue_head+0x36/0x90 [ 1288.681510] ? pm_runtime_init+0x347/0x400 [ 1288.681534] netdev_register_kobject+0x183/0x3b0 [ 1288.681558] register_netdevice+0x875/0xff0 [ 1288.681579] ? netdev_change_features+0xb0/0xb0 [ 1288.681596] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1288.681623] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1288.681640] ? ip6gre_tunnel_init+0x340/0x340 [ 1288.681655] ? lockdep_rtnl_is_held+0x26/0x30 [ 1288.681673] ? ip6gre_tunnel_find+0x496/0x640 [ 1288.681701] ip6gre_newlink+0x298/0x7a0 [ 1288.681721] ? ip6gre_changelink+0x560/0x560 [ 1288.681740] rtnl_newlink+0x1042/0x1600 [ 1288.681769] ? rtnl_link_unregister+0x250/0x250 [ 1288.681785] ? mark_held_locks+0x100/0x100 [ 1288.681811] ? __lock_acquire+0x6ee/0x49c0 [ 1288.681828] ? is_bpf_text_address+0xac/0x170 [ 1288.681859] ? mark_held_locks+0x100/0x100 [ 1288.681878] ? cpuacct_charge+0x1db/0x360 [ 1288.681895] ? find_held_lock+0x35/0x130 [ 1288.681916] ? __lock_acquire+0x6ee/0x49c0 [ 1288.681957] ? finish_task_switch+0x146/0x7c0 [ 1288.681974] ? find_held_lock+0x35/0x130 [ 1288.681992] ? finish_task_switch+0x146/0x7c0 [ 1288.682013] ? mark_held_locks+0xb1/0x100 [ 1288.682029] ? _raw_spin_unlock_irq+0x28/0x90 [ 1288.682044] ? finish_task_switch+0x146/0x7c0 [ 1288.682057] ? _raw_spin_unlock_irq+0x28/0x90 [ 1288.682075] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1288.682134] ? retint_kernel+0x2d/0x2d [ 1288.682158] ? rtnl_get_link+0x97/0x210 [ 1288.682173] ? __sanitizer_cov_trace_pc+0x2b/0x50 12:53:24 executing program 1 (fault-call:4 fault-nth:29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1288.682190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1288.682208] ? rtnl_link_unregister+0x250/0x250 [ 1288.682225] rtnetlink_rcv_msg+0x463/0xb00 [ 1288.682247] ? rtnetlink_put_metrics+0x560/0x560 [ 1288.682265] ? netdev_pick_tx+0x300/0x300 [ 1288.682284] ? netlink_deliver_tap+0x22d/0xc20 [ 1288.682300] ? find_held_lock+0x35/0x130 [ 1288.682324] netlink_rcv_skb+0x17d/0x460 [ 1288.687599] sd 0:0:1:0: [sg0] tag#275 CDB[00]: 84 7f 32 73 c5 a3 ee c8 cd bd ad 71 e0 59 8b 0e [ 1288.694366] ? rtnetlink_put_metrics+0x560/0x560 [ 1288.694386] ? netlink_ack+0xb30/0xb30 [ 1288.694402] ? kasan_check_read+0x11/0x20 [ 1288.694421] ? netlink_deliver_tap+0x254/0xc20 [ 1288.694443] rtnetlink_rcv+0x1d/0x30 [ 1288.694460] netlink_unicast+0x53a/0x730 [ 1288.694482] ? netlink_attachskb+0x770/0x770 [ 1288.694503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.694524] netlink_sendmsg+0x8ae/0xd70 [ 1288.694549] ? netlink_unicast+0x730/0x730 [ 1288.694574] ? selinux_socket_sendmsg+0x36/0x40 [ 1288.700235] sd 0:0:1:0: [sg0] tag#275 CDB[10]: 6f 2d f8 d2 26 3f 09 4b 7d 2b a9 d1 89 db d3 de [ 1288.703765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.703779] ? security_socket_sendmsg+0x8d/0xc0 [ 1288.703795] ? netlink_unicast+0x730/0x730 [ 1288.703814] sock_sendmsg+0xd7/0x130 [ 1288.703834] ___sys_sendmsg+0x803/0x920 [ 1288.703860] ? copy_msghdr_from_user+0x430/0x430 [ 1288.703883] ? lock_downgrade+0x880/0x880 [ 1288.703902] ? kasan_check_read+0x11/0x20 [ 1288.703923] ? __fget+0x367/0x540 [ 1288.703944] ? iterate_fd+0x360/0x360 [ 1288.703969] ? __fget_light+0x1a9/0x230 [ 1288.703986] ? __fdget+0x1b/0x20 [ 1288.704000] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1288.704019] __sys_sendmsg+0x105/0x1d0 [ 1288.704035] ? __ia32_sys_shutdown+0x80/0x80 [ 1288.704064] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1288.704080] ? do_syscall_64+0x26/0x620 [ 1288.704097] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1288.704112] ? do_syscall_64+0x26/0x620 [ 1288.704131] __x64_sys_sendmsg+0x78/0xb0 [ 1288.704149] do_syscall_64+0xfd/0x620 [ 1288.704168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1288.704180] RIP: 0033:0x45af49 [ 1288.704196] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1288.704203] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.704215] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1288.704222] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1288.704229] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1288.704236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1288.704244] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1289.185010] sd 0:0:1:0: [sg0] tag#275 CDB[20]: d8 [ 1289.190176] net_ratelimit: 10 callbacks suppressed [ 1289.190184] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.200256] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.205414] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.210482] protocol 88fb is buggy, dev hsr_slave_1 12:53:24 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x8, 0x1) setsockopt(r3, 0x9, 0x7, &(0x7f0000000400)="e829c4e5473b3f900ca8823d54c2aa82db6cb10ad096d51d7e8dd83ef631f1a18a431f4383ec3838e79c8aa2434d42e425b9e2ec1dee77bc021497e684801a26063565bf641e9100ac8922d1cf6c915b88e861e20e3b3c3b3ea8c50f25effb68fca03b2297f7569482e3585314fc5c0b430cbb65143b1dfe89ddb93272b30e350c068f98b5e0aafc5b81f864864e8b76698436a10c4df361b2c5a9892928404dac11b6914bb80e70af4f6558ebadb5865153b5cf049449733c5e10fb2992423f1bb099bec984fd22c9c7ec3f48f4", 0xce) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1289.215655] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.221108] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.226383] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.231495] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.254864] FAULT_INJECTION: forcing a failure. [ 1289.254864] name failslab, interval 1, probability 0, space 0, times 0 12:53:24 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) write$P9_RREAD(r0, &(0x7f0000000200)={0xc4, 0x75, 0x1, {0xb9, "a3539bc60a9723682ddf50534035da843fa3a764de7eb87bcca5dc5c452a5f4e0088eb183cb10f57e06ebc84ebacd34d7e54fb87d3dd7b0ed519f4bda3e59cc4e8e6a9c1c324f681026fe7177762a95cbafe328c31ee712c9f4e08346ecae5ef42f894cd0f994558f9fd9d45aa1b9200a7a0dbdd1103bfb9e132d9d1a16f76d0248ab67e272db59b3f5b076a4eb5cba46720a811da76adfb6378396974cb439e3d81d067bb4dcf96308403d98c8bdc9bfb4df8e532edc25d44"}}, 0xc4) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1289.301173] CPU: 1 PID: 27726 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1289.309028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.318401] Call Trace: [ 1289.321016] dump_stack+0x197/0x210 [ 1289.324677] should_fail.cold+0xa/0x1b [ 1289.328601] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1289.333753] ? lock_downgrade+0x880/0x880 [ 1289.338278] __should_failslab+0x121/0x190 [ 1289.342540] should_failslab+0x9/0x14 [ 1289.346367] kmem_cache_alloc+0x2ae/0x700 [ 1289.350552] ? lock_downgrade+0x880/0x880 [ 1289.354730] __kernfs_new_node+0xef/0x6f0 [ 1289.359417] ? kasan_check_write+0x14/0x20 [ 1289.363691] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1289.368512] ? wait_for_completion+0x440/0x440 [ 1289.373736] ? mutex_unlock+0xd/0x10 [ 1289.379855] ? kernfs_activate+0x192/0x1f0 [ 1289.385324] kernfs_new_node+0x99/0x130 [ 1289.389332] __kernfs_create_file+0x51/0x33b [ 1289.393761] sysfs_add_file_mode_ns+0x222/0x560 [ 1289.399043] internal_create_group+0x383/0xc30 [ 1289.404893] ? remove_files.isra.0+0x190/0x190 [ 1289.409966] ? kernfs_put+0x3c2/0x5d0 [ 1289.413785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1289.419988] ? kernfs_create_link+0x1d2/0x250 [ 1289.424925] sysfs_create_groups+0x9b/0x141 [ 1289.429291] device_add+0x87e/0x1760 [ 1289.433213] ? get_device_parent.isra.0+0x570/0x570 [ 1289.439204] ? __init_waitqueue_head+0x36/0x90 [ 1289.443803] ? pm_runtime_init+0x347/0x400 [ 1289.448060] netdev_register_kobject+0x183/0x3b0 [ 1289.453641] register_netdevice+0x875/0xff0 [ 1289.457980] ? netdev_change_features+0xb0/0xb0 [ 1289.462659] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1289.468227] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1289.473781] ? ip6gre_tunnel_init+0x340/0x340 [ 1289.478287] ? lockdep_rtnl_is_held+0x26/0x30 [ 1289.482975] ? ip6gre_tunnel_find+0x496/0x640 [ 1289.487494] ip6gre_newlink+0x298/0x7a0 [ 1289.491522] ? ip6gre_changelink+0x560/0x560 [ 1289.495952] rtnl_newlink+0x1042/0x1600 12:53:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000040)={{0x2, 0x4e23, @local}, {0x6, @broadcast}, 0x24, {0x2, 0x4e20, @multicast1}, 'batadv0\x00'}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, 0xffffffffffffffff) [ 1289.499954] ? rtnl_link_unregister+0x250/0x250 [ 1289.504654] ? trace_hardirqs_off+0x62/0x220 [ 1289.509087] ? __lock_acquire+0x6ee/0x49c0 [ 1289.513368] ? mark_held_locks+0x100/0x100 [ 1289.517652] ? mark_held_locks+0x100/0x100 [ 1289.521922] ? kasan_check_write+0x14/0x20 [ 1289.526195] ? finish_task_switch+0x1db/0x7c0 [ 1289.530716] ? __mutex_lock+0xa67/0x1300 [ 1289.534806] ? find_held_lock+0x35/0x130 [ 1289.538959] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1289.544538] ? rtnl_link_unregister+0x250/0x250 [ 1289.549237] rtnetlink_rcv_msg+0x463/0xb00 [ 1289.553502] ? rtnetlink_put_metrics+0x560/0x560 [ 1289.558289] ? netdev_pick_tx+0x300/0x300 [ 1289.562464] ? netlink_deliver_tap+0x22d/0xc20 [ 1289.567069] ? find_held_lock+0x35/0x130 [ 1289.571182] netlink_rcv_skb+0x17d/0x460 [ 1289.575266] ? rtnetlink_put_metrics+0x560/0x560 [ 1289.580066] ? netlink_ack+0xb30/0xb30 [ 1289.583992] ? kasan_check_read+0x11/0x20 [ 1289.588177] ? netlink_deliver_tap+0x254/0xc20 [ 1289.592792] rtnetlink_rcv+0x1d/0x30 [ 1289.596515] netlink_unicast+0x53a/0x730 [ 1289.600594] ? netlink_attachskb+0x770/0x770 [ 1289.605009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1289.610571] netlink_sendmsg+0x8ae/0xd70 [ 1289.614679] ? netlink_unicast+0x730/0x730 [ 1289.619011] ? selinux_socket_sendmsg+0x36/0x40 [ 1289.623681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1289.629212] ? security_socket_sendmsg+0x8d/0xc0 [ 1289.633975] ? netlink_unicast+0x730/0x730 [ 1289.638209] sock_sendmsg+0xd7/0x130 [ 1289.641940] ___sys_sendmsg+0x803/0x920 [ 1289.645912] ? copy_msghdr_from_user+0x430/0x430 [ 1289.650672] ? lock_downgrade+0x880/0x880 [ 1289.654821] ? kasan_check_read+0x11/0x20 [ 1289.658971] ? __fget+0x367/0x540 [ 1289.662422] ? iterate_fd+0x360/0x360 [ 1289.666243] ? __fget_light+0x1a9/0x230 [ 1289.670218] ? __fdget+0x1b/0x20 [ 1289.673579] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1289.679119] __sys_sendmsg+0x105/0x1d0 [ 1289.683172] ? __ia32_sys_shutdown+0x80/0x80 [ 1289.687618] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1289.692378] ? do_syscall_64+0x26/0x620 [ 1289.696349] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1289.701731] ? do_syscall_64+0x26/0x620 [ 1289.705719] __x64_sys_sendmsg+0x78/0xb0 [ 1289.709779] do_syscall_64+0xfd/0x620 [ 1289.713575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1289.718763] RIP: 0033:0x45af49 [ 1289.721953] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1289.741989] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:53:25 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1289.749718] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1289.757170] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1289.764434] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1289.771781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1289.779042] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:25 executing program 1 (fault-call:4 fault-nth:30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:25 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) fcntl$dupfd(r1, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1289.938547] FAULT_INJECTION: forcing a failure. [ 1289.938547] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.960108] CPU: 0 PID: 27745 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1289.967958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.977332] Call Trace: [ 1289.979952] dump_stack+0x197/0x210 [ 1289.983733] should_fail.cold+0xa/0x1b [ 1289.987682] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1289.992848] ? lock_downgrade+0x880/0x880 [ 1289.997036] __should_failslab+0x121/0x190 [ 1290.001300] should_failslab+0x9/0x14 [ 1290.005140] kmem_cache_alloc+0x2ae/0x700 [ 1290.010275] ? lock_downgrade+0x880/0x880 [ 1290.014462] __kernfs_new_node+0xef/0x6f0 [ 1290.018638] ? kasan_check_write+0x14/0x20 [ 1290.022904] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1290.027685] ? wait_for_completion+0x440/0x440 [ 1290.032312] ? mutex_unlock+0xd/0x10 [ 1290.036052] ? kernfs_activate+0x192/0x1f0 [ 1290.040322] kernfs_new_node+0x99/0x130 [ 1290.044339] __kernfs_create_file+0x51/0x33b [ 1290.048870] sysfs_add_file_mode_ns+0x222/0x560 [ 1290.053590] internal_create_group+0x383/0xc30 [ 1290.058222] ? remove_files.isra.0+0x190/0x190 [ 1290.062834] ? kernfs_put+0x3c2/0x5d0 [ 1290.066667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1290.072247] ? kernfs_create_link+0x1d2/0x250 [ 1290.076782] sysfs_create_groups+0x9b/0x141 [ 1290.081135] device_add+0x87e/0x1760 [ 1290.084882] ? get_device_parent.isra.0+0x570/0x570 [ 1290.090000] ? __init_waitqueue_head+0x36/0x90 [ 1290.094598] ? pm_runtime_init+0x347/0x400 [ 1290.098888] netdev_register_kobject+0x183/0x3b0 [ 1290.103677] register_netdevice+0x875/0xff0 [ 1290.108032] ? netdev_change_features+0xb0/0xb0 [ 1290.112733] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1290.118308] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1290.123527] ? ip6gre_tunnel_init+0x340/0x340 [ 1290.128042] ? lockdep_rtnl_is_held+0x26/0x30 [ 1290.132563] ? ip6gre_tunnel_find+0x496/0x640 [ 1290.138073] ip6gre_newlink+0x298/0x7a0 [ 1290.142090] ? ip6gre_changelink+0x560/0x560 [ 1290.146615] rtnl_newlink+0x1042/0x1600 [ 1290.150606] ? rtnl_link_unregister+0x250/0x250 [ 1290.155402] ? mark_held_locks+0x100/0x100 [ 1290.159648] ? debug_smp_processor_id+0x1c/0x20 [ 1290.164340] ? is_bpf_text_address+0xac/0x170 [ 1290.168871] ? find_held_lock+0x35/0x130 [ 1290.172945] ? is_bpf_text_address+0xac/0x170 [ 1290.177519] ? __lock_acquire+0x6ee/0x49c0 [ 1290.181775] ? __lock_acquire+0x6ee/0x49c0 [ 1290.186015] ? lock_downgrade+0x880/0x880 [ 1290.190175] ? mark_held_locks+0x100/0x100 [ 1290.194408] ? debug_smp_processor_id+0x1c/0x20 [ 1290.199076] ? perf_trace_lock_acquire+0xf5/0x580 [ 1290.203950] ? mark_held_locks+0x100/0x100 [ 1290.208181] ? debug_smp_processor_id+0x1c/0x20 [ 1290.212862] ? perf_trace_lock_acquire+0xf5/0x580 [ 1290.217751] ? find_held_lock+0x35/0x130 [ 1290.221822] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1290.226273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1290.231847] ? rtnl_link_unregister+0x250/0x250 [ 1290.236520] rtnetlink_rcv_msg+0x463/0xb00 [ 1290.240877] ? rtnetlink_put_metrics+0x560/0x560 [ 1290.245645] ? netdev_pick_tx+0x300/0x300 [ 1290.249836] ? netlink_deliver_tap+0x22d/0xc20 [ 1290.254520] ? find_held_lock+0x35/0x130 [ 1290.258714] netlink_rcv_skb+0x17d/0x460 [ 1290.262855] ? rtnetlink_put_metrics+0x560/0x560 [ 1290.267648] ? netlink_ack+0xb30/0xb30 [ 1290.271555] ? kasan_check_read+0x11/0x20 [ 1290.275986] ? netlink_deliver_tap+0x254/0xc20 [ 1290.280578] rtnetlink_rcv+0x1d/0x30 [ 1290.284384] netlink_unicast+0x53a/0x730 [ 1290.288446] ? netlink_attachskb+0x770/0x770 [ 1290.292866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1290.298403] netlink_sendmsg+0x8ae/0xd70 [ 1290.302480] ? netlink_unicast+0x730/0x730 [ 1290.306718] ? selinux_socket_sendmsg+0x36/0x40 [ 1290.311391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1290.316923] ? security_socket_sendmsg+0x8d/0xc0 [ 1290.321674] ? netlink_unicast+0x730/0x730 [ 1290.325907] sock_sendmsg+0xd7/0x130 [ 1290.329617] ___sys_sendmsg+0x803/0x920 [ 1290.333591] ? copy_msghdr_from_user+0x430/0x430 [ 1290.338351] ? lock_downgrade+0x880/0x880 [ 1290.342497] ? kasan_check_read+0x11/0x20 [ 1290.346651] ? __fget+0x367/0x540 [ 1290.350109] ? iterate_fd+0x360/0x360 [ 1290.353926] ? __fget_light+0x1a9/0x230 [ 1290.357893] ? __fdget+0x1b/0x20 [ 1290.361264] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1290.366807] __sys_sendmsg+0x105/0x1d0 [ 1290.370692] ? __ia32_sys_shutdown+0x80/0x80 [ 1290.375108] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1290.379856] ? do_syscall_64+0x26/0x620 [ 1290.383902] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1290.389262] ? do_syscall_64+0x26/0x620 [ 1290.393258] __x64_sys_sendmsg+0x78/0xb0 [ 1290.397327] do_syscall_64+0xfd/0x620 [ 1290.401136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1290.406335] RIP: 0033:0x45af49 [ 1290.409547] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1290.428460] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:53:25 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x7) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fchdir(r3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000000100c0000000000000000000000000000000c5000000001c793aa4a4e181b3ae685ecbca44963c8f606df5c185274f8f0a6592f2cfe45ef5d51ddf0f37c256443d58751cb1d1dbf3659a3c18"]) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000000)=0x2) modify_ldt$write(0x1, &(0x7f0000000040)={0x2bb200, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd3dcf7ae7da05083}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="010100225c8c295f36003fd970bbb2ccf57b7a00", @ANYRES16=r5, @ANYBLOB="20002bbd7000fbdbdf2502000000220001002b706f7369785f61636c5f616363657373276c6f7b2d40707070316c6f0000000800040002000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1290.436169] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1290.443431] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1290.450690] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1290.457961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1290.465223] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xc00, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x204, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x92}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff2c5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff814}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa06}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1aaf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x408a2}, 0x20000840) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000000)=0x3) [ 1290.491062] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.491067] protocol 88fb is buggy, dev hsr_slave_0 12:53:26 executing program 1 (fault-call:4 fault-nth:31): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:26 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1290.619898] FAULT_INJECTION: forcing a failure. [ 1290.619898] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.664661] CPU: 0 PID: 27859 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1290.672513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.681890] Call Trace: [ 1290.684517] dump_stack+0x197/0x210 [ 1290.688180] should_fail.cold+0xa/0x1b [ 1290.692102] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1290.697487] ? lock_downgrade+0x880/0x880 [ 1290.701663] __should_failslab+0x121/0x190 [ 1290.705933] should_failslab+0x9/0x14 [ 1290.709742] kmem_cache_alloc+0x2ae/0x700 [ 1290.713911] ? lock_downgrade+0x880/0x880 [ 1290.718071] __kernfs_new_node+0xef/0x6f0 [ 1290.722212] ? kasan_check_write+0x14/0x20 [ 1290.726444] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1290.731195] ? wait_for_completion+0x440/0x440 [ 1290.735781] ? mutex_unlock+0xd/0x10 [ 1290.739485] ? kernfs_activate+0x192/0x1f0 [ 1290.743908] kernfs_new_node+0x99/0x130 [ 1290.747884] __kernfs_create_file+0x51/0x33b [ 1290.752388] sysfs_add_file_mode_ns+0x222/0x560 [ 1290.757691] internal_create_group+0x383/0xc30 [ 1290.762302] ? remove_files.isra.0+0x190/0x190 [ 1290.766879] ? kernfs_put+0x3c2/0x5d0 [ 1290.770693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1290.776223] ? kernfs_create_link+0x1d2/0x250 [ 1290.780715] sysfs_create_groups+0x9b/0x141 [ 1290.785029] device_add+0x87e/0x1760 [ 1290.788737] ? get_device_parent.isra.0+0x570/0x570 [ 1290.794006] ? __init_waitqueue_head+0x36/0x90 [ 1290.798597] ? pm_runtime_init+0x347/0x400 [ 1290.803013] netdev_register_kobject+0x183/0x3b0 [ 1290.808245] register_netdevice+0x875/0xff0 [ 1290.812629] ? netdev_change_features+0xb0/0xb0 [ 1290.817318] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1290.825316] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1290.830503] ? ip6gre_tunnel_init+0x340/0x340 [ 1290.834997] ? lockdep_rtnl_is_held+0x26/0x30 [ 1290.839489] ? ip6gre_tunnel_find+0x496/0x640 [ 1290.843987] ip6gre_newlink+0x298/0x7a0 [ 1290.847958] ? ip6gre_changelink+0x560/0x560 [ 1290.852364] rtnl_newlink+0x1042/0x1600 [ 1290.856336] ? rtnl_link_unregister+0x250/0x250 [ 1290.860999] ? mark_held_locks+0x100/0x100 [ 1290.865319] ? is_bpf_text_address+0xac/0x170 [ 1290.869825] ? find_held_lock+0x35/0x130 [ 1290.873880] ? is_bpf_text_address+0xac/0x170 [ 1290.878387] ? __lock_acquire+0x6ee/0x49c0 [ 1290.882622] ? __lock_acquire+0x6ee/0x49c0 [ 1290.886848] ? lock_downgrade+0x880/0x880 [ 1290.891630] ? mark_held_locks+0x100/0x100 [ 1290.895861] ? mark_held_locks+0x100/0x100 [ 1290.900093] ? __kernel_text_address+0xd/0x40 [ 1290.904599] ? mark_held_locks+0x100/0x100 [ 1290.909174] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1290.913839] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1290.918850] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1290.923915] ? find_held_lock+0x35/0x130 [ 1290.927975] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1290.932388] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1290.937917] ? rtnl_link_unregister+0x250/0x250 [ 1290.942591] rtnetlink_rcv_msg+0x463/0xb00 [ 1290.946818] ? rtnetlink_put_metrics+0x560/0x560 [ 1290.951567] ? netdev_pick_tx+0x300/0x300 [ 1290.955727] ? netlink_deliver_tap+0x22d/0xc20 [ 1290.960300] ? find_held_lock+0x35/0x130 [ 1290.964470] netlink_rcv_skb+0x17d/0x460 [ 1290.968539] ? rtnetlink_put_metrics+0x560/0x560 [ 1290.973296] ? netlink_ack+0xb30/0xb30 [ 1290.977195] ? kasan_check_read+0x11/0x20 [ 1290.981360] ? netlink_deliver_tap+0x254/0xc20 [ 1290.985957] rtnetlink_rcv+0x1d/0x30 [ 1290.989671] netlink_unicast+0x53a/0x730 [ 1290.993734] ? netlink_attachskb+0x770/0x770 [ 1290.999007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.004549] netlink_sendmsg+0x8ae/0xd70 [ 1291.008712] ? netlink_unicast+0x730/0x730 [ 1291.012962] ? selinux_socket_sendmsg+0x36/0x40 [ 1291.017624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.023155] ? security_socket_sendmsg+0x8d/0xc0 [ 1291.027906] ? netlink_unicast+0x730/0x730 [ 1291.032136] sock_sendmsg+0xd7/0x130 [ 1291.035848] ___sys_sendmsg+0x803/0x920 [ 1291.039829] ? copy_msghdr_from_user+0x430/0x430 [ 1291.044587] ? lock_downgrade+0x880/0x880 [ 1291.048737] ? kasan_check_read+0x11/0x20 [ 1291.052880] ? __fget+0x367/0x540 [ 1291.056358] ? iterate_fd+0x360/0x360 [ 1291.060245] ? __fget_light+0x1a9/0x230 [ 1291.064212] ? __fdget+0x1b/0x20 [ 1291.067588] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1291.073225] __sys_sendmsg+0x105/0x1d0 [ 1291.077120] ? __ia32_sys_shutdown+0x80/0x80 [ 1291.081540] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1291.086306] ? do_syscall_64+0x26/0x620 [ 1291.090283] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.095663] ? do_syscall_64+0x26/0x620 [ 1291.099644] __x64_sys_sendmsg+0x78/0xb0 [ 1291.104143] do_syscall_64+0xfd/0x620 [ 1291.107953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.113132] RIP: 0033:0x45af49 [ 1291.116318] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1291.135216] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.142912] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1291.150177] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1291.157528] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:26 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1291.164795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1291.172051] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:26 executing program 1 (fault-call:4 fault-nth:32): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:26 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) fcntl$dupfd(r1, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:26 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) r4 = dup(r0) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff8d) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:26 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x206000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcaf521077fdc2150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x5, 0x8}, 0xf27d7326c2ceb69f}, r1, 0x8, r0, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7ff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000140)='encrypted\x00', 0x0) 12:53:26 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1291.382929] FAULT_INJECTION: forcing a failure. [ 1291.382929] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.449287] CPU: 1 PID: 27977 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1291.457920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.467320] Call Trace: [ 1291.469940] dump_stack+0x197/0x210 [ 1291.473612] should_fail.cold+0xa/0x1b [ 1291.477623] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1291.482762] ? lock_downgrade+0x880/0x880 [ 1291.486982] __should_failslab+0x121/0x190 [ 1291.491248] should_failslab+0x9/0x14 [ 1291.495225] kmem_cache_alloc+0x2ae/0x700 [ 1291.499407] ? lock_downgrade+0x880/0x880 [ 1291.503593] __kernfs_new_node+0xef/0x6f0 [ 1291.507769] ? kasan_check_write+0x14/0x20 [ 1291.512040] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1291.516825] ? wait_for_completion+0x440/0x440 [ 1291.521453] ? mutex_unlock+0xd/0x10 [ 1291.525204] ? kernfs_activate+0x192/0x1f0 [ 1291.529471] kernfs_new_node+0x99/0x130 [ 1291.533480] __kernfs_create_file+0x51/0x33b [ 1291.537917] sysfs_add_file_mode_ns+0x222/0x560 [ 1291.542626] internal_create_group+0x383/0xc30 [ 1291.547219] ? remove_files.isra.0+0x190/0x190 [ 1291.551800] ? kernfs_put+0x3c2/0x5d0 [ 1291.555593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.561209] ? kernfs_create_link+0x1d2/0x250 [ 1291.565703] sysfs_create_groups+0x9b/0x141 [ 1291.570029] device_add+0x87e/0x1760 [ 1291.573750] ? get_device_parent.isra.0+0x570/0x570 [ 1291.578889] ? __init_waitqueue_head+0x36/0x90 [ 1291.583487] ? pm_runtime_init+0x347/0x400 [ 1291.587860] netdev_register_kobject+0x183/0x3b0 [ 1291.592636] register_netdevice+0x875/0xff0 [ 1291.596982] ? netdev_change_features+0xb0/0xb0 [ 1291.601652] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1291.607552] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1291.612739] ? ip6gre_tunnel_init+0x340/0x340 [ 1291.617404] ? lockdep_rtnl_is_held+0x26/0x30 [ 1291.621901] ? ip6gre_tunnel_find+0x496/0x640 [ 1291.626483] ip6gre_newlink+0x298/0x7a0 [ 1291.630589] ? ip6gre_changelink+0x560/0x560 [ 1291.634996] rtnl_newlink+0x1042/0x1600 [ 1291.638981] ? rtnl_link_unregister+0x250/0x250 [ 1291.644781] ? mark_held_locks+0x100/0x100 [ 1291.649225] ? is_bpf_text_address+0xac/0x170 [ 1291.654428] ? find_held_lock+0x35/0x130 [ 1291.659297] ? is_bpf_text_address+0xac/0x170 [ 1291.665921] ? __lock_acquire+0x6ee/0x49c0 [ 1291.671704] ? __lock_acquire+0x6ee/0x49c0 [ 1291.676028] ? lock_downgrade+0x880/0x880 [ 1291.680180] ? mark_held_locks+0x100/0x100 [ 1291.684411] ? mark_held_locks+0x100/0x100 [ 1291.688746] ? __kernel_text_address+0xd/0x40 [ 1291.693258] ? mark_held_locks+0x100/0x100 [ 1291.697754] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1291.702419] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1291.707711] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1291.714244] ? find_held_lock+0x35/0x130 [ 1291.718760] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1291.723562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1291.729522] ? rtnl_link_unregister+0x250/0x250 [ 1291.734200] rtnetlink_rcv_msg+0x463/0xb00 [ 1291.738571] ? rtnetlink_put_metrics+0x560/0x560 [ 1291.743630] ? netdev_pick_tx+0x300/0x300 [ 1291.747997] ? netlink_deliver_tap+0x22d/0xc20 [ 1291.752688] ? find_held_lock+0x35/0x130 [ 1291.757878] netlink_rcv_skb+0x17d/0x460 [ 1291.762374] ? rtnetlink_put_metrics+0x560/0x560 [ 1291.767216] ? netlink_ack+0xb30/0xb30 [ 1291.771116] ? kasan_check_read+0x11/0x20 [ 1291.775259] ? netlink_deliver_tap+0x254/0xc20 [ 1291.779927] rtnetlink_rcv+0x1d/0x30 [ 1291.783636] netlink_unicast+0x53a/0x730 [ 1291.787707] ? netlink_attachskb+0x770/0x770 [ 1291.792328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.798587] netlink_sendmsg+0x8ae/0xd70 [ 1291.802768] ? netlink_unicast+0x730/0x730 [ 1291.807804] ? selinux_socket_sendmsg+0x36/0x40 [ 1291.813200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.818746] ? security_socket_sendmsg+0x8d/0xc0 [ 1291.824032] ? netlink_unicast+0x730/0x730 [ 1291.828458] sock_sendmsg+0xd7/0x130 [ 1291.832269] ___sys_sendmsg+0x803/0x920 [ 1291.836342] ? copy_msghdr_from_user+0x430/0x430 [ 1291.843182] ? lock_downgrade+0x880/0x880 [ 1291.847356] ? kasan_check_read+0x11/0x20 [ 1291.851498] ? __fget+0x367/0x540 [ 1291.854948] ? iterate_fd+0x360/0x360 [ 1291.858761] ? __fget_light+0x1a9/0x230 [ 1291.864483] ? __fdget+0x1b/0x20 [ 1291.868021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1291.873569] __sys_sendmsg+0x105/0x1d0 [ 1291.877632] ? __ia32_sys_shutdown+0x80/0x80 [ 1291.883196] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1291.888177] ? do_syscall_64+0x26/0x620 [ 1291.892200] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.897681] ? do_syscall_64+0x26/0x620 [ 1291.901673] __x64_sys_sendmsg+0x78/0xb0 [ 1291.905885] do_syscall_64+0xfd/0x620 [ 1291.909947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.916145] RIP: 0033:0x45af49 [ 1291.920567] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1291.939560] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.947264] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1291.954531] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1291.961804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1291.969079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1291.976341] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:27 executing program 1 (fault-call:4 fault-nth:33): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1292.108975] FAULT_INJECTION: forcing a failure. [ 1292.108975] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.122612] CPU: 0 PID: 28194 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1292.130646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.143605] Call Trace: [ 1292.146307] dump_stack+0x197/0x210 [ 1292.149952] should_fail.cold+0xa/0x1b [ 1292.153885] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1292.159008] ? lock_downgrade+0x880/0x880 [ 1292.163170] __should_failslab+0x121/0x190 [ 1292.167402] should_failslab+0x9/0x14 [ 1292.171471] kmem_cache_alloc+0x2ae/0x700 [ 1292.175612] ? lock_downgrade+0x880/0x880 [ 1292.179761] __kernfs_new_node+0xef/0x6f0 [ 1292.183916] ? kasan_check_write+0x14/0x20 [ 1292.188159] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1292.193007] ? wait_for_completion+0x440/0x440 [ 1292.197711] ? mutex_unlock+0xd/0x10 [ 1292.201419] ? kernfs_activate+0x192/0x1f0 [ 1292.205813] kernfs_new_node+0x99/0x130 [ 1292.210072] __kernfs_create_file+0x51/0x33b [ 1292.214490] sysfs_add_file_mode_ns+0x222/0x560 [ 1292.219162] internal_create_group+0x383/0xc30 [ 1292.223745] ? remove_files.isra.0+0x190/0x190 [ 1292.228324] ? kernfs_put+0x3c2/0x5d0 [ 1292.232467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1292.238002] ? kernfs_create_link+0x1d2/0x250 [ 1292.242499] sysfs_create_groups+0x9b/0x141 [ 1292.246816] device_add+0x87e/0x1760 [ 1292.250536] ? get_device_parent.isra.0+0x570/0x570 [ 1292.255553] ? __init_waitqueue_head+0x36/0x90 [ 1292.260140] ? pm_runtime_init+0x347/0x400 [ 1292.264382] netdev_register_kobject+0x183/0x3b0 [ 1292.270364] register_netdevice+0x875/0xff0 [ 1292.274697] ? netdev_change_features+0xb0/0xb0 [ 1292.279358] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1292.284894] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1292.290124] ? ip6gre_tunnel_init+0x340/0x340 [ 1292.294626] ? lockdep_rtnl_is_held+0x26/0x30 [ 1292.299218] ? ip6gre_tunnel_find+0x496/0x640 [ 1292.303973] ip6gre_newlink+0x298/0x7a0 [ 1292.307943] ? ip6gre_changelink+0x560/0x560 [ 1292.312438] rtnl_newlink+0x1042/0x1600 [ 1292.316417] ? rtnl_link_unregister+0x250/0x250 [ 1292.321092] ? mark_held_locks+0x100/0x100 [ 1292.325354] ? __lock_acquire+0x6ee/0x49c0 [ 1292.329943] ? debug_smp_processor_id+0x1c/0x20 [ 1292.334622] ? perf_trace_lock_acquire+0xf5/0x580 [ 1292.339834] ? mark_held_locks+0x100/0x100 [ 1292.344175] ? mark_held_locks+0x100/0x100 [ 1292.348575] ? debug_smp_processor_id+0x1c/0x20 [ 1292.353265] ? perf_trace_lock_acquire+0xf5/0x580 [ 1292.358114] ? kasan_check_write+0x14/0x20 [ 1292.362632] ? __mutex_lock+0xa67/0x1300 [ 1292.366699] ? find_held_lock+0x35/0x130 [ 1292.371642] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1292.377440] ? rtnl_link_unregister+0x250/0x250 [ 1292.382284] rtnetlink_rcv_msg+0x463/0xb00 [ 1292.387074] ? rtnetlink_put_metrics+0x560/0x560 [ 1292.392035] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1292.397346] ? rcu_read_unlock_special+0x679/0xea0 [ 1292.402272] ? netlink_deliver_tap+0x22d/0xc20 [ 1292.406884] ? find_held_lock+0x35/0x130 [ 1292.410950] netlink_rcv_skb+0x17d/0x460 [ 1292.415401] ? rtnetlink_put_metrics+0x560/0x560 [ 1292.420714] ? netlink_ack+0xb30/0xb30 [ 1292.424708] ? netlink_deliver_tap+0x254/0xc20 [ 1292.429441] rtnetlink_rcv+0x1d/0x30 [ 1292.433293] netlink_unicast+0x53a/0x730 [ 1292.437864] ? netlink_attachskb+0x770/0x770 [ 1292.442452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1292.448298] netlink_sendmsg+0x8ae/0xd70 [ 1292.453574] ? netlink_unicast+0x730/0x730 [ 1292.458128] ? selinux_socket_sendmsg+0x36/0x40 [ 1292.463160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1292.469178] ? security_socket_sendmsg+0x8d/0xc0 [ 1292.474037] ? netlink_unicast+0x730/0x730 [ 1292.478290] sock_sendmsg+0xd7/0x130 [ 1292.482215] ___sys_sendmsg+0x803/0x920 [ 1292.486195] ? copy_msghdr_from_user+0x430/0x430 [ 1292.492281] ? lock_downgrade+0x880/0x880 [ 1292.497075] ? kasan_check_read+0x11/0x20 [ 1292.501233] ? __fget+0x367/0x540 [ 1292.504686] ? iterate_fd+0x360/0x360 [ 1292.508493] ? __fget_light+0x1a9/0x230 [ 1292.512464] ? __fdget+0x1b/0x20 [ 1292.515834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1292.521889] __sys_sendmsg+0x105/0x1d0 [ 1292.525770] ? __ia32_sys_shutdown+0x80/0x80 [ 1292.530183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1292.535388] ? do_syscall_64+0x26/0x620 [ 1292.539377] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1292.544906] ? do_syscall_64+0x26/0x620 [ 1292.548880] __x64_sys_sendmsg+0x78/0xb0 [ 1292.552940] do_syscall_64+0xfd/0x620 [ 1292.556881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1292.562085] RIP: 0033:0x45af49 [ 1292.565284] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1292.585535] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.593889] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1292.601328] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 12:53:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:28 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1292.608589] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1292.615867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1292.623129] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:28 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:28 executing program 1 (fault-call:4 fault-nth:34): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:28 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB="3077dca72ca65859e96259125d69c87a3379fc6f429aea751c47efed3e7fc8989a6ebb7fe100"/49, @ANYRES64, @ANYRES32, @ANYRESHEX=r8, @ANYRESDEC=r5], 0x8, 0x1) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000100)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r9, 0x540b, 0x2) ioctl$KDFONTOP_COPY(r9, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0xd, 0x1, 0x1e6, &(0x7f0000000400)}) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) 12:53:28 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) tee(r1, r0, 0x0, 0x7) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) pipe(&(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8104201}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1164, 0x24, 0x800, 0x70bd28, 0x25dfdbfd, {0xf}, [@generic="abf27ada1a3083aea54dbf4607c7c4d5182f5326aea2a1c69a359a9627c61536131156713c2cef4a7df3753bbcfdedb2b177d84dfbcab4679a96ec10dfca2d68540538890e912770b5ff127628537d239c", @generic="41c91b36dc5542215cf051ec75a998f219c3c054ba8da10317", @generic="0104b7c63275d295d3eeb0d7ff6780b456a768fcad590e61eb00db0f26e035df8fbd70c90a4c1efe826d3802eaca396c67740897cc81af113265ba0b55e1c46005afd49db85618eefd7ca42cee7ae6a47e83863ed76df4197d7e2afad2c4ec6c7390ff05576365a6ea402fec745906eb595bcb75850e4d059e46c45f1a2068c528de43ed12f5edd955baf683835d7491c9991b0d23d71354349cf2e4b12952b00a45a817f446728a8750e3878d93d9beeb6224fae95c4ed88a79c390eba17755852412ef14c8cf4c3986f87a0e14221dc0eb0f4d5586d73560573d", @typed={0x8, 0x2e, 0x0, 0x0, @uid=r4}, @generic="178c610f9968988aea3ffa83b3a3cd1ce268978066c79dcc10e3b9780b538d5681e468a330957be68e10470c21813919303ef34c0ebb1ff9c7b4ff835e779634bc5c75784379e4c22195d9d1ae3e3f80ebc78b69b09ad7ab888626f4e863350dd13c8866a87922d8b34e9f4d9d638dd9e5e0202ec444be1e8fa356306901736f43f5fe09fe4344c38571da268315833417b9223f800249378e8daa7d63ec9c68a4c4fa621d88cf26b2d2482c4d787cf211a25aaa62b758b191771ecc02e0faea704c9b526764291522a84e647619c133fa40a56b36d7ce510d3ecd7b6488b069220933e387226c2bb0aac2531501d068122fe53f1d9c0579a214f46e35c80b951f44c86ec6dc393ceccbd5d786a16236b34d27f837607ecf9dfb956cc0e093189ad6ded23d63b4507d87bb0774d608f4f018d07883fac3e43b9348d01bb2a8aacf2f516a75613842956a4719c52792cd11119f96d534cbd037cb2ecceb72fe933b79688e808cdcb3ac8d3eed275e35cae0c0ec60660ff9d62f5ab69cfaf771efc5e5bb3055a47a9dad4c141f3bb61f71f1b02e01f3c97db12af97972f204c495667c742d9561c6aa3d3d614836b9048b6521692651986f73a536588604ba6c966f90cd557c27a3c524227723246545a0d4b17c88c6c06a146e7d74c4e98567c7d140040586573f9479eb81bb8d5a768abfdc00b666e497fdf54ac6d077ed15249daf22c9f046eeb584e7bd0b627c3b951d6f274ffc5ab6f7284ff0d0c0e3f03ac12c10b7e3d8d7d355c20e848089afdf5120ce58e05185d2106997095cfbae3d55475619a9abf1e55ecfaee058022c9eb2f7ef67dfdc36d5c5454346da3541aa59732038ff6ebeb50f314fe270b98fe1fbd2face551e58ec9766054941b5b4b7ae49631cf6e1f687e67667d71d3410a22eb831c9eb749d4152add07296d2eadcce6729727ad78b9f4704cb28b03185b05cf2e524c86d0d4f3164324aab6bc7d6c7ee87119f737122c14483f6e99193517690be91993b4532697a53e02597d58896d3ba7acc0b84ef8649a3f7d96dba7e81f4808408d08fce222468e5a72ac21a4fb93f1e3f360b49d03d761348f4df26c6f75a858149f8802ca2b4bfec5d66abe2b9c28eb4256fd9a077b466e98216ea7a6798478eb22ae511223e720d31f2d2e98504557b4c7c367cd3bdac0a2d63c16d3a8773b5ae2593f9523de4a963984ce27a65b544191823a09a1dc9e73c6bf4f7806b58987d3d5cb1a59e0fc203d129b7d9a537320a6ed674526e7a2049aaa5d07ec1e617bac5311b2f47828ac5dedfd27f23a72a24b732ab99c6959a299ffced6dfdfea645a7c26b76d0b79bafc4c129c58066b1a420badc6f515aa8e136a896b34eee219949a07c78e07ded5b81593731c0143513d9f37f7d998e964509c738c5d4ad4449bdafe900bb96fc9e0221fbf62115e6cf7acc0c836c9f9eacb5273cb8e090b6aeaab08028c37acdb48a4eb7944dd6ac250f1ca2a3c6d82531fe3b5c5e41884e1e3add57143b9deb5049e82b7e6c1e9fce47a3d193ddcbcc83bcb2aeea3c6a3a124a718143a334991f510171900478baa464aa7bb75ea060e5f9b5bc0aca6210fa104173916addadd7762c2108384f307051931fbf291e9872e2224a85328588b7dc7e3f0b5bca76cf86ffed26976a92089f2401c9109f84b76491d7c1e7028360f97c78efdfa0cadbd4f96f0ea5fc6c65fab7f4ba5840702a90c0942393d6840990b720e2b9920f5c98e4f1fad045cf17213017e450fdb2fdfeaf1169faac88d2552ba14ff030608121d72e62374e85d0e904b3b4296cc8814e5f13e01be982f41eac303ecd170a66837c15c4ca7f0328d16cf5031ead0c610600de7625e612f2577997f684eb6ffaba950e17d90d94d20ec027fa0b150aa6cfcadcab0374ee2e9c69c73a7885f68f9e0c6cee087ba1455c1aaff756eb28794618f9cb1586c1b224904d2f764bfec790dc6e7e997f877fd3b1b827f75360c4c2f094b950c6015b5563b65d3237508b44cca84edbaed205ee5852fcb866f8da90f43a749a4d19b89c98773eaeba031c03470c3c772b1b9c849a1695b8c7dc36d0cc79da663e7aaac1ac5c92ca1a444154479a395ac5e0f3df050a8e5ddadcb9016963b2e1e7ff95493c5f5e66dbc390ddd02f341025d0400501c567e58b5a007d0e452b60dd942d93547a846bc41b8d4378249347cc8da3aefb1c829976f8400e193064b2eb194dc94ee4d5810c098dba3e329f8a5bfaebe5d7f631841a3178c1f35ae2c41e575181f7c0e29108b30dc7cac0fec1ea4369faa9ed34d91731abb6dac54c7ebf2a4bf6dc43737224a0b2c7fdac46a2c1abd1cfc73413079c7cfc02ed3baf07e79dc15d2ac5f4c4e3a4a9aded6f00d8ef9549fe26f69429feba0c3ef3b6e4b915c01d776f9cf530518549db01843fec54f17d621750d6df0f9ffdd2c051d79e87252cddf72b8173669f5263f1d4b12a97aecb3ee16b86b1638c27649ecccdbfe37dbc721f106659d3a962b9ee8ffb1d74f09eb94a066ffeeb922822b49216379486cabc7ef0a508af662ef9ed1deb28cd428fe4880ed3c4dbefab4dd79bb769ccd51e5bcfddd515a8d29125ff1401a982033a7de03235d3340a073ccca72d4b132e4f168627e762e59b5250ef5591314aee405635ace94e5a8a016cdaabdbe744de62152be8bb4be37db527cc9e8fcc82e7fcb7ebe062207f85a7b3a673d22db4b4024a67bdb8ff77963791110514bd9bbaac828425d109cf8973748a997375c61e32b2c6606f191f8e5918aae1bf605b5b1d382667f2e159cbcc61d4cc9ac5ae07160eb046c621ddd630d9413eea562606f9de961e23d5d42a6143f7ab25782bf2042ef43f9dbd01eed1f30ceda87b91e86c15c41cc8cc51ad3957f3632949372c8c373189b5290108956f2ff1094153310a64d314a96ce5e537fb73c88429a278043b411bd8ed091d43f2e810f67d4abfb523665e3bb0f162d3fa89b2f5e8a9174c77dc3f991097c4e7d86b00b8521c533351dbee0c72bce51961951bb66fc6778294d1b918ae6ae7cd7a906df2a874e88d5d31ad813144248bcf5831517ae6cfb04a9cc1626e2a0c3fe5e545fe2d279f99da419842d230f0572aecf4ca3314ed3ca44266b7d9bcdd503d35885b5db93018db9ffa39874bca4433ddf75f7e8ba652fa7b99d916820b92ca0e1a6f5c7080d7dd42c44e629ddad91e14f145d2f4e86324a38ae306797dd74fb2f883140e75f12a2589689c780e2dc4aaf1a6bd3caf5fdbb1ba4d1a529b883adc324f7e3ab48fa3870769c4c8ffda55c106909067800e019054870f0b374829d025f21bd76db7e6a7c7cc3b7a3081e2bfb5d0dafb0631d434ccb80e59541bc28985d06ad947d1967e4b3e84a2bfe79c6a82384dd9e60fb14180f6bcd9ebdf067e804384b1555b0aa3a47ef39d1535a41648d7be7d93445c3b07c22a03d54a8be359dbd37e204c917cd295967832490b8d1290115b77b5200128fa276e834047807d261422554371512cb51163be492ae8116fa03c1b4644c35a461d0500f211d26cc4e266875e3ddbdeba599c29be393ee048231073ca3e9bfbc3c5f9d56cea2329aee18da06ae7497593b390ecf261e9256d4a324027b78b95a3872ad126d8a56952011959e78642a49ca6e51efd5d0776f7fe8650c240ea4e28469bf8d81b94ac5db797605ea520b3295b3a6d7b40d5f59e1e0edb9cab254485ce2a4b248ecf683162c2671cf6f1fd980abb92ab0e25b3ce0797657f02203375408c382f178e73c38c7ee44be3c5eaeddba111e653ce02a9e5fdb6919d257c928711e1081db50cc6217e32b6aabb76b7b48cd7cfd43dd94284ebca9828d015e32c5b600ab50c4665ac648fc8910f0d9bb70d87e4d66236ecec8ba4ea152b69da20f83039da98dbb9e489c97978f2458b8a4291cf4b4223e7aab117d1fbff3d4ce466dc0fa47e3c0e6fc2aa4d0cd7decef4b651ff58deed5cc3cec945ad4e014e5090e12a27e94483277b4b1bc6b2c51def526f0504cf05e8dea86b5362201cbb1eb178e90c7876d2687e5d2e050438b1c6217416ec0cda7e519ffb84012f03baa3d912bc2d38590aac93ff06c2358de1fddc580fce7f76266d112243cdb03e17eba544cd8841753209bb2609070a89f73d3f678ef01d1e042a0c8ce5dc384df9f913ea3ab779c01e8153b49c3865f2b80db892c4c8d385e6c128af07eb7773841108a79a59590d431bccbd6116740f9a86ec43fd743745933f937441091205c974a3ed8e6356a5bb9e41e7ae8ebaa95d78352ed54f226f9a3777cd26b47fb56f8f5f8d1cb3a41ef765cbfda84ece94d4c516afe89cb70f4d6ae778cb4e35d2053c77f6987fd504017e18123b96da0412b20fda0c133859e5bf42c190df21f8e322f04581d77194e74e6607a92e41da75574870b127ecc09ae3db499cca00c7feaa9b8d5f3a15bbbb0cf20ae3ce77c2b64a90cb74a553a6a43cedbab79257d8150cce0330b537d2783fc7f8a985724ce5fd0aa3a1d5fe3873b8597e66f35532d092361783239c7bd69c8b6a32068f62a934668f2b0fac17de2d5df060c27deac0e358dc20943004e7a92944a6f9e8107d40a3b3b6bf0d2815da814bc08149e94f26be1b5a8be8fbd11123df5807f400e16b8689405c66008bb855d284d40a4d316e5a3e4b8a5be991186a2e78e22b3769fb672f615a8ce6a2e23063267964b1c12f262165f5e21cbcb1f9af0ada5cd08913c45cccfbb6c2f08d22032866ffb4240ae248b4a4eef23d6e89bc398224ad8225b3bf90c4fb593e98653702a86c8dbfdb3457143063fb2f5c8d285673a8cfbcb4fc9be53d27727e8ad537b832cfc513472cbaf35eead6cd1f880881695775c7687bd30700ba1fb120ab1b5ac9a22d6b9776f3af194cd1a0f21688836a2c07f8f1064d0490fd1bcc75970f6c61094a05834623bc6368b6c4722d64b2954f5ee79d3b68aba00a5672f8cc6c12563700fb2384713bf7353f31d0018a53ca0b40278e8e4d0b78aaed26dd9e09bb9055eef9f556c041b91d8482de6cf20be9c6c35ae9001e061f0f42abb9c87119ef55af4871a30189bb68d0026f9f917a9a88fe37ad7323959d3a755b4f263ab91de025452d0053bf23a071613274d191e2105c2d5a38b897d7148829b53cb070b937933ce2b2d07334e2f3be0a960e86d13d4053d58b1cf3cc3fb16517d558778b46ae0c34ab951abb4229f0979c11cd9236e177222138cd2cb7d09610e118e8a2623a97b7adfcab7894a26e1728544a9ca41885b307271a9cd9e6b47c3cb25384322bb2947f6587194bb827bf807adee324c095954fbac910090cf3b12ce5f60a6e656ab6a16b1ee37382963af075f284a31dfd05c726473a30a9f88b4f687da8fcdbd35da51270a8f38089b148d00f4af2fe22608481d0edd1fcb2dfcecdb488d387a6b2c621b23724f7ecd4fe6e6a01ffd3f0ec255ac196e37daa83bb5f13c383d725f6c9cdaf7e990c877f2e7e41ad1dc191cbb741b025242c2ab605f8a59b2f42cb88988442f3c0a6a093e3b4929cf0a08fa412142b001b84d5ef6dbc87ea82ff7079f7f111d6e8fc635ec7e032d35bd0c2d0907890d17e33b6139ac578cd475bec5a6bd5dcbb1ef53e20cc1b9b0d50e5604b773ec1a7d1d33bd44f2bfdb62a63f4b90b1c587e97094341a59226fc53efe0ae2f65a3af8cca42fdf738adada93707c1504318b4e7d62c7bbaae4e4e7f35cde68aa86bd80224a341554b3f94b10fb473f8763f940c"]}, 0x1164}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) [ 1292.865803] FAULT_INJECTION: forcing a failure. [ 1292.865803] name failslab, interval 1, probability 0, space 0, times 0 12:53:28 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1292.927782] CPU: 1 PID: 28210 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1292.937111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.946852] Call Trace: [ 1292.949559] dump_stack+0x197/0x210 [ 1292.953579] should_fail.cold+0xa/0x1b [ 1292.957518] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1292.962659] ? lock_downgrade+0x880/0x880 [ 1292.966848] __should_failslab+0x121/0x190 [ 1292.971116] should_failslab+0x9/0x14 [ 1292.974940] kmem_cache_alloc+0x2ae/0x700 [ 1292.979307] ? lock_downgrade+0x880/0x880 [ 1292.983477] __kernfs_new_node+0xef/0x6f0 [ 1292.987642] ? kasan_check_write+0x14/0x20 [ 1292.991884] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1292.996854] ? wait_for_completion+0x440/0x440 [ 1293.001559] ? mutex_unlock+0xd/0x10 [ 1293.005452] ? kernfs_activate+0x192/0x1f0 [ 1293.009701] kernfs_new_node+0x99/0x130 [ 1293.013793] __kernfs_create_file+0x51/0x33b [ 1293.018241] sysfs_add_file_mode_ns+0x222/0x560 [ 1293.022911] internal_create_group+0x383/0xc30 [ 1293.027951] ? remove_files.isra.0+0x190/0x190 [ 1293.032543] ? kernfs_put+0x3c2/0x5d0 [ 1293.036339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1293.041869] ? kernfs_create_link+0x1d2/0x250 [ 1293.046369] sysfs_create_groups+0x9b/0x141 [ 1293.050685] device_add+0x87e/0x1760 [ 1293.054397] ? get_device_parent.isra.0+0x570/0x570 [ 1293.059417] ? __init_waitqueue_head+0x36/0x90 [ 1293.064000] ? pm_runtime_init+0x347/0x400 [ 1293.068320] netdev_register_kobject+0x183/0x3b0 [ 1293.074117] register_netdevice+0x875/0xff0 [ 1293.079667] ? netdev_change_features+0xb0/0xb0 [ 1293.084352] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1293.089912] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1293.096319] ? ip6gre_tunnel_init+0x340/0x340 [ 1293.101349] ? lockdep_rtnl_is_held+0x26/0x30 [ 1293.105838] ? ip6gre_tunnel_find+0x496/0x640 [ 1293.110467] ip6gre_newlink+0x298/0x7a0 [ 1293.115201] ? ip6gre_changelink+0x560/0x560 [ 1293.119638] rtnl_newlink+0x1042/0x1600 [ 1293.123656] ? rtnl_link_unregister+0x250/0x250 [ 1293.128336] ? mark_held_locks+0x100/0x100 [ 1293.132599] ? debug_smp_processor_id+0x1c/0x20 [ 1293.137274] ? is_bpf_text_address+0xac/0x170 [ 1293.141803] ? find_held_lock+0x35/0x130 [ 1293.145864] ? is_bpf_text_address+0xac/0x170 [ 1293.150367] ? __lock_acquire+0x6ee/0x49c0 [ 1293.154601] ? __lock_acquire+0x6ee/0x49c0 [ 1293.158845] ? lock_downgrade+0x880/0x880 [ 1293.163004] ? mark_held_locks+0x100/0x100 [ 1293.167231] ? debug_smp_processor_id+0x1c/0x20 [ 1293.171899] ? perf_trace_lock_acquire+0xf5/0x580 [ 1293.176752] ? mark_held_locks+0x100/0x100 [ 1293.180979] ? debug_smp_processor_id+0x1c/0x20 [ 1293.185644] ? perf_trace_lock_acquire+0xf5/0x580 [ 1293.190513] ? find_held_lock+0x35/0x130 [ 1293.194571] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1293.198982] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1293.204512] ? rtnl_link_unregister+0x250/0x250 [ 1293.209183] rtnetlink_rcv_msg+0x463/0xb00 [ 1293.213417] ? rtnetlink_put_metrics+0x560/0x560 [ 1293.218162] ? netdev_pick_tx+0x300/0x300 [ 1293.222303] ? netlink_deliver_tap+0x22d/0xc20 [ 1293.226883] ? find_held_lock+0x35/0x130 [ 1293.230958] netlink_rcv_skb+0x17d/0x460 [ 1293.235017] ? rtnetlink_put_metrics+0x560/0x560 [ 1293.239766] ? netlink_ack+0xb30/0xb30 [ 1293.245642] ? kasan_check_read+0x11/0x20 [ 1293.249800] ? netlink_deliver_tap+0x254/0xc20 [ 1293.254383] rtnetlink_rcv+0x1d/0x30 [ 1293.258095] netlink_unicast+0x53a/0x730 [ 1293.262151] ? netlink_attachskb+0x770/0x770 [ 1293.266556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1293.272089] netlink_sendmsg+0x8ae/0xd70 [ 1293.276157] ? netlink_unicast+0x730/0x730 [ 1293.280390] ? selinux_socket_sendmsg+0x36/0x40 [ 1293.285048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1293.290586] ? security_socket_sendmsg+0x8d/0xc0 [ 1293.295333] ? netlink_unicast+0x730/0x730 [ 1293.299560] sock_sendmsg+0xd7/0x130 [ 1293.303267] ___sys_sendmsg+0x803/0x920 [ 1293.307245] ? copy_msghdr_from_user+0x430/0x430 [ 1293.312001] ? lock_downgrade+0x880/0x880 [ 1293.316157] ? kasan_check_read+0x11/0x20 [ 1293.320300] ? __fget+0x367/0x540 [ 1293.323747] ? iterate_fd+0x360/0x360 [ 1293.327548] ? __fget_light+0x1a9/0x230 [ 1293.331530] ? __fdget+0x1b/0x20 [ 1293.334885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1293.340500] __sys_sendmsg+0x105/0x1d0 [ 1293.344384] ? __ia32_sys_shutdown+0x80/0x80 [ 1293.348801] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1293.353566] ? do_syscall_64+0x26/0x620 [ 1293.357540] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.363694] ? do_syscall_64+0x26/0x620 [ 1293.367664] __x64_sys_sendmsg+0x78/0xb0 [ 1293.371814] do_syscall_64+0xfd/0x620 [ 1293.375607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.380786] RIP: 0033:0x45af49 [ 1293.383969] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1293.402860] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1293.410561] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1293.417826] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1293.425086] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1293.432357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1293.439619] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockname$l2tp6(r3, &(0x7f0000000040), &(0x7f0000000080)=0x20) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r4], 0x8, 0x1) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x100010, r1, 0x82000000) 12:53:28 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:29 executing program 1 (fault-call:4 fault-nth:35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:29 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) sendto$x25(r1, &(0x7f0000000200)="9304a7dda85e28df530a82fb9d7369c04eebea0de1c42cb5631953bf6b161ade7e3492fc2e7f0ebf1d55543e8c353bdd64bf107968a849d294611aa069b003342a0601be49a702b384e8db0d557bff06e9ed6428472d3af49ec3b9f73000fbe42058b0a1569deec0633c657d29c3bf7689b6bae449ce4dee57c762ed6c9ee3fb8f9300c2b3f13f6dacf45c9ff3916681a3fd7fd791ec6fc93435f7b80b72bf45f0f6c2bcf41d2332280d9be1fcdc72aed05664d2935dbdb0779dbab1c4ec64e6bc9a554aec121a01448b9366ac4c892b4522094ee35de569584f", 0xda, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101000, 0x0) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getpeername$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1293.699354] FAULT_INJECTION: forcing a failure. [ 1293.699354] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.711159] CPU: 1 PID: 28433 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1293.719080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.728965] Call Trace: [ 1293.731683] dump_stack+0x197/0x210 [ 1293.735336] should_fail.cold+0xa/0x1b [ 1293.739264] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1293.744904] ? lock_downgrade+0x880/0x880 [ 1293.749066] __should_failslab+0x121/0x190 [ 1293.753303] should_failslab+0x9/0x14 [ 1293.757558] kmem_cache_alloc+0x2ae/0x700 [ 1293.761727] ? lock_downgrade+0x880/0x880 [ 1293.765885] __kernfs_new_node+0xef/0x6f0 [ 1293.770038] ? kasan_check_write+0x14/0x20 [ 1293.774267] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1293.779082] ? wait_for_completion+0x440/0x440 [ 1293.783698] ? mutex_unlock+0xd/0x10 [ 1293.787424] ? kernfs_activate+0x192/0x1f0 [ 1293.791685] kernfs_new_node+0x99/0x130 [ 1293.795658] __kernfs_create_file+0x51/0x33b [ 1293.800060] sysfs_add_file_mode_ns+0x222/0x560 [ 1293.805073] internal_create_group+0x383/0xc30 [ 1293.809662] ? remove_files.isra.0+0x190/0x190 [ 1293.814245] ? kernfs_put+0x3c2/0x5d0 [ 1293.818059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1293.823590] ? kernfs_create_link+0x1d2/0x250 [ 1293.828082] sysfs_create_groups+0x9b/0x141 [ 1293.832398] device_add+0x87e/0x1760 [ 1293.836107] ? get_device_parent.isra.0+0x570/0x570 [ 1293.841112] ? __init_waitqueue_head+0x36/0x90 [ 1293.845684] ? pm_runtime_init+0x347/0x400 [ 1293.849913] netdev_register_kobject+0x183/0x3b0 [ 1293.854662] register_netdevice+0x875/0xff0 [ 1293.858975] ? netdev_change_features+0xb0/0xb0 [ 1293.863653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1293.869196] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1293.874393] ? ip6gre_tunnel_init+0x340/0x340 [ 1293.878879] ? lockdep_rtnl_is_held+0x26/0x30 [ 1293.883368] ? ip6gre_tunnel_find+0x496/0x640 [ 1293.887965] ip6gre_newlink+0x298/0x7a0 [ 1293.891933] ? ip6gre_changelink+0x560/0x560 [ 1293.896347] rtnl_newlink+0x1042/0x1600 [ 1293.900326] ? rtnl_link_unregister+0x250/0x250 [ 1293.904986] ? mark_held_locks+0x100/0x100 [ 1293.909232] ? is_bpf_text_address+0xac/0x170 [ 1293.915381] ? find_held_lock+0x35/0x130 [ 1293.919434] ? is_bpf_text_address+0xac/0x170 [ 1293.923924] ? __lock_acquire+0x6ee/0x49c0 [ 1293.928150] ? __lock_acquire+0x6ee/0x49c0 [ 1293.932387] ? lock_downgrade+0x880/0x880 [ 1293.936543] ? mark_held_locks+0x100/0x100 [ 1293.940779] ? mark_held_locks+0x100/0x100 [ 1293.945089] ? __kernel_text_address+0xd/0x40 [ 1293.949601] ? mark_held_locks+0x100/0x100 [ 1293.953828] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1293.958494] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1293.963504] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1293.968531] ? find_held_lock+0x35/0x130 [ 1293.972580] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1293.976998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1293.982528] ? rtnl_link_unregister+0x250/0x250 [ 1293.987204] rtnetlink_rcv_msg+0x463/0xb00 [ 1293.991448] ? rtnetlink_put_metrics+0x560/0x560 [ 1293.996209] ? netdev_pick_tx+0x300/0x300 [ 1294.000436] ? netlink_deliver_tap+0x22d/0xc20 [ 1294.005467] ? find_held_lock+0x35/0x130 [ 1294.009718] netlink_rcv_skb+0x17d/0x460 [ 1294.013795] ? rtnetlink_put_metrics+0x560/0x560 [ 1294.018631] ? netlink_ack+0xb30/0xb30 [ 1294.022510] ? kasan_check_read+0x11/0x20 [ 1294.026675] ? netlink_deliver_tap+0x254/0xc20 [ 1294.032856] rtnetlink_rcv+0x1d/0x30 [ 1294.036587] netlink_unicast+0x53a/0x730 [ 1294.040669] ? netlink_attachskb+0x770/0x770 [ 1294.045084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1294.050644] netlink_sendmsg+0x8ae/0xd70 [ 1294.054703] ? netlink_unicast+0x730/0x730 [ 1294.058932] ? selinux_socket_sendmsg+0x36/0x40 [ 1294.063592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1294.070858] ? security_socket_sendmsg+0x8d/0xc0 [ 1294.075605] ? netlink_unicast+0x730/0x730 [ 1294.079833] sock_sendmsg+0xd7/0x130 [ 1294.083538] ___sys_sendmsg+0x803/0x920 [ 1294.087502] ? copy_msghdr_from_user+0x430/0x430 [ 1294.092279] ? lock_downgrade+0x880/0x880 [ 1294.096511] ? kasan_check_read+0x11/0x20 [ 1294.101792] ? __fget+0x367/0x540 [ 1294.105642] ? iterate_fd+0x360/0x360 [ 1294.109761] ? __fget_light+0x1a9/0x230 [ 1294.113782] ? __fdget+0x1b/0x20 [ 1294.117395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.123069] __sys_sendmsg+0x105/0x1d0 [ 1294.127028] ? __ia32_sys_shutdown+0x80/0x80 [ 1294.131890] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1294.136650] ? do_syscall_64+0x26/0x620 [ 1294.140625] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.145997] ? do_syscall_64+0x26/0x620 [ 1294.150000] __x64_sys_sendmsg+0x78/0xb0 [ 1294.154157] do_syscall_64+0xfd/0x620 [ 1294.157963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.163152] RIP: 0033:0x45af49 [ 1294.166353] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1294.186044] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.194305] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000340)=0x7, 0x4) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r3, @ANYRESDEC=r5], 0x8, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r6}, 0x3c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20018801) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) setsockopt$packet_int(r9, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x5, 0x6, 0x5ebc8f3e491def2c, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x810) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f00000003c0)={0x7, 0x42, 0x40, 0xd245, 0x40}) [ 1294.201737] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1294.210503] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1294.217969] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1294.228974] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:29 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:29 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1294.338026] audit: type=1400 audit(1579006409.804:168): avc: denied { setopt } for pid=28441 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 12:53:29 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) mq_unlink(&(0x7f0000000040)='/dev/rtc0\x00') r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/237) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:29 executing program 1 (fault-call:4 fault-nth:36): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:30 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x8}, 0x24000, 0x4000, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x80, 0x10001) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000080)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:30 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1294.523431] FAULT_INJECTION: forcing a failure. [ 1294.523431] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.591300] CPU: 1 PID: 28558 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1294.600466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.611160] Call Trace: [ 1294.614203] dump_stack+0x197/0x210 [ 1294.617882] should_fail.cold+0xa/0x1b [ 1294.622495] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1294.627809] ? lock_downgrade+0x880/0x880 [ 1294.631988] __should_failslab+0x121/0x190 [ 1294.637026] should_failslab+0x9/0x14 [ 1294.641028] kmem_cache_alloc+0x2ae/0x700 [ 1294.645328] ? lock_downgrade+0x880/0x880 [ 1294.649615] __kernfs_new_node+0xef/0x6f0 [ 1294.654484] ? kasan_check_write+0x14/0x20 [ 1294.658898] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1294.663673] ? wait_for_completion+0x440/0x440 [ 1294.668625] ? mutex_unlock+0xd/0x10 [ 1294.672701] ? kernfs_activate+0x192/0x1f0 [ 1294.676938] kernfs_new_node+0x99/0x130 [ 1294.680915] __kernfs_create_file+0x51/0x33b [ 1294.685750] sysfs_add_file_mode_ns+0x222/0x560 [ 1294.692121] internal_create_group+0x383/0xc30 [ 1294.696815] ? remove_files.isra.0+0x190/0x190 [ 1294.701429] ? kernfs_put+0x3c2/0x5d0 [ 1294.705239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1294.710883] ? kernfs_create_link+0x1d2/0x250 [ 1294.715421] sysfs_create_groups+0x9b/0x141 [ 1294.719774] device_add+0x87e/0x1760 [ 1294.723527] ? get_device_parent.isra.0+0x570/0x570 [ 1294.729432] ? __init_waitqueue_head+0x36/0x90 [ 1294.735072] ? pm_runtime_init+0x347/0x400 [ 1294.739662] netdev_register_kobject+0x183/0x3b0 [ 1294.745696] register_netdevice+0x875/0xff0 [ 1294.750297] ? netdev_change_features+0xb0/0xb0 [ 1294.755881] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1294.761460] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1294.766674] ? ip6gre_tunnel_init+0x340/0x340 [ 1294.771167] ? lockdep_rtnl_is_held+0x26/0x30 [ 1294.775691] ? ip6gre_tunnel_find+0x496/0x640 [ 1294.780193] ip6gre_newlink+0x298/0x7a0 [ 1294.784170] ? ip6gre_changelink+0x560/0x560 [ 1294.788583] rtnl_newlink+0x1042/0x1600 [ 1294.792571] ? rtnl_link_unregister+0x250/0x250 [ 1294.797235] ? mark_held_locks+0x100/0x100 [ 1294.801477] ? is_bpf_text_address+0xac/0x170 [ 1294.806532] ? find_held_lock+0x35/0x130 [ 1294.811067] ? is_bpf_text_address+0xac/0x170 [ 1294.815577] ? __lock_acquire+0x6ee/0x49c0 [ 1294.820167] ? __lock_acquire+0x6ee/0x49c0 [ 1294.824433] ? lock_downgrade+0x880/0x880 [ 1294.828718] ? mark_held_locks+0x100/0x100 [ 1294.832971] ? mark_held_locks+0x100/0x100 [ 1294.837209] ? __kernel_text_address+0xd/0x40 [ 1294.841738] ? mark_held_locks+0x100/0x100 [ 1294.845976] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1294.850658] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1294.855672] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1294.860730] ? find_held_lock+0x35/0x130 [ 1294.864803] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1294.869230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.874765] ? rtnl_link_unregister+0x250/0x250 [ 1294.879443] rtnetlink_rcv_msg+0x463/0xb00 [ 1294.883678] ? rtnetlink_put_metrics+0x560/0x560 [ 1294.890088] ? netdev_pick_tx+0x300/0x300 [ 1294.894232] ? netlink_deliver_tap+0x22d/0xc20 [ 1294.898821] ? find_held_lock+0x35/0x130 [ 1294.902905] netlink_rcv_skb+0x17d/0x460 [ 1294.906972] ? rtnetlink_put_metrics+0x560/0x560 [ 1294.911726] ? netlink_ack+0xb30/0xb30 [ 1294.915608] ? kasan_check_read+0x11/0x20 [ 1294.919762] ? netlink_deliver_tap+0x254/0xc20 [ 1294.924361] rtnetlink_rcv+0x1d/0x30 [ 1294.928072] netlink_unicast+0x53a/0x730 [ 1294.932133] ? netlink_attachskb+0x770/0x770 [ 1294.936542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1294.942082] netlink_sendmsg+0x8ae/0xd70 [ 1294.946145] ? netlink_unicast+0x730/0x730 [ 1294.950389] ? selinux_socket_sendmsg+0x36/0x40 [ 1294.955048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1294.960590] ? security_socket_sendmsg+0x8d/0xc0 [ 1294.965362] ? netlink_unicast+0x730/0x730 [ 1294.969595] sock_sendmsg+0xd7/0x130 [ 1294.973392] ___sys_sendmsg+0x803/0x920 [ 1294.977378] ? copy_msghdr_from_user+0x430/0x430 [ 1294.982146] ? lock_downgrade+0x880/0x880 [ 1294.986394] ? kasan_check_read+0x11/0x20 [ 1294.990540] ? __fget+0x367/0x540 [ 1294.993992] ? iterate_fd+0x360/0x360 [ 1294.997796] ? __fget_light+0x1a9/0x230 [ 1295.001939] ? __fdget+0x1b/0x20 [ 1295.005305] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1295.011361] __sys_sendmsg+0x105/0x1d0 [ 1295.015246] ? __ia32_sys_shutdown+0x80/0x80 [ 1295.019664] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1295.024416] ? do_syscall_64+0x26/0x620 [ 1295.028394] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.033754] ? do_syscall_64+0x26/0x620 [ 1295.038789] __x64_sys_sendmsg+0x78/0xb0 [ 1295.042847] do_syscall_64+0xfd/0x620 [ 1295.046645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.051826] RIP: 0033:0x45af49 [ 1295.055011] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1295.073932] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.081641] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1295.088904] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1295.096164] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1295.103448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1295.110735] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1295.119934] net_ratelimit: 16 callbacks suppressed [ 1295.119943] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.121475] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.125307] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.130221] protocol 88fb is buggy, dev hsr_slave_1 12:53:30 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:30 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x3, 0x0, 0x0, 0x6780, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@dev}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000040)={0x4, 0x1, {0x55, 0x401, 0x8, {0xa5, 0x800}, {0xff, 0x81}, @rumble={0x81, 0xfff9}}, {0x0, 0x1, 0x4, {0x63, 0x9}, {0x5ca, 0x7}, @cond=[{0x7, 0x9, 0x5, 0x5, 0x400, 0x6}, {0x6, 0x18, 0x200, 0x4d1, 0x7f, 0x200}]}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000140)=0x8) 12:53:30 executing program 1 (fault-call:4 fault-nth:37): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:30 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1295.451076] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.456292] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.461476] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.466584] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.471797] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.476874] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.492463] FAULT_INJECTION: forcing a failure. [ 1295.492463] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.510340] CPU: 1 PID: 28774 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1295.518186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.527977] Call Trace: [ 1295.530568] dump_stack+0x197/0x210 [ 1295.534197] should_fail.cold+0xa/0x1b [ 1295.538088] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1295.543194] ? lock_downgrade+0x880/0x880 [ 1295.547339] __should_failslab+0x121/0x190 [ 1295.551565] should_failslab+0x9/0x14 [ 1295.555357] kmem_cache_alloc+0x2ae/0x700 [ 1295.559495] ? lock_downgrade+0x880/0x880 [ 1295.563639] __kernfs_new_node+0xef/0x6f0 [ 1295.567779] ? kasan_check_write+0x14/0x20 [ 1295.572006] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1295.576755] ? wait_for_completion+0x440/0x440 [ 1295.581335] ? mutex_unlock+0xd/0x10 [ 1295.585048] ? kernfs_activate+0x192/0x1f0 [ 1295.589284] kernfs_new_node+0x99/0x130 [ 1295.593256] __kernfs_create_file+0x51/0x33b [ 1295.597661] sysfs_add_file_mode_ns+0x222/0x560 [ 1295.602340] internal_create_group+0x383/0xc30 [ 1295.606936] ? remove_files.isra.0+0x190/0x190 [ 1295.612044] ? kernfs_put+0x3c2/0x5d0 [ 1295.615843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.621373] ? kernfs_create_link+0x1d2/0x250 [ 1295.626395] sysfs_create_groups+0x9b/0x141 [ 1295.630725] device_add+0x87e/0x1760 [ 1295.634436] ? get_device_parent.isra.0+0x570/0x570 [ 1295.639446] ? __init_waitqueue_head+0x36/0x90 [ 1295.644023] ? pm_runtime_init+0x347/0x400 [ 1295.648255] netdev_register_kobject+0x183/0x3b0 [ 1295.653011] register_netdevice+0x875/0xff0 [ 1295.657479] ? netdev_change_features+0xb0/0xb0 [ 1295.662258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1295.667809] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1295.673008] ? ip6gre_tunnel_init+0x340/0x340 [ 1295.677499] ? lockdep_rtnl_is_held+0x26/0x30 [ 1295.682081] ? ip6gre_tunnel_find+0x496/0x640 [ 1295.686582] ip6gre_newlink+0x298/0x7a0 [ 1295.690550] ? ip6gre_changelink+0x560/0x560 [ 1295.694954] rtnl_newlink+0x1042/0x1600 [ 1295.698944] ? rtnl_link_unregister+0x250/0x250 [ 1295.703604] ? mark_held_locks+0x100/0x100 [ 1295.707837] ? is_bpf_text_address+0xac/0x170 [ 1295.712320] ? find_held_lock+0x35/0x130 [ 1295.716381] ? is_bpf_text_address+0xac/0x170 [ 1295.720867] ? __lock_acquire+0x6ee/0x49c0 [ 1295.725092] ? __lock_acquire+0x6ee/0x49c0 [ 1295.729332] ? lock_downgrade+0x880/0x880 [ 1295.733477] ? mark_held_locks+0x100/0x100 [ 1295.737701] ? mark_held_locks+0x100/0x100 [ 1295.741926] ? __kernel_text_address+0xd/0x40 [ 1295.746432] ? mark_held_locks+0x100/0x100 [ 1295.750659] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1295.755320] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1295.760330] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1295.765363] ? find_held_lock+0x35/0x130 [ 1295.769425] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1295.773834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1295.779374] ? rtnl_link_unregister+0x250/0x250 [ 1295.784038] rtnetlink_rcv_msg+0x463/0xb00 [ 1295.788320] ? rtnetlink_put_metrics+0x560/0x560 [ 1295.793098] ? netdev_pick_tx+0x300/0x300 [ 1295.797271] ? netlink_deliver_tap+0x22d/0xc20 [ 1295.801869] ? find_held_lock+0x35/0x130 [ 1295.805934] netlink_rcv_skb+0x17d/0x460 [ 1295.810014] ? rtnetlink_put_metrics+0x560/0x560 [ 1295.814784] ? netlink_ack+0xb30/0xb30 [ 1295.818818] ? kasan_check_read+0x11/0x20 [ 1295.822984] ? netlink_deliver_tap+0x254/0xc20 [ 1295.827574] rtnetlink_rcv+0x1d/0x30 [ 1295.831286] netlink_unicast+0x53a/0x730 [ 1295.835345] ? netlink_attachskb+0x770/0x770 [ 1295.839785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.845421] netlink_sendmsg+0x8ae/0xd70 [ 1295.849521] ? netlink_unicast+0x730/0x730 [ 1295.853761] ? selinux_socket_sendmsg+0x36/0x40 [ 1295.858441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.864074] ? security_socket_sendmsg+0x8d/0xc0 [ 1295.868849] ? netlink_unicast+0x730/0x730 [ 1295.873090] sock_sendmsg+0xd7/0x130 [ 1295.876819] ___sys_sendmsg+0x803/0x920 [ 1295.880803] ? copy_msghdr_from_user+0x430/0x430 [ 1295.885619] ? lock_downgrade+0x880/0x880 [ 1295.889901] ? kasan_check_read+0x11/0x20 [ 1295.894176] ? __fget+0x367/0x540 [ 1295.897649] ? iterate_fd+0x360/0x360 [ 1295.901455] ? __fget_light+0x1a9/0x230 [ 1295.905446] ? __fdget+0x1b/0x20 [ 1295.908808] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1295.914347] __sys_sendmsg+0x105/0x1d0 [ 1295.918232] ? __ia32_sys_shutdown+0x80/0x80 [ 1295.922642] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1295.927391] ? do_syscall_64+0x26/0x620 [ 1295.931393] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.936830] ? do_syscall_64+0x26/0x620 [ 1295.940799] __x64_sys_sendmsg+0x78/0xb0 [ 1295.944866] do_syscall_64+0xfd/0x620 [ 1295.948669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.953846] RIP: 0033:0x45af49 [ 1295.957044] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1295.976890] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.984950] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1295.993451] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 12:53:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x1f, 0x1) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000140)=0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001580)={0x14, r3, 0x11, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x144, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x88}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @rand_addr="812583c89c542e67cffc663c737ac3bd", 0x2}}}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4820}, 0x8000) 12:53:31 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1296.000901] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1296.008609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1296.016574] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:31 executing program 1 (fault-call:4 fault-nth:38): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:31 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) r1 = epoll_create1(0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000000)={0x2000}) 12:53:31 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1296.219330] FAULT_INJECTION: forcing a failure. [ 1296.219330] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.278467] CPU: 0 PID: 28834 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1296.286695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1296.296065] Call Trace: [ 1296.298739] dump_stack+0x197/0x210 [ 1296.303272] should_fail.cold+0xa/0x1b [ 1296.307725] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1296.312944] ? lock_downgrade+0x880/0x880 [ 1296.317124] __should_failslab+0x121/0x190 [ 1296.321383] should_failslab+0x9/0x14 [ 1296.325203] kmem_cache_alloc+0x2ae/0x700 [ 1296.329387] ? lock_downgrade+0x880/0x880 [ 1296.333549] __kernfs_new_node+0xef/0x6f0 [ 1296.337707] ? kasan_check_write+0x14/0x20 [ 1296.341956] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1296.346741] ? wait_for_completion+0x440/0x440 [ 1296.351340] ? mutex_unlock+0xd/0x10 [ 1296.355058] ? kernfs_activate+0x192/0x1f0 [ 1296.359295] kernfs_new_node+0x99/0x130 [ 1296.363292] __kernfs_create_file+0x51/0x33b [ 1296.367700] sysfs_add_file_mode_ns+0x222/0x560 [ 1296.372379] internal_create_group+0x383/0xc30 [ 1296.376959] ? remove_files.isra.0+0x190/0x190 [ 1296.381533] ? kernfs_put+0x3c2/0x5d0 [ 1296.385325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1296.390851] ? kernfs_create_link+0x1d2/0x250 [ 1296.395345] sysfs_create_groups+0x9b/0x141 [ 1296.399662] device_add+0x87e/0x1760 [ 1296.403370] ? get_device_parent.isra.0+0x570/0x570 [ 1296.408383] ? __init_waitqueue_head+0x36/0x90 [ 1296.413042] ? pm_runtime_init+0x347/0x400 [ 1296.417282] netdev_register_kobject+0x183/0x3b0 [ 1296.422034] register_netdevice+0x875/0xff0 [ 1296.426349] ? netdev_change_features+0xb0/0xb0 [ 1296.431010] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1296.436552] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1296.441736] ? ip6gre_tunnel_init+0x340/0x340 [ 1296.446220] ? lockdep_rtnl_is_held+0x26/0x30 [ 1296.450705] ? ip6gre_tunnel_find+0x496/0x640 [ 1296.455240] ip6gre_newlink+0x298/0x7a0 [ 1296.459227] ? ip6gre_changelink+0x560/0x560 [ 1296.463647] rtnl_newlink+0x1042/0x1600 [ 1296.467624] ? rtnl_link_unregister+0x250/0x250 [ 1296.472291] ? mark_held_locks+0x100/0x100 [ 1296.476522] ? debug_smp_processor_id+0x1c/0x20 [ 1296.481198] ? is_bpf_text_address+0xac/0x170 [ 1296.485684] ? find_held_lock+0x35/0x130 [ 1296.490690] ? is_bpf_text_address+0xac/0x170 [ 1296.495178] ? __lock_acquire+0x6ee/0x49c0 [ 1296.499405] ? __lock_acquire+0x6ee/0x49c0 [ 1296.503629] ? lock_downgrade+0x880/0x880 [ 1296.507898] ? mark_held_locks+0x100/0x100 [ 1296.512125] ? debug_smp_processor_id+0x1c/0x20 [ 1296.516783] ? perf_trace_lock_acquire+0xf5/0x580 [ 1296.521669] ? mark_held_locks+0x100/0x100 [ 1296.525905] ? debug_smp_processor_id+0x1c/0x20 [ 1296.530564] ? perf_trace_lock_acquire+0xf5/0x580 [ 1296.535442] ? find_held_lock+0x35/0x130 [ 1296.539502] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1296.543921] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1296.549459] ? rtnl_link_unregister+0x250/0x250 [ 1296.554122] rtnetlink_rcv_msg+0x463/0xb00 [ 1296.558362] ? rtnetlink_put_metrics+0x560/0x560 [ 1296.563115] ? netdev_pick_tx+0x300/0x300 [ 1296.567257] ? netlink_deliver_tap+0x22d/0xc20 [ 1296.571851] ? find_held_lock+0x35/0x130 [ 1296.575930] netlink_rcv_skb+0x17d/0x460 [ 1296.579991] ? rtnetlink_put_metrics+0x560/0x560 [ 1296.584745] ? netlink_ack+0xb30/0xb30 [ 1296.588632] ? kasan_check_read+0x11/0x20 [ 1296.592803] ? netlink_deliver_tap+0x254/0xc20 [ 1296.597397] rtnetlink_rcv+0x1d/0x30 [ 1296.601103] netlink_unicast+0x53a/0x730 [ 1296.605165] ? netlink_attachskb+0x770/0x770 [ 1296.609616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1296.615160] netlink_sendmsg+0x8ae/0xd70 [ 1296.619241] ? netlink_unicast+0x730/0x730 [ 1296.623488] ? selinux_socket_sendmsg+0x36/0x40 [ 1296.628851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1296.634498] ? security_socket_sendmsg+0x8d/0xc0 [ 1296.639249] ? netlink_unicast+0x730/0x730 [ 1296.643489] sock_sendmsg+0xd7/0x130 [ 1296.647216] ___sys_sendmsg+0x803/0x920 [ 1296.651194] ? copy_msghdr_from_user+0x430/0x430 [ 1296.655959] ? lock_downgrade+0x880/0x880 [ 1296.660110] ? kasan_check_read+0x11/0x20 [ 1296.664251] ? __fget+0x367/0x540 [ 1296.667699] ? iterate_fd+0x360/0x360 [ 1296.671498] ? __fget_light+0x1a9/0x230 [ 1296.676432] ? __fdget+0x1b/0x20 [ 1296.679795] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1296.685426] __sys_sendmsg+0x105/0x1d0 [ 1296.689316] ? __ia32_sys_shutdown+0x80/0x80 [ 1296.693726] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1296.698473] ? do_syscall_64+0x26/0x620 [ 1296.702437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1296.707792] ? do_syscall_64+0x26/0x620 [ 1296.711768] __x64_sys_sendmsg+0x78/0xb0 [ 1296.716010] do_syscall_64+0xfd/0x620 [ 1296.719823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1296.725000] RIP: 0033:0x45af49 [ 1296.728183] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1296.747071] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1296.755292] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1296.762593] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1296.769873] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:31 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x7f, 0x3, 0x4, 0x2000, 0x1, {0x77359400}, {0x4, 0x0, 0x81, 0x4, 0x81, 0x8, "0614a34d"}, 0x0, 0x87dfd6c1a888ef8, @planes=&(0x7f0000000040)={0x6, 0xfffffffe, @userptr, 0xd2}, 0x5, 0x0, r0}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x8800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) [ 1296.777142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1296.784406] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x44580) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl='posixacl'}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) 12:53:32 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fstatfs(r0, &(0x7f0000000240)=""/112) r1 = dup(r0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffffffffffff, 0x101082) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000002c0)=0xe) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000040)={0x9d86, 0x3, 0x4, 0x2000000, 0x0, {r6, r7/1000+30000}, {0x2, 0xc, 0x7, 0x8, 0x80, 0x61, "ba360c08"}, 0x7, 0x6, @offset=0x10001, 0x6a}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='/dev/kvm\x00') 12:53:32 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:32 executing program 1 (fault-call:4 fault-nth:39): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1297.102092] FAULT_INJECTION: forcing a failure. [ 1297.102092] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.129570] CPU: 0 PID: 28939 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1297.137414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.146788] Call Trace: [ 1297.149406] dump_stack+0x197/0x210 [ 1297.153065] should_fail.cold+0xa/0x1b [ 1297.156976] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1297.162104] ? lock_downgrade+0x880/0x880 [ 1297.166289] __should_failslab+0x121/0x190 [ 1297.170641] should_failslab+0x9/0x14 [ 1297.174456] kmem_cache_alloc+0x2ae/0x700 [ 1297.178626] ? lock_downgrade+0x880/0x880 [ 1297.182806] __kernfs_new_node+0xef/0x6f0 [ 1297.186978] ? kasan_check_write+0x14/0x20 [ 1297.191233] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1297.196013] ? wait_for_completion+0x440/0x440 [ 1297.200632] ? mutex_unlock+0xd/0x10 [ 1297.204366] ? kernfs_activate+0x192/0x1f0 [ 1297.208636] kernfs_new_node+0x99/0x130 [ 1297.212725] __kernfs_create_file+0x51/0x33b [ 1297.217163] sysfs_add_file_mode_ns+0x222/0x560 [ 1297.221857] internal_create_group+0x383/0xc30 [ 1297.226462] ? remove_files.isra.0+0x190/0x190 [ 1297.231054] ? kernfs_put+0x3c2/0x5d0 [ 1297.234867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1297.240420] ? kernfs_create_link+0x1d2/0x250 [ 1297.244941] sysfs_create_groups+0x9b/0x141 [ 1297.249332] device_add+0x87e/0x1760 [ 1297.253085] ? get_device_parent.isra.0+0x570/0x570 [ 1297.258134] ? __init_waitqueue_head+0x36/0x90 [ 1297.263612] ? pm_runtime_init+0x347/0x400 [ 1297.268138] netdev_register_kobject+0x183/0x3b0 [ 1297.272925] register_netdevice+0x875/0xff0 [ 1297.277272] ? netdev_change_features+0xb0/0xb0 [ 1297.281965] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1297.287539] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1297.292756] ? ip6gre_tunnel_init+0x340/0x340 [ 1297.297272] ? lockdep_rtnl_is_held+0x26/0x30 [ 1297.301794] ? ip6gre_tunnel_find+0x496/0x640 [ 1297.306340] ip6gre_newlink+0x298/0x7a0 [ 1297.310336] ? ip6gre_changelink+0x560/0x560 [ 1297.314946] rtnl_newlink+0x1042/0x1600 [ 1297.318954] ? rtnl_link_unregister+0x250/0x250 [ 1297.323642] ? mark_held_locks+0x100/0x100 [ 1297.327991] ? debug_smp_processor_id+0x1c/0x20 [ 1297.332689] ? is_bpf_text_address+0xac/0x170 [ 1297.337212] ? find_held_lock+0x35/0x130 [ 1297.341295] ? is_bpf_text_address+0xac/0x170 [ 1297.345813] ? __lock_acquire+0x6ee/0x49c0 [ 1297.350068] ? __lock_acquire+0x6ee/0x49c0 [ 1297.354405] ? lock_downgrade+0x880/0x880 [ 1297.358572] ? mark_held_locks+0x100/0x100 [ 1297.362808] ? debug_smp_processor_id+0x1c/0x20 [ 1297.367481] ? perf_trace_lock_acquire+0xf5/0x580 [ 1297.372350] ? mark_held_locks+0x100/0x100 [ 1297.376582] ? debug_smp_processor_id+0x1c/0x20 [ 1297.381865] ? perf_trace_lock_acquire+0xf5/0x580 [ 1297.386764] ? find_held_lock+0x35/0x130 [ 1297.390827] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1297.395258] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1297.400944] ? rtnl_link_unregister+0x250/0x250 [ 1297.405643] rtnetlink_rcv_msg+0x463/0xb00 [ 1297.409886] ? rtnetlink_put_metrics+0x560/0x560 [ 1297.414853] ? netdev_pick_tx+0x300/0x300 [ 1297.419004] ? netlink_deliver_tap+0x22d/0xc20 [ 1297.423610] ? find_held_lock+0x35/0x130 [ 1297.427679] netlink_rcv_skb+0x17d/0x460 [ 1297.431743] ? rtnetlink_put_metrics+0x560/0x560 [ 1297.436495] ? netlink_ack+0xb30/0xb30 [ 1297.440379] ? kasan_check_read+0x11/0x20 [ 1297.444527] ? netlink_deliver_tap+0x254/0xc20 [ 1297.449460] rtnetlink_rcv+0x1d/0x30 [ 1297.453171] netlink_unicast+0x53a/0x730 [ 1297.457233] ? netlink_attachskb+0x770/0x770 [ 1297.461643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1297.467180] netlink_sendmsg+0x8ae/0xd70 [ 1297.471249] ? netlink_unicast+0x730/0x730 [ 1297.475483] ? selinux_socket_sendmsg+0x36/0x40 [ 1297.480143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1297.485759] ? security_socket_sendmsg+0x8d/0xc0 [ 1297.490512] ? netlink_unicast+0x730/0x730 [ 1297.494756] sock_sendmsg+0xd7/0x130 [ 1297.498466] ___sys_sendmsg+0x803/0x920 [ 1297.502443] ? copy_msghdr_from_user+0x430/0x430 [ 1297.507204] ? lock_downgrade+0x880/0x880 [ 1297.511436] ? kasan_check_read+0x11/0x20 [ 1297.515587] ? __fget+0x367/0x540 [ 1297.519046] ? iterate_fd+0x360/0x360 [ 1297.522861] ? __fget_light+0x1a9/0x230 [ 1297.526850] ? __fdget+0x1b/0x20 [ 1297.530231] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1297.535773] __sys_sendmsg+0x105/0x1d0 [ 1297.539677] ? __ia32_sys_shutdown+0x80/0x80 [ 1297.544099] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1297.548854] ? do_syscall_64+0x26/0x620 [ 1297.552845] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1297.558225] ? do_syscall_64+0x26/0x620 [ 1297.562204] __x64_sys_sendmsg+0x78/0xb0 [ 1297.566287] do_syscall_64+0xfd/0x620 [ 1297.570093] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1297.575302] RIP: 0033:0x45af49 [ 1297.579622] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:53:33 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1297.598531] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1297.606352] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1297.613622] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1297.620992] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1297.628393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1297.635691] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:33 executing program 5: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000200)={{0x2, 0x0, 0x80, {0x5000, 0x10000, 0x3}}, "2d56872bb56f43572a7af8455e726e43a7117cee493ae86a4903bb2816b2c91e74637c45e08b96a48b02d8a6ba488994b7649f8344c83cd24fda1faab858b7dca3241ddd540bb3b4c330607ca30fa95750ac985150152de0d76eb52d4e6c1b3c0e28b44bcdaad53185419a6dbe311e0cae54a0f722d14dfc38258af39007a85786e38f6eacfcee28c9384e014dd40a30dcbc6b206c62b701b406354f0c37e342e39b50ad768441e4e8115e1f59edb668782e9b7b050a04ca72d3c6797428aa89b594f822a12792977e0844c016baa7a48a2b0bb4272fc3bf6823d810a6b9d22abd758ca96d63070089c4fd21932f3e72b7e24e89c391069d34b4d5f8b34b836fdd467fc12c66ef6bf5cc89745e391789155d8d161959601341e7cd017e50c28ae6e2f072a3712aff2f7cb944a2bf921b6726a0f02cedc8c96b3526e5ad742e075adae62eac15dc6e10843a13845c4f1f305eba28dcfb2f924275e9440c51a38222478754f626bf7f6e8b0dfb7c6991f6a94f8a94eeafd02cd6fb97dee4e0bcc0fc294cadcec0b55306792cbb36fe0f7af69a4e03dab117c9a73f521ad35680ffd2313c9011f97655a1f29eb16f17e0ee69513659d37208c998b261fe910b0fe410f1f7bce83b8dd2bc4a2cde86879c8baa30c3b86c6a858f2402c92f736dd8e11a3b3eb27c1b6541480b7da1d2591a66963af3695de14d03fa818697a8874d03df4aac678b03cf831b49abbc8b3d1026209c32d11f10dc94b635c5c9a198d0defb32c6e3a79419e71d36a7de3b3979efa1455b490d05778a85d6c512b96863618cd3edc4ecbdee06316c00ac3b167b0ac6f3f7c12370401b1dbb143b7fc64b7c75b78a70981f53590c3abb48b77a954b939e36d18fdf9108822ab423ae4687055a25956a2084545b2eaea251266d7574259bad91750b93052e2624e513eedab29e1478a30f8d66daf907bbf62a7daed0ac6a828da53eda4ec3571fed1d8a53ee171d9c0403a9a48d0a32201f2faf17be39b1e8198d3637c6f7463dbce62fde226e399f70b45b924ec7720416037d9db49e865baa15331c19487e5a89d9b69cfd01e7e869ed9ec6361458a1df855eefc5327ac5b1718fce4157e1c320e535c6c5bb18bfd3f8b1a85a9dfbf5db83483d5b0907e7ed136a53820bf6474e970d6336652eefc9ad1405004e82f75942f8db1b43db5cb156f25a22bb0665b3f7bf86595046b5232712db35e7a62f7374975060da03cda3c9f9339441da3c39987a057b2e8310d943badec1843c6e56e34061ef2bfa16c158e94dbf91559450c55574cf4e0bca59a65279a38a6939a842630d0a11593c549f3e1fa850e24cc747cdffd01833bf79b365be48dad1529c56af81fc3ea1b28ab3d3d67a89a2110400eb7014e7855eb6da43893d40240274baf5a9d4bdbd3d7a22cc243a8e1a8dd76d847d70e6db176ca48c89be0ce72fcaa1b9a5054e3840bcdcf6675fe8765632ea954200b72937adecfe628a8c83c04aa781c170f67fd12c3e7d40cc5d662a68485b29589647ba630878ac9c8e889719a8b174f97159974cabfa17ff82d51a9fe18ffcba66ef42e8b52576756c66c3f1f007e5a7f68217d43304a7926aac6fd10c45754c93a0e77537e3e051cbe8b877731269a7c18acc1ddeba4464974a4f28bf47a1eec219be037f46ef7f2c9101d067415f3bc345ccedcae76d975f9ea4b96f8de083c29bcad574f2982ce30b2b0442dc19926e4e044e58456e41728ff500e2ddb4db22d30cd30e082f04292bf43871755f96af9416d4c26d48b863640a166294a748e836604c0788a61d414a10b7541b5429db6968bcab7eda4d162cd44d55f4a8bc23ea3c436580837292089685e202537bb1a043c5e323c45ad1ca3fa67985a430a996ef8688d0cc083f617d2ee6e610c8def1f2cf972592f51ae81271d044ae76e05ac285eb71302c5723b4a0fdd1552e352ba1b3788367cd572f86a827b6cca1bfb6561085db5f458d6088f3194aa07f547a8efae08b65ec4712365085d648cfd5b0537932e4bb93e68ea491209a62e5c91fca14f6d968aa869245f98fed9baf817869f400a51c553e8f121951c0eeba868f3e93cea887d9072045c37e475847167f2747083706f27ee1e5d84144cde0d5399564bc5bc8c15abd7cb98de545aea17aeebd263b11d2219d0d4c79709fb8a1258bff8a2731f7008e12588554eb6c5d9ae31c2169c7b51e68c82bfcd6f1e65dd675f0173bfa0c15a30c967153163b0110571d096d61057ed43ef99c225a62ede7101252ac0a5b22cc38ebb26456f6a3f55e975b20e49edc4ab3b32a7549fdae20169e7b53d118a3ad569e3540d20c586cd98db2da0ef35118792e2ae827c22090e2948ec6a8bcacb8c9d04e43a236c70ede97728c27f374df2bde01f9d0ba286dfdfe744ae43d68012e86211d55c8d50b087f3a6d4fd5114983350075959132994c9df8a7388702ae601e5ec60c815a6e057677aef952c2c098b8d6e8ef1ad1e29d06024c9b9d3dcd09a51fe33290f9943d14aaacdaf4525c8de3fbec2108f46e68b8a494d37171c5577cd95af361536bfafff2235415022c9354349ee75abb62e83b618fab3a441369ab09b1b114ba6aa983f84740233809db7e0cd1e9c6cf17e4198b5126c56988eaa18e436b42984e33179af9ca4ca532848d06078e31600cb20916366dfacab19808a8d3326ce8eb647c1fffc66321393339a089bb84ac9b32bdb17734e0bd90bff3b4cf18d05810166a655bcee71d29e6afb75e0c8128bade75bd058142dc8750fc23b06fb115eaf2e970a4763b611ca12c57764b8af476bf8003a13aa70598f2aaeccd16544889a9d27957edc5e88aa17a68fe4660fce968e502dd9a4064f8101d8f1fb7c4cb255ccfebbde0822ce25e2a3f82c8fbafc4a934ee1357618798551cd1979ca2805d62685dc1e9110183dea83dc8157af192ffc8a879fc5b3648ef129c8de6fdd9e2aaf1736882291c2aecabefd691874e4fce66dfc0089be1b4c36864517f8b40bdd50a559d24476377d464112efc0d68234ebe3fcbf0cbdbb78a0ae2f274ebcc4328d473ddeb8c6393dc94de99b98f425ddb7bb8190cdb062dcfa58cb7c4bc9404b93b2b137cb3b4fc8a5b150e3106b86922691770b6f1b4551599130d55af7786513996a1a35e8d8f3b7b716cae1ed12b896e3d41bd19e9b7bbd76c2983a4f7ce03715a11948cc07fc61d92139036e52a1e38992113997db15bf0be0b350d6fda80da712ad10f1f90d711175fd9e031c823d019cffa48845a697f47954b9e07b744e3a13ee868aa0acd56916628cf3bcdfa5b109548ebc062a23c6f494970e8f6097677a1cbbe1cce01c6fa8ba7b8df77e9ac3d0f05c0f625cf0c8f21668b1b8b647913bab55bf76e98be55855a74f9a975799f280e960dbaf4aebf05905078622340e194e1f3f76e0cbfa8c94d2f4db47f8a631e1830a0cd3ee54590ad73faece0d4c2f93d44e4e1acdb76767d94d4781d448d51d9e63c9f9d189f8151c954eb81bc62e2bd5c2439e31ca1a23fb6bb298f6770049b6e102598e34ea3d9960936a8a86d03a4df521df05c6128ad303f298bb5e88ff2511c7f727aecabe4e946fb958493680930c26461124fca8c5dc74d4f3de0f36dae97708cfac28710eecb24b29475900b5c652687c0f6931f4014c6384784dce5ee009db4ba23a7ba7159e5a073b2fd5b317561dc0b3bb5aa455951dc0c5411e230b72cec90e5b25072dd3c46d4691e9232a355500f8f571d164fc4bf528c6a1b3df34d8b6955f227dad15c11d33a883a101aec633176d48081e3782bcbb9def0173ce781a94d8fc62712f7a5f2f3e648345a8c782dbcd717fbc3c853c095ca941ef9a74a102df601be52a98372e2b1993c5d1104af479b8eb9eda3aac08853ad9813ae43c50f158d0bf9e4fd03455b90ff01edba767d08331cf4e5b161c279deab0d22c27d1426e54234f964b6c86443a74ea6da88891db29c526865adf44a59be86d8fe7520a47a03e41987e6df8352fa3ed2ebfe6770a5e21a5592efd533aaf41421fef4ea7a37170e183793591868a66dc7ba47cdb3de9f9b771d3995c696d9e2d1519b1670c21a1fd92c4d36252102c08f3e04f0be93823b010d60a36467168c0cd597a4daf625ce93a7609075d2c547c1a31ccf7ec162a8ccb722698374fa72bc29d27ac0446978edefa26d859d0ce53dad7c35f547a69efca3e301f8a73f5a2998074f226232872741667a4b268c8c91669f95876afb67c823239af148a6f751bfc4b4d7ec071b10e38c556946a407206eec8e5c45dbc0786f61215e8c30cc40d300072b7c2d08d5ba735a00bec38cb9fe39f391bababb513ef207a24a7f46ebbf7a09dae60788d324c78fb1a67df76af4a017605b352d7481f7ea7af26320d6b63aa14007af18c3fd00f27a12fc12047e5f1d98ab77419acd20224b6a8425df42a6f3b19c249b31fcb0a29ef7593e43e3a166a2ce89676f170c41a3d3b9724c8a008b01ad5ea6ee9582f1afc0cd3d14cdcc2bc41b0aeb06db2b3c7663d362fc7bc6c48aef1b4749406a1fc4b4ea5c4fc7648725059dba54f943b450b55438d2ce922e866825e2e5d00d02932a4a94aa39275f6c39b2f6467aced0958819d918fabb92bc623c57799b5dabd50162925b8236983559d07f47dc9d6a4580828c88c9bc7b558358d3666a62486992e6bd446d8fd71e2640f65b954f3eef1eb86ad7c92c2ff4500d643ec420a4a0dfa7914b9a07159793d4aa3294ad1a3d4aba2c3a2f03b5a46b54192a77c6537b7af450da4d3342d55cfb95ca24c07ad125201fd582928502dadf70a650968466f2b82b0067cbc3a54eef8c00dff0fafb5c7d313db80346e0a6b2a3ef55f690949e118b5e4bf17131e3c8b339dd6bb69ba3d4ee3b08b74663db292223993543a41cd19a1d44487aa22a8b936582d530b69e96bbaeeaddd54a3f2577e6a23069d55276e377d6be51c208a326ef46747169aab7576a41de02559107459ea70a44a25bd0da7c34ca3a531f0b080f9b05e120cf731fbc2dfdf6dd9ed1bd6fe94a22075166c03904ffb1c3fb2254774a6c5befa8ec10554cbcb23a51ae6738c20f9b647bab49d0775eb399f0b8d587625f11ec47d6f9510f4fde029eafe48dbee91761e152da9b27be5ffb802ccd888c9825dfac463424db545ebf0365d04f3e7ec03894b2d91e0e752440bd9531af985839cfe539a4eb7a71a5aaadd6c2b1c86ea2a17854e725ddd063a115d32624e6407182f7bee84298ed3278e1fc8bb139d0e5c998b6d96c9a254ff1da1cc4f043bc80ae2942b0ddc338fa17c6c6bd8f162474280fdcda9e4f5080a4d4a7958ff2e3d43c8fc5c36e7861bffe20ae91bc7237233236e7cc24366da21e5f7d0e21c9e481a876becd5543f9542a6f67544879bbca950a2cc2e620b522fc7b5825b7b39d9bd85c8a398ecc338519e8de0725844c00863a3d97497dac28ecec48f4e10792a5237d54c3448c091b16d5473271e50d34134eda327b87a88437d21ef6c12a292e98e36edba457a213e353539238ebd402b8c6698ba1b4b37385fff9c1659f7c6edff1ff89a24a3d6a744d21d4f5cf3cf9187777853ff29008397e5709565ee3abed5ba58e17289275cff52ffe9eeb3abceb7648993576dbc28e7477c7b071b4a20ae9b78b5bfe202829d14bc21486c8227366544218a886de490653c79c801120d1a5411993a2953126567796eb858278734e1b230e5fe993a3c7d4e86f2728d2c7072523d4dc7cd07e4882", "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"}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x192600) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) 12:53:33 executing program 1 (fault-call:4 fault-nth:40): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:33 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000200)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:33 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:33 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1297.847065] FAULT_INJECTION: forcing a failure. [ 1297.847065] name failslab, interval 1, probability 0, space 0, times 0 12:53:33 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0xa14acd15d245839b}, 0x14}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x74b0bcf825b2d300, &(0x7f0000003a00)={@broadcast, @dev, 0x0}, &(0x7f0000003a40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r6}, 0x3c) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000003bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a80)={0xd0, r4, 0x3be365e646c0c972, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff7f}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x46}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x80}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xd2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff3}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8040000}, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) [ 1297.936506] CPU: 0 PID: 29145 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1297.944372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.954265] Call Trace: [ 1297.956882] dump_stack+0x197/0x210 [ 1297.960547] should_fail.cold+0xa/0x1b [ 1297.964591] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1297.969724] ? lock_downgrade+0x880/0x880 [ 1297.973981] __should_failslab+0x121/0x190 [ 1297.978346] should_failslab+0x9/0x14 [ 1297.982289] kmem_cache_alloc+0x2ae/0x700 12:53:33 executing program 5: r0 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r0, 0x0, 0x0) keyctl$describe(0x11, r0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0, 0xd2, 0xf3}, &(0x7f0000000100)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613531322d6176783200000000000000000000000000000000000000000000000000e7ffffff0000000000000000000000002000000000000000009b489ae19dc72669a7065e4a43"], &(0x7f0000000200)="76b7b9223d5d568952a668bc07d224aa02a1cc0b61835f3975cd6f472372314f229687845d4d69d492ab30a17d32e2bbb88eb514e700a8dda188f40332e7e95116f296f8073fcb970dc16c8ab2eb06d00ad666bf982fb8472f9d8a0b86a65e7f63d9210c0bbf3c9fed823f8d3eef9a7a883e8bef2c26e1d3c499ff862a4db459695c9e8b26fc2cac5ae873f8b458ba13c9d13129570cbcf7968610c277780ba9c9c828baab457db3e2c0f37d30708057732098a24ed677bf6543a51b74d0c603ab6e9611786c4467e9c539fef35346787e46", &(0x7f0000000300)="d82a3c2626d39d7d8b5afbaf13322f7dc962c362526dd70bfecef252a994cb593cc2a81d9cb87ab0c61c0fe6258db7888192f2f9256c9f03d56cc46f42870adf147da850bdcadd361f0a5e8bf3c1d0a64548b6732e5dd68cd7875932adc62732fc14110248d88340438a1bb26ae165ffe3a7b41e0d6218afa43d7ede2e3faebae4fb6b20db0f50ae7ddd9aff3356249a97a779b277c55c868e8416c51dacb46829580687496dc063a0eaf1a51d613c321826fd56ba5a332e952febd77431f99933ff0133db70fb0a2738987881ab4996b0457d767efbf535dcec5a456b565f58092fa0b38ca938f9367acb26170f1cd0b6447c") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1297.986462] ? lock_downgrade+0x880/0x880 [ 1297.990641] __kernfs_new_node+0xef/0x6f0 [ 1297.994819] ? kasan_check_write+0x14/0x20 [ 1297.999081] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1298.003869] ? wait_for_completion+0x440/0x440 [ 1298.008495] ? mutex_unlock+0xd/0x10 [ 1298.012242] ? kernfs_activate+0x192/0x1f0 [ 1298.016525] kernfs_new_node+0x99/0x130 [ 1298.020534] __kernfs_create_file+0x51/0x33b [ 1298.024979] sysfs_add_file_mode_ns+0x222/0x560 [ 1298.029829] internal_create_group+0x383/0xc30 [ 1298.034450] ? remove_files.isra.0+0x190/0x190 [ 1298.039058] ? kernfs_put+0x3c2/0x5d0 [ 1298.042886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1298.048452] ? kernfs_create_link+0x1d2/0x250 [ 1298.053025] sysfs_create_groups+0x9b/0x141 [ 1298.057375] device_add+0x87e/0x1760 [ 1298.061125] ? get_device_parent.isra.0+0x570/0x570 [ 1298.066171] ? __init_waitqueue_head+0x36/0x90 [ 1298.070917] ? pm_runtime_init+0x347/0x400 [ 1298.075176] netdev_register_kobject+0x183/0x3b0 [ 1298.079958] register_netdevice+0x875/0xff0 [ 1298.084319] ? netdev_change_features+0xb0/0xb0 [ 1298.089019] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1298.094597] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1298.099902] ? ip6gre_tunnel_init+0x340/0x340 [ 1298.104514] ? lockdep_rtnl_is_held+0x26/0x30 [ 1298.109031] ? ip6gre_tunnel_find+0x496/0x640 [ 1298.114524] ip6gre_newlink+0x298/0x7a0 [ 1298.118607] ? ip6gre_changelink+0x560/0x560 [ 1298.123036] rtnl_newlink+0x1042/0x1600 [ 1298.127058] ? rtnl_link_unregister+0x250/0x250 [ 1298.131749] ? mark_held_locks+0x100/0x100 [ 1298.136101] ? debug_smp_processor_id+0x1c/0x20 [ 1298.140776] ? is_bpf_text_address+0xac/0x170 [ 1298.145324] ? find_held_lock+0x35/0x130 [ 1298.149430] ? is_bpf_text_address+0xac/0x170 [ 1298.153949] ? __lock_acquire+0x6ee/0x49c0 [ 1298.158355] ? __lock_acquire+0x6ee/0x49c0 [ 1298.162612] ? lock_downgrade+0x880/0x880 [ 1298.166798] ? mark_held_locks+0x100/0x100 [ 1298.171039] ? debug_smp_processor_id+0x1c/0x20 [ 1298.175707] ? perf_trace_lock_acquire+0xf5/0x580 [ 1298.180574] ? mark_held_locks+0x100/0x100 [ 1298.184815] ? debug_smp_processor_id+0x1c/0x20 [ 1298.189490] ? perf_trace_lock_acquire+0xf5/0x580 [ 1298.194381] ? find_held_lock+0x35/0x130 [ 1298.198439] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1298.202857] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1298.208398] ? rtnl_link_unregister+0x250/0x250 [ 1298.213091] rtnetlink_rcv_msg+0x463/0xb00 [ 1298.217351] ? rtnetlink_put_metrics+0x560/0x560 [ 1298.222136] ? netdev_pick_tx+0x300/0x300 [ 1298.226293] ? netlink_deliver_tap+0x22d/0xc20 [ 1298.230869] ? find_held_lock+0x35/0x130 [ 1298.234934] netlink_rcv_skb+0x17d/0x460 [ 1298.238993] ? rtnetlink_put_metrics+0x560/0x560 [ 1298.243765] ? netlink_ack+0xb30/0xb30 [ 1298.247649] ? kasan_check_read+0x11/0x20 [ 1298.251797] ? netlink_deliver_tap+0x254/0xc20 [ 1298.256382] rtnetlink_rcv+0x1d/0x30 [ 1298.260093] netlink_unicast+0x53a/0x730 [ 1298.264154] ? netlink_attachskb+0x770/0x770 [ 1298.268647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1298.274273] netlink_sendmsg+0x8ae/0xd70 [ 1298.278346] ? netlink_unicast+0x730/0x730 [ 1298.282590] ? selinux_socket_sendmsg+0x36/0x40 [ 1298.287339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1298.292868] ? security_socket_sendmsg+0x8d/0xc0 [ 1298.297621] ? netlink_unicast+0x730/0x730 [ 1298.301861] sock_sendmsg+0xd7/0x130 [ 1298.305574] ___sys_sendmsg+0x803/0x920 [ 1298.309571] ? copy_msghdr_from_user+0x430/0x430 [ 1298.314363] ? lock_downgrade+0x880/0x880 [ 1298.318540] ? kasan_check_read+0x11/0x20 [ 1298.322699] ? __fget+0x367/0x540 [ 1298.326227] ? iterate_fd+0x360/0x360 [ 1298.330071] ? __fget_light+0x1a9/0x230 [ 1298.334052] ? __fdget+0x1b/0x20 [ 1298.337420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1298.342970] __sys_sendmsg+0x105/0x1d0 [ 1298.346860] ? __ia32_sys_shutdown+0x80/0x80 [ 1298.351280] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1298.356031] ? do_syscall_64+0x26/0x620 [ 1298.359997] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1298.365363] ? do_syscall_64+0x26/0x620 [ 1298.369336] __x64_sys_sendmsg+0x78/0xb0 [ 1298.373392] do_syscall_64+0xfd/0x620 [ 1298.377192] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1298.382384] RIP: 0033:0x45af49 [ 1298.385584] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1298.404675] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1298.412374] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1298.419634] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1298.426896] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1298.434166] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1298.441440] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:34 executing program 1 (fault-call:4 fault-nth:41): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1298.628258] FAULT_INJECTION: forcing a failure. [ 1298.628258] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.639740] CPU: 0 PID: 29436 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1298.648520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.657888] Call Trace: [ 1298.660502] dump_stack+0x197/0x210 [ 1298.664158] should_fail.cold+0xa/0x1b [ 1298.668072] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1298.674076] ? lock_downgrade+0x880/0x880 [ 1298.678238] __should_failslab+0x121/0x190 [ 1298.682480] should_failslab+0x9/0x14 [ 1298.686293] kmem_cache_alloc+0x2ae/0x700 [ 1298.690515] ? lock_downgrade+0x880/0x880 [ 1298.694725] __kernfs_new_node+0xef/0x6f0 [ 1298.698870] ? kasan_check_write+0x14/0x20 [ 1298.703117] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1298.707880] ? wait_for_completion+0x440/0x440 [ 1298.712478] ? mutex_unlock+0xd/0x10 [ 1298.716197] ? kernfs_activate+0x192/0x1f0 [ 1298.720435] kernfs_new_node+0x99/0x130 [ 1298.724429] __kernfs_create_file+0x51/0x33b [ 1298.728846] sysfs_add_file_mode_ns+0x222/0x560 [ 1298.733539] internal_create_group+0x383/0xc30 [ 1298.738133] ? remove_files.isra.0+0x190/0x190 [ 1298.742720] ? kernfs_put+0x3c2/0x5d0 [ 1298.746530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1298.752086] ? kernfs_create_link+0x1d2/0x250 [ 1298.756592] sysfs_create_groups+0x9b/0x141 [ 1298.760917] device_add+0x87e/0x1760 [ 1298.764670] ? get_device_parent.isra.0+0x570/0x570 [ 1298.769680] ? __init_waitqueue_head+0x36/0x90 [ 1298.774261] ? pm_runtime_init+0x347/0x400 [ 1298.778500] netdev_register_kobject+0x183/0x3b0 [ 1298.783284] register_netdevice+0x875/0xff0 [ 1298.787622] ? netdev_change_features+0xb0/0xb0 [ 1298.792300] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1298.797909] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1298.803126] ? ip6gre_tunnel_init+0x340/0x340 [ 1298.807627] ? lockdep_rtnl_is_held+0x26/0x30 [ 1298.812132] ? ip6gre_tunnel_find+0x496/0x640 [ 1298.816770] ip6gre_newlink+0x298/0x7a0 [ 1298.820737] ? ip6gre_changelink+0x560/0x560 [ 1298.825139] rtnl_newlink+0x1042/0x1600 [ 1298.829115] ? rtnl_link_unregister+0x250/0x250 [ 1298.834296] ? mark_held_locks+0x100/0x100 [ 1298.838532] ? is_bpf_text_address+0xac/0x170 [ 1298.843043] ? find_held_lock+0x35/0x130 [ 1298.847126] ? is_bpf_text_address+0xac/0x170 [ 1298.851641] ? __lock_acquire+0x6ee/0x49c0 [ 1298.855892] ? __lock_acquire+0x6ee/0x49c0 [ 1298.860139] ? lock_downgrade+0x880/0x880 [ 1298.864293] ? mark_held_locks+0x100/0x100 [ 1298.868516] ? mark_held_locks+0x100/0x100 [ 1298.872766] ? __kernel_text_address+0xd/0x40 [ 1298.877311] ? mark_held_locks+0x100/0x100 [ 1298.881558] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1298.886240] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1298.891275] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1298.896321] ? find_held_lock+0x35/0x130 [ 1298.900379] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1298.904812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1298.910347] ? rtnl_link_unregister+0x250/0x250 [ 1298.915031] rtnetlink_rcv_msg+0x463/0xb00 [ 1298.919343] ? rtnetlink_put_metrics+0x560/0x560 [ 1298.924115] ? netdev_pick_tx+0x300/0x300 [ 1298.928278] ? netlink_deliver_tap+0x22d/0xc20 [ 1298.932871] ? find_held_lock+0x35/0x130 [ 1298.936952] netlink_rcv_skb+0x17d/0x460 [ 1298.941024] ? rtnetlink_put_metrics+0x560/0x560 [ 1298.945802] ? netlink_ack+0xb30/0xb30 [ 1298.949693] ? kasan_check_read+0x11/0x20 [ 1298.953846] ? netlink_deliver_tap+0x254/0xc20 [ 1298.958434] rtnetlink_rcv+0x1d/0x30 [ 1298.962156] netlink_unicast+0x53a/0x730 [ 1298.966315] ? netlink_attachskb+0x770/0x770 [ 1298.970717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1298.976255] netlink_sendmsg+0x8ae/0xd70 [ 1298.980353] ? netlink_unicast+0x730/0x730 [ 1298.984601] ? selinux_socket_sendmsg+0x36/0x40 [ 1298.989274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1298.994831] ? security_socket_sendmsg+0x8d/0xc0 [ 1298.999594] ? netlink_unicast+0x730/0x730 [ 1299.003838] sock_sendmsg+0xd7/0x130 [ 1299.007576] ___sys_sendmsg+0x803/0x920 [ 1299.011576] ? copy_msghdr_from_user+0x430/0x430 [ 1299.016470] ? lock_downgrade+0x880/0x880 [ 1299.020631] ? kasan_check_read+0x11/0x20 [ 1299.025504] ? __fget+0x367/0x540 [ 1299.029024] ? iterate_fd+0x360/0x360 [ 1299.032848] ? __fget_light+0x1a9/0x230 [ 1299.036843] ? __fdget+0x1b/0x20 [ 1299.040230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.045965] __sys_sendmsg+0x105/0x1d0 [ 1299.049857] ? __ia32_sys_shutdown+0x80/0x80 [ 1299.054646] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1299.059693] ? do_syscall_64+0x26/0x620 [ 1299.063799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.069653] ? do_syscall_64+0x26/0x620 [ 1299.074491] __x64_sys_sendmsg+0x78/0xb0 [ 1299.078577] do_syscall_64+0xfd/0x620 [ 1299.082495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.087695] RIP: 0033:0x45af49 [ 1299.090899] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1299.110275] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1299.117991] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, &(0x7f0000000000)=0x2f7, 0xcb2d) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x102, 0x4, {0xfffffff9, 0x400, 0x5, 0x1}}) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="73e2736563746f723d3078303030123030303030303030303030302c00"]) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x103eb5a7f3124570) 12:53:34 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1299.125263] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1299.132724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1299.140228] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1299.147505] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:34 executing program 1 (fault-call:4 fault-nth:42): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:34 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x3f, 0xa8, 0x9, 0x10000}}) [ 1299.257687] FAULT_INJECTION: forcing a failure. [ 1299.257687] name failslab, interval 1, probability 0, space 0, times 0 12:53:34 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [], r8}, 0x3c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'veth1\x00', r8}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB="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", @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8, 0x1) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000280)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup(r9) r11 = socket$packet(0x11, 0x3, 0x300) r12 = dup(r11) setsockopt$packet_int(r12, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r13 = accept4$inet6(r12, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x1c, 0x80400) fcntl$notify(r13, 0x402, 0x10) setsockopt$packet_int(r10, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) accept$ax25(r10, &(0x7f0000000180)={{0x3, @rose}, [@default, @netrom, @null, @bcast, @null, @rose, @netrom]}, &(0x7f0000000040)=0x48) [ 1299.348938] CPU: 0 PID: 29489 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1299.356822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.366197] Call Trace: [ 1299.368823] dump_stack+0x197/0x210 [ 1299.372489] should_fail.cold+0xa/0x1b [ 1299.376410] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1299.381576] ? lock_downgrade+0x880/0x880 [ 1299.385767] __should_failslab+0x121/0x190 [ 1299.390039] should_failslab+0x9/0x14 [ 1299.393882] kmem_cache_alloc+0x2ae/0x700 [ 1299.398237] ? lock_downgrade+0x880/0x880 [ 1299.402418] __kernfs_new_node+0xef/0x6f0 [ 1299.408687] ? kasan_check_write+0x14/0x20 [ 1299.413049] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1299.417837] ? wait_for_completion+0x440/0x440 [ 1299.422447] ? mutex_unlock+0xd/0x10 [ 1299.426159] ? kernfs_activate+0x192/0x1f0 [ 1299.430833] kernfs_new_node+0x99/0x130 [ 1299.434826] __kernfs_create_file+0x51/0x33b [ 1299.439239] sysfs_add_file_mode_ns+0x222/0x560 [ 1299.443914] internal_create_group+0x383/0xc30 [ 1299.448507] ? remove_files.isra.0+0x190/0x190 [ 1299.453096] ? kernfs_put+0x3c2/0x5d0 [ 1299.456905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1299.462438] ? kernfs_create_link+0x1d2/0x250 [ 1299.466936] sysfs_create_groups+0x9b/0x141 [ 1299.471262] device_add+0x87e/0x1760 [ 1299.474982] ? get_device_parent.isra.0+0x570/0x570 [ 1299.479991] ? __init_waitqueue_head+0x36/0x90 [ 1299.484570] ? pm_runtime_init+0x347/0x400 [ 1299.488808] netdev_register_kobject+0x183/0x3b0 [ 1299.493569] register_netdevice+0x875/0xff0 [ 1299.497907] ? netdev_change_features+0xb0/0xb0 [ 1299.502570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1299.508111] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1299.513301] ? ip6gre_tunnel_init+0x340/0x340 [ 1299.517810] ? lockdep_rtnl_is_held+0x26/0x30 [ 1299.522303] ? ip6gre_tunnel_find+0x496/0x640 [ 1299.526811] ip6gre_newlink+0x298/0x7a0 [ 1299.530785] ? ip6gre_changelink+0x560/0x560 [ 1299.535203] rtnl_newlink+0x1042/0x1600 [ 1299.539186] ? rtnl_link_unregister+0x250/0x250 [ 1299.543851] ? mark_held_locks+0x100/0x100 [ 1299.548089] ? debug_smp_processor_id+0x1c/0x20 [ 1299.552769] ? is_bpf_text_address+0xac/0x170 [ 1299.557286] ? find_held_lock+0x35/0x130 [ 1299.561375] ? is_bpf_text_address+0xac/0x170 [ 1299.565890] ? __lock_acquire+0x6ee/0x49c0 [ 1299.570144] ? __lock_acquire+0x6ee/0x49c0 [ 1299.574389] ? lock_downgrade+0x880/0x880 [ 1299.578598] ? mark_held_locks+0x100/0x100 [ 1299.582943] ? debug_smp_processor_id+0x1c/0x20 [ 1299.587628] ? perf_trace_lock_acquire+0xf5/0x580 [ 1299.592512] ? mark_held_locks+0x100/0x100 [ 1299.596764] ? debug_smp_processor_id+0x1c/0x20 [ 1299.601434] ? perf_trace_lock_acquire+0xf5/0x580 [ 1299.606319] ? find_held_lock+0x35/0x130 [ 1299.610376] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1299.614806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.620347] ? rtnl_link_unregister+0x250/0x250 [ 1299.625022] rtnetlink_rcv_msg+0x463/0xb00 [ 1299.629344] ? rtnetlink_put_metrics+0x560/0x560 [ 1299.634096] ? netdev_pick_tx+0x300/0x300 [ 1299.638241] ? netlink_deliver_tap+0x22d/0xc20 [ 1299.642817] ? find_held_lock+0x35/0x130 [ 1299.646877] netlink_rcv_skb+0x17d/0x460 [ 1299.651282] ? rtnetlink_put_metrics+0x560/0x560 [ 1299.656079] ? netlink_ack+0xb30/0xb30 [ 1299.659988] ? kasan_check_read+0x11/0x20 [ 1299.664143] ? netlink_deliver_tap+0x254/0xc20 [ 1299.668819] rtnetlink_rcv+0x1d/0x30 [ 1299.672530] netlink_unicast+0x53a/0x730 [ 1299.676593] ? netlink_attachskb+0x770/0x770 [ 1299.680999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1299.686547] netlink_sendmsg+0x8ae/0xd70 [ 1299.690622] ? netlink_unicast+0x730/0x730 [ 1299.694887] ? selinux_socket_sendmsg+0x36/0x40 [ 1299.699567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1299.705098] ? security_socket_sendmsg+0x8d/0xc0 [ 1299.709859] ? netlink_unicast+0x730/0x730 [ 1299.714613] sock_sendmsg+0xd7/0x130 [ 1299.718326] ___sys_sendmsg+0x803/0x920 [ 1299.722309] ? copy_msghdr_from_user+0x430/0x430 [ 1299.727066] ? lock_downgrade+0x880/0x880 [ 1299.731213] ? kasan_check_read+0x11/0x20 [ 1299.735361] ? __fget+0x367/0x540 [ 1299.738811] ? iterate_fd+0x360/0x360 [ 1299.742614] ? __fget_light+0x1a9/0x230 [ 1299.746582] ? __fdget+0x1b/0x20 [ 1299.749946] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.755482] __sys_sendmsg+0x105/0x1d0 [ 1299.759366] ? __ia32_sys_shutdown+0x80/0x80 [ 1299.763781] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1299.768532] ? do_syscall_64+0x26/0x620 [ 1299.772498] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.778809] ? do_syscall_64+0x26/0x620 [ 1299.782782] __x64_sys_sendmsg+0x78/0xb0 [ 1299.786852] do_syscall_64+0xfd/0x620 [ 1299.790653] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.795929] RIP: 0033:0x45af49 [ 1299.799119] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1299.818150] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1299.825869] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1299.833150] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1299.840412] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0x8, 0xffffffffffffffff, 0x2) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1299.847675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1299.854937] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:35 executing program 1 (fault-call:4 fault-nth:43): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) 12:53:35 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:35 executing program 2: r0 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r0, 0x0, 0x0) keyctl$describe(0x11, r0, 0x0, 0x0) r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/audio#\x00', r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000100)='ppp1\x00', &(0x7f0000000140)) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1300.135784] FAULT_INJECTION: forcing a failure. [ 1300.135784] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.188956] CPU: 0 PID: 29713 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1300.196920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.206296] Call Trace: [ 1300.208916] dump_stack+0x197/0x210 [ 1300.212577] should_fail.cold+0xa/0x1b [ 1300.216507] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1300.221639] ? lock_downgrade+0x880/0x880 [ 1300.225801] __should_failslab+0x121/0x190 [ 1300.230035] should_failslab+0x9/0x14 [ 1300.233839] kmem_cache_alloc+0x2ae/0x700 [ 1300.237994] ? lock_downgrade+0x880/0x880 [ 1300.242155] __kernfs_new_node+0xef/0x6f0 [ 1300.246301] ? kasan_check_write+0x14/0x20 [ 1300.250535] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1300.255299] ? wait_for_completion+0x440/0x440 [ 1300.259902] ? mutex_unlock+0xd/0x10 [ 1300.263611] ? kernfs_activate+0x192/0x1f0 [ 1300.267847] kernfs_new_node+0x99/0x130 [ 1300.272704] __kernfs_create_file+0x51/0x33b [ 1300.277129] sysfs_add_file_mode_ns+0x222/0x560 [ 1300.281806] internal_create_group+0x383/0xc30 [ 1300.286393] ? remove_files.isra.0+0x190/0x190 [ 1300.290977] ? kernfs_put+0x3c2/0x5d0 [ 1300.294790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.300340] ? kernfs_create_link+0x1d2/0x250 [ 1300.304841] sysfs_create_groups+0x9b/0x141 [ 1300.309164] device_add+0x87e/0x1760 [ 1300.312882] ? get_device_parent.isra.0+0x570/0x570 [ 1300.317892] ? __init_waitqueue_head+0x36/0x90 [ 1300.322470] ? pm_runtime_init+0x347/0x400 [ 1300.326709] netdev_register_kobject+0x183/0x3b0 [ 1300.331522] register_netdevice+0x875/0xff0 [ 1300.335865] ? netdev_change_features+0xb0/0xb0 [ 1300.340540] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1300.346083] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1300.351269] ? ip6gre_tunnel_init+0x340/0x340 [ 1300.355777] ? lockdep_rtnl_is_held+0x26/0x30 [ 1300.360285] ? ip6gre_tunnel_find+0x496/0x640 [ 1300.364811] ip6gre_newlink+0x298/0x7a0 [ 1300.368825] ? ip6gre_changelink+0x560/0x560 [ 1300.373253] rtnl_newlink+0x1042/0x1600 [ 1300.377267] ? rtnl_link_unregister+0x250/0x250 [ 1300.381941] ? mark_held_locks+0x100/0x100 [ 1300.386274] ? is_bpf_text_address+0xac/0x170 [ 1300.390786] ? find_held_lock+0x35/0x130 [ 1300.394944] ? is_bpf_text_address+0xac/0x170 [ 1300.399440] ? __lock_acquire+0x6ee/0x49c0 [ 1300.403679] ? __lock_acquire+0x6ee/0x49c0 [ 1300.407919] ? lock_downgrade+0x880/0x880 [ 1300.412090] ? mark_held_locks+0x100/0x100 [ 1300.416320] ? mark_held_locks+0x100/0x100 [ 1300.420565] ? __kernel_text_address+0xd/0x40 [ 1300.425110] ? mark_held_locks+0x100/0x100 [ 1300.429363] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1300.434129] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1300.439141] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1300.444197] ? find_held_lock+0x35/0x130 [ 1300.448258] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1300.453542] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1300.459079] ? rtnl_link_unregister+0x250/0x250 [ 1300.463772] rtnetlink_rcv_msg+0x463/0xb00 [ 1300.468023] ? rtnetlink_put_metrics+0x560/0x560 [ 1300.472806] ? netdev_pick_tx+0x300/0x300 [ 1300.476991] ? netlink_deliver_tap+0x22d/0xc20 [ 1300.481575] ? find_held_lock+0x35/0x130 [ 1300.485659] netlink_rcv_skb+0x17d/0x460 [ 1300.489728] ? rtnetlink_put_metrics+0x560/0x560 [ 1300.494488] ? netlink_ack+0xb30/0xb30 [ 1300.498388] ? kasan_check_read+0x11/0x20 [ 1300.502555] ? netlink_deliver_tap+0x254/0xc20 [ 1300.507154] rtnetlink_rcv+0x1d/0x30 [ 1300.510870] netlink_unicast+0x53a/0x730 [ 1300.514931] ? netlink_attachskb+0x770/0x770 [ 1300.519346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.524881] netlink_sendmsg+0x8ae/0xd70 [ 1300.529032] ? netlink_unicast+0x730/0x730 [ 1300.533365] ? selinux_socket_sendmsg+0x36/0x40 [ 1300.538025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.543572] ? security_socket_sendmsg+0x8d/0xc0 [ 1300.548324] ? netlink_unicast+0x730/0x730 [ 1300.552571] sock_sendmsg+0xd7/0x130 [ 1300.556283] ___sys_sendmsg+0x803/0x920 [ 1300.560253] ? copy_msghdr_from_user+0x430/0x430 [ 1300.565012] ? lock_downgrade+0x880/0x880 [ 1300.569163] ? kasan_check_read+0x11/0x20 [ 1300.577391] ? __fget+0x367/0x540 [ 1300.580892] ? iterate_fd+0x360/0x360 [ 1300.584695] ? __fget_light+0x1a9/0x230 [ 1300.588665] ? __fdget+0x1b/0x20 [ 1300.592023] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1300.597569] __sys_sendmsg+0x105/0x1d0 [ 1300.601452] ? __ia32_sys_shutdown+0x80/0x80 [ 1300.605876] __x64_sys_sendmsg+0x78/0xb0 [ 1300.609935] do_syscall_64+0xfd/0x620 [ 1300.613746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1300.618951] RIP: 0033:0x45af49 [ 1300.622148] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:53:36 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000400)={0x2, 0x1}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x11240) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYRES32=r8, @ANYRES64=0x0, @ANYBLOB, @ANYBLOB="2517af584e4f69b609fdfea3b3d5ec30f7f42c076a688f1541f35739f7f532623f36f57665659a272367223566e33abb3955a85c2e1ec508186345bada726d972be674697377", @ANYRES32=r3, @ANYRESDEC=r9], 0x8, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040), &(0x7f0000000100)) [ 1300.641052] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1300.648772] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1300.656052] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1300.663337] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1300.670606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1300.677879] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:36 executing program 1 (fault-call:4 fault-nth:44): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:36 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x3a, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 'veth0_vlan\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r4 = dup2(r3, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001580)={0x14, r6, 0x11, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x204, r6, 0x321, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff3e6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x541e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7b1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb96}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20004044}, 0x20000800) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:36 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1300.909145] FAULT_INJECTION: forcing a failure. [ 1300.909145] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.927302] CPU: 1 PID: 29933 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1300.935142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.944506] Call Trace: [ 1300.947125] dump_stack+0x197/0x210 [ 1300.950831] should_fail.cold+0xa/0x1b [ 1300.954731] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1300.959842] ? lock_downgrade+0x880/0x880 [ 1300.964032] __should_failslab+0x121/0x190 [ 1300.968290] should_failslab+0x9/0x14 [ 1300.972115] kmem_cache_alloc+0x2ae/0x700 [ 1300.976298] ? lock_downgrade+0x880/0x880 [ 1300.980774] __kernfs_new_node+0xef/0x6f0 [ 1300.984949] ? kasan_check_write+0x14/0x20 [ 1300.989215] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1300.993998] ? wait_for_completion+0x440/0x440 [ 1300.998600] ? mutex_unlock+0xd/0x10 [ 1301.002427] ? kernfs_activate+0x192/0x1f0 [ 1301.006785] kernfs_new_node+0x99/0x130 [ 1301.010770] __kernfs_create_file+0x51/0x33b [ 1301.015189] sysfs_add_file_mode_ns+0x222/0x560 [ 1301.019864] internal_create_group+0x383/0xc30 [ 1301.024542] ? remove_files.isra.0+0x190/0x190 [ 1301.029121] ? kernfs_put+0x3c2/0x5d0 [ 1301.032932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.038477] ? kernfs_create_link+0x1d2/0x250 [ 1301.042988] sysfs_create_groups+0x9b/0x141 [ 1301.047304] device_add+0x87e/0x1760 [ 1301.051040] ? get_device_parent.isra.0+0x570/0x570 [ 1301.056409] ? __init_waitqueue_head+0x36/0x90 [ 1301.061174] ? pm_runtime_init+0x347/0x400 [ 1301.065440] netdev_register_kobject+0x183/0x3b0 [ 1301.070396] register_netdevice+0x875/0xff0 [ 1301.074745] ? netdev_change_features+0xb0/0xb0 [ 1301.079434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1301.084995] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1301.090196] ? ip6gre_tunnel_init+0x340/0x340 [ 1301.094691] ? lockdep_rtnl_is_held+0x26/0x30 [ 1301.099288] ? ip6gre_tunnel_find+0x496/0x640 [ 1301.103796] ip6gre_newlink+0x298/0x7a0 [ 1301.107782] ? ip6gre_changelink+0x560/0x560 [ 1301.112193] rtnl_newlink+0x1042/0x1600 [ 1301.116174] ? rtnl_link_unregister+0x250/0x250 [ 1301.120853] ? mark_held_locks+0x100/0x100 [ 1301.125114] ? debug_smp_processor_id+0x1c/0x20 [ 1301.129816] ? is_bpf_text_address+0xac/0x170 [ 1301.134331] ? find_held_lock+0x35/0x130 [ 1301.138414] ? is_bpf_text_address+0xac/0x170 [ 1301.142906] ? __lock_acquire+0x6ee/0x49c0 [ 1301.147141] ? __lock_acquire+0x6ee/0x49c0 [ 1301.151383] ? lock_downgrade+0x880/0x880 [ 1301.155634] ? mark_held_locks+0x100/0x100 [ 1301.159879] ? debug_smp_processor_id+0x1c/0x20 [ 1301.164559] ? perf_trace_lock_acquire+0xf5/0x580 [ 1301.169435] ? mark_held_locks+0x100/0x100 [ 1301.173689] ? debug_smp_processor_id+0x1c/0x20 [ 1301.178661] ? perf_trace_lock_acquire+0xf5/0x580 [ 1301.183529] ? find_held_lock+0x35/0x130 [ 1301.187742] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1301.192156] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.197712] ? rtnl_link_unregister+0x250/0x250 [ 1301.202394] rtnetlink_rcv_msg+0x463/0xb00 [ 1301.206639] ? rtnetlink_put_metrics+0x560/0x560 [ 1301.211405] ? netdev_pick_tx+0x300/0x300 [ 1301.215633] ? netlink_deliver_tap+0x22d/0xc20 [ 1301.220240] ? find_held_lock+0x35/0x130 [ 1301.224313] netlink_rcv_skb+0x17d/0x460 [ 1301.228372] ? rtnetlink_put_metrics+0x560/0x560 [ 1301.233122] ? netlink_ack+0xb30/0xb30 [ 1301.237013] ? kasan_check_read+0x11/0x20 [ 1301.241178] ? netlink_deliver_tap+0x254/0xc20 [ 1301.245775] rtnetlink_rcv+0x1d/0x30 [ 1301.249496] netlink_unicast+0x53a/0x730 [ 1301.253569] ? netlink_attachskb+0x770/0x770 [ 1301.258001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.263561] netlink_sendmsg+0x8ae/0xd70 [ 1301.267691] ? netlink_unicast+0x730/0x730 [ 1301.272119] ? selinux_socket_sendmsg+0x36/0x40 [ 1301.276783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.283920] ? security_socket_sendmsg+0x8d/0xc0 [ 1301.288690] ? netlink_unicast+0x730/0x730 [ 1301.292940] sock_sendmsg+0xd7/0x130 [ 1301.296661] ___sys_sendmsg+0x803/0x920 [ 1301.300672] ? copy_msghdr_from_user+0x430/0x430 [ 1301.305437] ? lock_downgrade+0x880/0x880 [ 1301.309595] ? kasan_check_read+0x11/0x20 [ 1301.313737] ? __fget+0x367/0x540 [ 1301.317202] ? iterate_fd+0x360/0x360 [ 1301.321002] ? __fget_light+0x1a9/0x230 [ 1301.324968] ? __fdget+0x1b/0x20 [ 1301.328332] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.333887] __sys_sendmsg+0x105/0x1d0 [ 1301.337778] ? __ia32_sys_shutdown+0x80/0x80 [ 1301.342187] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1301.346935] ? do_syscall_64+0x26/0x620 [ 1301.350904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1301.356267] ? do_syscall_64+0x26/0x620 [ 1301.360302] __x64_sys_sendmsg+0x78/0xb0 [ 1301.364358] do_syscall_64+0xfd/0x620 [ 1301.368175] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1301.374059] RIP: 0033:0x45af49 [ 1301.377279] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1301.396277] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:53:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6e0e78777aa9c7, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x735}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:36 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1301.404001] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1301.411980] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1301.419603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1301.426882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1301.434772] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1301.443510] net_ratelimit: 26 callbacks suppressed [ 1301.443518] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.453608] protocol 88fb is buggy, dev hsr_slave_1 12:53:37 executing program 1 (fault-call:4 fault-nth:45): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:37 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40400, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:37 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000002c0)={0x990000, 0x1bb, 0x7ff, r0, 0x0, &(0x7f0000000280)={0x9b0942, 0x5, [], @p_u16=&(0x7f0000000240)=0x5}}) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r0, r5, 0x0, 0x102000004) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, 0x0, 0x1, 0x108, 0x70bd2d, 0x25dfdbfd, {0x8, 0x0, 0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1}, @CTA_ZONE={0x6}, @CTA_STATUS={0x8, 0x3, 0x2000}, @CTA_ZONE={0x6, 0x12, 0x3}, @CTA_TUPLE_MASTER={0x3c, 0xe, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_STATUS={0x8, 0x3, 0x4}, @CTA_HELP={0x14, 0x5, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_REPLY={0x30, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) accept4(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0xc0000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) close(r10) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1301.645430] FAULT_INJECTION: forcing a failure. [ 1301.645430] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.661920] CPU: 0 PID: 29954 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1301.669925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.679301] Call Trace: [ 1301.681951] dump_stack+0x197/0x210 [ 1301.685700] should_fail.cold+0xa/0x1b [ 1301.689602] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1301.694785] ? lock_downgrade+0x880/0x880 [ 1301.700265] __should_failslab+0x121/0x190 [ 1301.704946] should_failslab+0x9/0x14 [ 1301.708918] kmem_cache_alloc+0x2ae/0x700 [ 1301.713094] ? lock_downgrade+0x880/0x880 [ 1301.717260] __kernfs_new_node+0xef/0x6f0 [ 1301.721419] ? kasan_check_write+0x14/0x20 [ 1301.725674] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1301.730439] ? wait_for_completion+0x440/0x440 [ 1301.735027] ? mutex_unlock+0xd/0x10 [ 1301.738749] ? kernfs_activate+0x192/0x1f0 [ 1301.744628] kernfs_new_node+0x99/0x130 [ 1301.753985] __kernfs_create_file+0x51/0x33b [ 1301.758487] sysfs_add_file_mode_ns+0x222/0x560 [ 1301.763195] internal_create_group+0x383/0xc30 [ 1301.767800] ? remove_files.isra.0+0x190/0x190 [ 1301.772478] ? kernfs_put+0x3c2/0x5d0 [ 1301.776304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.781871] ? kernfs_create_link+0x1d2/0x250 [ 1301.787876] sysfs_create_groups+0x9b/0x141 [ 1301.792229] device_add+0x87e/0x1760 [ 1301.796148] ? get_device_parent.isra.0+0x570/0x570 [ 1301.801181] ? __init_waitqueue_head+0x36/0x90 [ 1301.805862] ? pm_runtime_init+0x347/0x400 [ 1301.810094] netdev_register_kobject+0x183/0x3b0 [ 1301.814873] register_netdevice+0x875/0xff0 [ 1301.819206] ? netdev_change_features+0xb0/0xb0 [ 1301.823959] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1301.829582] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1301.834785] ? ip6gre_tunnel_init+0x340/0x340 [ 1301.839288] ? lockdep_rtnl_is_held+0x26/0x30 [ 1301.843796] ? ip6gre_tunnel_find+0x496/0x640 [ 1301.848318] ip6gre_newlink+0x298/0x7a0 [ 1301.852299] ? ip6gre_changelink+0x560/0x560 [ 1301.857154] rtnl_newlink+0x1042/0x1600 [ 1301.861366] ? rtnl_link_unregister+0x250/0x250 [ 1301.867731] ? mark_held_locks+0x100/0x100 [ 1301.872094] ? is_bpf_text_address+0xac/0x170 [ 1301.876704] ? find_held_lock+0x35/0x130 [ 1301.880844] ? is_bpf_text_address+0xac/0x170 [ 1301.885339] ? __lock_acquire+0x6ee/0x49c0 [ 1301.889567] ? __lock_acquire+0x6ee/0x49c0 [ 1301.893901] ? lock_downgrade+0x880/0x880 [ 1301.898819] ? mark_held_locks+0x100/0x100 [ 1301.904176] ? mark_held_locks+0x100/0x100 [ 1301.909352] ? __kernel_text_address+0xd/0x40 [ 1301.913968] ? mark_held_locks+0x100/0x100 [ 1301.918225] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1301.922907] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1301.927939] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1301.931349] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.933011] ? find_held_lock+0x35/0x130 [ 1301.938043] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.942070] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1301.942099] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.942114] ? rtnl_link_unregister+0x250/0x250 [ 1301.942133] rtnetlink_rcv_msg+0x463/0xb00 [ 1301.947220] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.951552] ? rtnetlink_put_metrics+0x560/0x560 [ 1301.951568] ? netdev_pick_tx+0x300/0x300 [ 1301.951590] ? netlink_deliver_tap+0x22d/0xc20 [ 1301.957131] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.961763] ? find_held_lock+0x35/0x130 [ 1301.961789] netlink_rcv_skb+0x17d/0x460 [ 1301.966079] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.971013] ? rtnetlink_put_metrics+0x560/0x560 [ 1301.971038] ? netlink_ack+0xb30/0xb30 [ 1301.975827] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.979937] ? kasan_check_read+0x11/0x20 [ 1301.984612] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.989554] ? netlink_deliver_tap+0x254/0xc20 [ 1301.993644] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.998090] rtnetlink_rcv+0x1d/0x30 [ 1302.042654] netlink_unicast+0x53a/0x730 [ 1302.046733] ? netlink_attachskb+0x770/0x770 [ 1302.051133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.056663] netlink_sendmsg+0x8ae/0xd70 [ 1302.060719] ? netlink_unicast+0x730/0x730 [ 1302.065053] ? selinux_socket_sendmsg+0x36/0x40 [ 1302.069725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.075254] ? security_socket_sendmsg+0x8d/0xc0 [ 1302.080002] ? netlink_unicast+0x730/0x730 [ 1302.084241] sock_sendmsg+0xd7/0x130 [ 1302.087979] ___sys_sendmsg+0x803/0x920 [ 1302.091962] ? copy_msghdr_from_user+0x430/0x430 [ 1302.096725] ? lock_downgrade+0x880/0x880 [ 1302.100874] ? kasan_check_read+0x11/0x20 [ 1302.105039] ? __fget+0x367/0x540 [ 1302.108497] ? iterate_fd+0x360/0x360 [ 1302.112290] ? __fget_light+0x1a9/0x230 [ 1302.116254] ? __fdget+0x1b/0x20 [ 1302.119611] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.125155] __sys_sendmsg+0x105/0x1d0 [ 1302.129104] ? __ia32_sys_shutdown+0x80/0x80 [ 1302.133523] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1302.138288] ? do_syscall_64+0x26/0x620 [ 1302.142267] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.147631] ? do_syscall_64+0x26/0x620 [ 1302.151690] __x64_sys_sendmsg+0x78/0xb0 [ 1302.155746] do_syscall_64+0xfd/0x620 [ 1302.159570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.164763] RIP: 0033:0x45af49 [ 1302.167953] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1302.193970] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.201706] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1302.208994] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1302.216540] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1302.223814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1302.231126] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:37 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x8, 0x1) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x7) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r1, r5, 0x0, 0x102000004) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r7, 0x8, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x0, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="bb40ad7e02c586c1c24c3a85dd7071a58355f80300550fc4b8998c2b0421b0cab856", @ANYRES32, @ANYRES32=r9, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r8, @ANYRESDEC=r10], 0x8, 0x1) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x4e20, @local}, 'ip_vti0\x00'}) 12:53:37 executing program 1 (fault-call:4 fault-nth:46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:37 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:37 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1302.495642] FAULT_INJECTION: forcing a failure. [ 1302.495642] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.555854] CPU: 0 PID: 30072 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1302.563712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.573955] Call Trace: [ 1302.576585] dump_stack+0x197/0x210 [ 1302.580254] should_fail.cold+0xa/0x1b [ 1302.584182] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1302.589311] ? lock_downgrade+0x880/0x880 [ 1302.593517] __should_failslab+0x121/0x190 [ 1302.597781] should_failslab+0x9/0x14 [ 1302.601621] kmem_cache_alloc+0x2ae/0x700 [ 1302.605807] ? kasan_check_write+0x14/0x20 [ 1302.610506] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1302.615380] __kernfs_new_node+0xef/0x6f0 [ 1302.619581] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1302.624364] ? map_id_range_down+0x1ee/0x370 [ 1302.628807] ? __put_user_ns+0x70/0x70 [ 1302.632718] ? kernfs_activate+0x192/0x1f0 [ 1302.636985] ? make_kgid+0x23/0x30 [ 1302.640562] kernfs_new_node+0x99/0x130 [ 1302.644578] kernfs_create_dir_ns+0x52/0x160 [ 1302.649008] internal_create_group+0x1cb/0xc30 [ 1302.653593] ? remove_files.isra.0+0x190/0x190 [ 1302.658170] ? kernfs_put+0x3c2/0x5d0 [ 1302.661979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.667535] ? kernfs_create_link+0x1d2/0x250 [ 1302.672067] sysfs_create_groups+0x9b/0x141 [ 1302.676409] device_add+0x12de/0x1760 [ 1302.680233] ? get_device_parent.isra.0+0x570/0x570 [ 1302.685256] ? __init_waitqueue_head+0x36/0x90 [ 1302.689858] ? pm_runtime_init+0x347/0x400 [ 1302.694110] netdev_register_kobject+0x183/0x3b0 [ 1302.698911] register_netdevice+0x875/0xff0 [ 1302.703275] ? netdev_change_features+0xb0/0xb0 [ 1302.707969] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1302.713565] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1302.718782] ? ip6gre_tunnel_init+0x340/0x340 [ 1302.723738] ? lockdep_rtnl_is_held+0x26/0x30 [ 1302.728253] ? ip6gre_tunnel_find+0x496/0x640 [ 1302.732778] ip6gre_newlink+0x298/0x7a0 [ 1302.736876] ? ip6gre_changelink+0x560/0x560 [ 1302.741329] rtnl_newlink+0x1042/0x1600 [ 1302.745328] ? rtnl_link_unregister+0x250/0x250 [ 1302.750004] ? mark_held_locks+0x100/0x100 [ 1302.754240] ? debug_smp_processor_id+0x1c/0x20 [ 1302.758998] ? is_bpf_text_address+0xac/0x170 [ 1302.763515] ? find_held_lock+0x35/0x130 [ 1302.767590] ? is_bpf_text_address+0xac/0x170 [ 1302.772106] ? __lock_acquire+0x6ee/0x49c0 [ 1302.776451] ? __lock_acquire+0x6ee/0x49c0 [ 1302.780700] ? lock_downgrade+0x880/0x880 [ 1302.784907] ? mark_held_locks+0x100/0x100 [ 1302.789155] ? debug_smp_processor_id+0x1c/0x20 [ 1302.793848] ? perf_trace_lock_acquire+0xf5/0x580 [ 1302.798729] ? mark_held_locks+0x100/0x100 [ 1302.802985] ? debug_smp_processor_id+0x1c/0x20 [ 1302.807673] ? perf_trace_lock_acquire+0xf5/0x580 [ 1302.812591] ? find_held_lock+0x35/0x130 [ 1302.816782] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1302.821218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.826871] ? rtnl_link_unregister+0x250/0x250 [ 1302.831559] rtnetlink_rcv_msg+0x463/0xb00 [ 1302.835806] ? rtnetlink_put_metrics+0x560/0x560 [ 1302.841589] ? netdev_pick_tx+0x300/0x300 [ 1302.845817] ? netlink_deliver_tap+0x22d/0xc20 [ 1302.850439] ? find_held_lock+0x35/0x130 [ 1302.854585] netlink_rcv_skb+0x17d/0x460 [ 1302.858644] ? rtnetlink_put_metrics+0x560/0x560 [ 1302.863415] ? netlink_ack+0xb30/0xb30 [ 1302.867312] ? kasan_check_read+0x11/0x20 [ 1302.871476] ? netlink_deliver_tap+0x254/0xc20 [ 1302.876259] rtnetlink_rcv+0x1d/0x30 [ 1302.879973] netlink_unicast+0x53a/0x730 [ 1302.884051] ? netlink_attachskb+0x770/0x770 [ 1302.888484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.894038] netlink_sendmsg+0x8ae/0xd70 [ 1302.898807] ? netlink_unicast+0x730/0x730 [ 1302.903087] ? selinux_socket_sendmsg+0x36/0x40 [ 1302.907957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.913584] ? security_socket_sendmsg+0x8d/0xc0 [ 1302.918369] ? netlink_unicast+0x730/0x730 [ 1302.922619] sock_sendmsg+0xd7/0x130 [ 1302.926339] ___sys_sendmsg+0x803/0x920 [ 1302.930323] ? copy_msghdr_from_user+0x430/0x430 [ 1302.935092] ? lock_downgrade+0x880/0x880 [ 1302.939260] ? kasan_check_read+0x11/0x20 [ 1302.943417] ? __fget+0x367/0x540 [ 1302.946888] ? iterate_fd+0x360/0x360 [ 1302.950684] ? __fget_light+0x1a9/0x230 [ 1302.954664] ? __fdget+0x1b/0x20 [ 1302.958025] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.963574] __sys_sendmsg+0x105/0x1d0 [ 1302.967477] ? __ia32_sys_shutdown+0x80/0x80 [ 1302.971908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1302.976756] ? do_syscall_64+0x26/0x620 [ 1302.980721] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.986077] ? do_syscall_64+0x26/0x620 [ 1302.990065] __x64_sys_sendmsg+0x78/0xb0 [ 1302.994146] do_syscall_64+0xfd/0x620 [ 1302.997964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.003332] RIP: 0033:0x45af49 [ 1303.006552] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1303.025472] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1303.033546] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1303.040817] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1303.048241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:53:38 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1303.055522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1303.062795] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:38 executing program 1 (fault-call:4 fault-nth:47): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:38 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x101080, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xd7, 0xc0ca, 0x48, 0x1, 0x5}, &(0x7f0000000180)=0x14) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1303.189658] FAULT_INJECTION: forcing a failure. [ 1303.189658] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.246611] CPU: 0 PID: 30191 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1303.254470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.263845] Call Trace: [ 1303.266473] dump_stack+0x197/0x210 [ 1303.270137] should_fail.cold+0xa/0x1b [ 1303.274056] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1303.279202] ? lock_downgrade+0x880/0x880 [ 1303.283407] __should_failslab+0x121/0x190 [ 1303.287689] should_failslab+0x9/0x14 [ 1303.291504] kmem_cache_alloc+0x2ae/0x700 [ 1303.295671] ? kasan_check_write+0x14/0x20 [ 1303.299901] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1303.304755] __kernfs_new_node+0xef/0x6f0 [ 1303.308934] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1303.313699] ? map_id_range_down+0x1ee/0x370 [ 1303.318139] ? __put_user_ns+0x70/0x70 [ 1303.322045] ? kernfs_activate+0x192/0x1f0 [ 1303.326278] ? make_kgid+0x23/0x30 [ 1303.329815] kernfs_new_node+0x99/0x130 [ 1303.333797] kernfs_create_dir_ns+0x52/0x160 [ 1303.338203] internal_create_group+0x1cb/0xc30 [ 1303.342804] ? remove_files.isra.0+0x190/0x190 [ 1303.347374] ? kernfs_put+0x3c2/0x5d0 [ 1303.351204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1303.356875] ? kernfs_create_link+0x1d2/0x250 [ 1303.361401] sysfs_create_groups+0x9b/0x141 [ 1303.365752] device_add+0x12de/0x1760 [ 1303.369571] ? get_device_parent.isra.0+0x570/0x570 [ 1303.374588] ? __init_waitqueue_head+0x36/0x90 [ 1303.379170] ? pm_runtime_init+0x347/0x400 [ 1303.383414] netdev_register_kobject+0x183/0x3b0 [ 1303.388166] register_netdevice+0x875/0xff0 [ 1303.392496] ? netdev_change_features+0xb0/0xb0 [ 1303.397156] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1303.402714] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1303.407899] ? ip6gre_tunnel_init+0x340/0x340 [ 1303.412387] ? lockdep_rtnl_is_held+0x26/0x30 [ 1303.416895] ? ip6gre_tunnel_find+0x496/0x640 [ 1303.422207] ip6gre_newlink+0x298/0x7a0 [ 1303.426202] ? ip6gre_changelink+0x560/0x560 [ 1303.430627] rtnl_newlink+0x1042/0x1600 [ 1303.434637] ? rtnl_link_unregister+0x250/0x250 [ 1303.439829] ? mark_held_locks+0x100/0x100 [ 1303.444157] ? debug_smp_processor_id+0x1c/0x20 [ 1303.448827] ? is_bpf_text_address+0xac/0x170 [ 1303.453529] ? find_held_lock+0x35/0x130 [ 1303.458366] ? is_bpf_text_address+0xac/0x170 [ 1303.462856] ? __lock_acquire+0x6ee/0x49c0 [ 1303.467084] ? __lock_acquire+0x6ee/0x49c0 [ 1303.471333] ? lock_downgrade+0x880/0x880 [ 1303.475487] ? mark_held_locks+0x100/0x100 [ 1303.479724] ? debug_smp_processor_id+0x1c/0x20 [ 1303.484387] ? perf_trace_lock_acquire+0xf5/0x580 [ 1303.489433] ? mark_held_locks+0x100/0x100 [ 1303.493680] ? debug_smp_processor_id+0x1c/0x20 [ 1303.498341] ? perf_trace_lock_acquire+0xf5/0x580 [ 1303.503238] ? find_held_lock+0x35/0x130 [ 1303.507306] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1303.511720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.517260] ? rtnl_link_unregister+0x250/0x250 [ 1303.521957] rtnetlink_rcv_msg+0x463/0xb00 [ 1303.526207] ? rtnetlink_put_metrics+0x560/0x560 [ 1303.530965] ? netdev_pick_tx+0x300/0x300 [ 1303.535119] ? netlink_deliver_tap+0x22d/0xc20 [ 1303.539713] ? find_held_lock+0x35/0x130 [ 1303.543782] netlink_rcv_skb+0x17d/0x460 [ 1303.548025] ? rtnetlink_put_metrics+0x560/0x560 [ 1303.553514] ? netlink_ack+0xb30/0xb30 [ 1303.557735] ? kasan_check_read+0x11/0x20 [ 1303.562315] ? netlink_deliver_tap+0x254/0xc20 [ 1303.566899] rtnetlink_rcv+0x1d/0x30 [ 1303.570707] netlink_unicast+0x53a/0x730 [ 1303.575660] ? netlink_attachskb+0x770/0x770 [ 1303.580064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1303.586141] netlink_sendmsg+0x8ae/0xd70 [ 1303.591181] ? netlink_unicast+0x730/0x730 [ 1303.595687] ? selinux_socket_sendmsg+0x36/0x40 [ 1303.603211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1303.610924] ? security_socket_sendmsg+0x8d/0xc0 [ 1303.616518] ? netlink_unicast+0x730/0x730 [ 1303.621890] sock_sendmsg+0xd7/0x130 [ 1303.625633] ___sys_sendmsg+0x803/0x920 [ 1303.631283] ? copy_msghdr_from_user+0x430/0x430 [ 1303.637538] ? lock_downgrade+0x880/0x880 [ 1303.643973] ? kasan_check_read+0x11/0x20 [ 1303.649701] ? __fget+0x367/0x540 [ 1303.653725] ? iterate_fd+0x360/0x360 [ 1303.659030] ? __fget_light+0x1a9/0x230 [ 1303.663332] ? __fdget+0x1b/0x20 [ 1303.667151] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.672685] __sys_sendmsg+0x105/0x1d0 [ 1303.676567] ? __ia32_sys_shutdown+0x80/0x80 [ 1303.680993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1303.685742] ? do_syscall_64+0x26/0x620 [ 1303.689708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.695075] ? do_syscall_64+0x26/0x620 [ 1303.699044] __x64_sys_sendmsg+0x78/0xb0 [ 1303.703133] do_syscall_64+0xfd/0x620 [ 1303.706957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.712211] RIP: 0033:0x45af49 [ 1303.715440] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1303.734341] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1303.742045] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:39 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000000)=@access={'system_u:object_r:crack_db_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x9}, 0x5a) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1303.749302] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1303.756558] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1303.763817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1303.771088] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:39 executing program 1 (fault-call:4 fault-nth:48): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1303.890014] FAULT_INJECTION: forcing a failure. [ 1303.890014] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.919942] CPU: 1 PID: 30305 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1303.929272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.938641] Call Trace: [ 1303.941332] dump_stack+0x197/0x210 [ 1303.944978] should_fail.cold+0xa/0x1b [ 1303.948876] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1303.954322] ? lock_downgrade+0x880/0x880 [ 1303.958488] __should_failslab+0x121/0x190 [ 1303.962718] should_failslab+0x9/0x14 [ 1303.966510] kmem_cache_alloc+0x2ae/0x700 [ 1303.970666] ? lock_downgrade+0x880/0x880 [ 1303.974922] __kernfs_new_node+0xef/0x6f0 [ 1303.979075] ? kasan_check_write+0x14/0x20 [ 1303.983308] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1303.988062] ? wait_for_completion+0x440/0x440 [ 1303.993431] ? mutex_unlock+0xd/0x10 [ 1303.997185] ? kernfs_activate+0x192/0x1f0 [ 1304.001517] kernfs_new_node+0x99/0x130 [ 1304.005494] __kernfs_create_file+0x51/0x33b [ 1304.009911] sysfs_add_file_mode_ns+0x222/0x560 [ 1304.014596] internal_create_group+0x383/0xc30 [ 1304.019715] ? remove_files.isra.0+0x190/0x190 [ 1304.024299] ? kernfs_put+0x3c2/0x5d0 [ 1304.028100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1304.033629] ? kernfs_create_link+0x1d2/0x250 [ 1304.038215] sysfs_create_groups+0x9b/0x141 [ 1304.042968] device_add+0x12de/0x1760 [ 1304.046781] ? get_device_parent.isra.0+0x570/0x570 [ 1304.051793] ? __init_waitqueue_head+0x36/0x90 [ 1304.056375] ? pm_runtime_init+0x347/0x400 [ 1304.060625] netdev_register_kobject+0x183/0x3b0 [ 1304.065827] register_netdevice+0x875/0xff0 [ 1304.070164] ? netdev_change_features+0xb0/0xb0 [ 1304.074827] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1304.080379] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1304.085564] ? ip6gre_tunnel_init+0x340/0x340 [ 1304.090245] ? lockdep_rtnl_is_held+0x26/0x30 [ 1304.094750] ? ip6gre_tunnel_find+0x496/0x640 [ 1304.099429] ip6gre_newlink+0x298/0x7a0 [ 1304.103428] ? ip6gre_changelink+0x560/0x560 [ 1304.108008] rtnl_newlink+0x1042/0x1600 [ 1304.111998] ? rtnl_link_unregister+0x250/0x250 [ 1304.116665] ? mark_held_locks+0x100/0x100 [ 1304.120901] ? debug_smp_processor_id+0x1c/0x20 [ 1304.125843] ? is_bpf_text_address+0xac/0x170 [ 1304.130347] ? find_held_lock+0x35/0x130 [ 1304.134406] ? is_bpf_text_address+0xac/0x170 [ 1304.138990] ? __lock_acquire+0x6ee/0x49c0 [ 1304.143324] ? __lock_acquire+0x6ee/0x49c0 [ 1304.147555] ? lock_downgrade+0x880/0x880 [ 1304.151706] ? mark_held_locks+0x100/0x100 [ 1304.155938] ? debug_smp_processor_id+0x1c/0x20 [ 1304.160615] ? perf_trace_lock_acquire+0xf5/0x580 [ 1304.165483] ? mark_held_locks+0x100/0x100 [ 1304.169728] ? debug_smp_processor_id+0x1c/0x20 [ 1304.174392] ? perf_trace_lock_acquire+0xf5/0x580 [ 1304.184617] ? find_held_lock+0x35/0x130 [ 1304.188696] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1304.193116] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1304.198913] ? rtnl_link_unregister+0x250/0x250 [ 1304.203580] rtnetlink_rcv_msg+0x463/0xb00 [ 1304.207816] ? rtnetlink_put_metrics+0x560/0x560 [ 1304.212571] ? netdev_pick_tx+0x300/0x300 [ 1304.216720] ? netlink_deliver_tap+0x22d/0xc20 [ 1304.221302] ? find_held_lock+0x35/0x130 [ 1304.225462] netlink_rcv_skb+0x17d/0x460 [ 1304.232323] ? rtnetlink_put_metrics+0x560/0x560 [ 1304.237091] ? netlink_ack+0xb30/0xb30 [ 1304.240983] ? kasan_check_read+0x11/0x20 [ 1304.245145] ? netlink_deliver_tap+0x254/0xc20 [ 1304.249819] rtnetlink_rcv+0x1d/0x30 [ 1304.253541] netlink_unicast+0x53a/0x730 [ 1304.258497] ? netlink_attachskb+0x770/0x770 [ 1304.263078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1304.268891] netlink_sendmsg+0x8ae/0xd70 [ 1304.273043] ? netlink_unicast+0x730/0x730 [ 1304.277472] ? selinux_socket_sendmsg+0x36/0x40 [ 1304.282486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1304.288022] ? security_socket_sendmsg+0x8d/0xc0 [ 1304.292803] ? netlink_unicast+0x730/0x730 [ 1304.297053] sock_sendmsg+0xd7/0x130 [ 1304.301339] ___sys_sendmsg+0x803/0x920 [ 1304.305761] ? copy_msghdr_from_user+0x430/0x430 [ 1304.310540] ? lock_downgrade+0x880/0x880 [ 1304.315010] ? kasan_check_read+0x11/0x20 [ 1304.319787] ? __fget+0x367/0x540 [ 1304.323685] ? iterate_fd+0x360/0x360 [ 1304.327505] ? __fget_light+0x1a9/0x230 [ 1304.331478] ? __fdget+0x1b/0x20 [ 1304.334935] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1304.340472] __sys_sendmsg+0x105/0x1d0 [ 1304.344444] ? __ia32_sys_shutdown+0x80/0x80 [ 1304.348873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1304.353629] ? do_syscall_64+0x26/0x620 [ 1304.357599] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1304.363004] ? do_syscall_64+0x26/0x620 [ 1304.366994] __x64_sys_sendmsg+0x78/0xb0 [ 1304.371057] do_syscall_64+0xfd/0x620 [ 1304.374860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1304.380195] RIP: 0033:0x45af49 [ 1304.383410] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1304.402990] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.410719] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1304.418107] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1304.425704] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1304.433000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 12:53:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r3}, 0x1000, 0xffffffff, 0x3ff}) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000000) [ 1304.441144] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:39 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 12:53:40 executing program 1 (fault-call:4 fault-nth:49): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:40 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:40 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:40 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000240)=0x200, 0x4) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = accept4(r4, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) fcntl$lock(r5, 0x32, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1, r6}) [ 1304.689287] FAULT_INJECTION: forcing a failure. [ 1304.689287] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.719137] CPU: 1 PID: 30363 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1304.727800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.737229] Call Trace: [ 1304.739850] dump_stack+0x197/0x210 [ 1304.744119] should_fail.cold+0xa/0x1b [ 1304.748067] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1304.753215] ? lock_downgrade+0x880/0x880 [ 1304.757419] __should_failslab+0x121/0x190 [ 1304.761685] should_failslab+0x9/0x14 [ 1304.765507] kmem_cache_alloc+0x2ae/0x700 [ 1304.769693] ? lock_downgrade+0x880/0x880 [ 1304.773854] __kernfs_new_node+0xef/0x6f0 [ 1304.778363] ? kasan_check_write+0x14/0x20 [ 1304.782729] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1304.787529] ? wait_for_completion+0x440/0x440 [ 1304.792169] ? mutex_unlock+0xd/0x10 [ 1304.795908] ? kernfs_activate+0x192/0x1f0 [ 1304.800173] kernfs_new_node+0x99/0x130 [ 1304.804153] __kernfs_create_file+0x51/0x33b [ 1304.808575] sysfs_add_file_mode_ns+0x222/0x560 [ 1304.813360] internal_create_group+0x383/0xc30 [ 1304.817970] ? remove_files.isra.0+0x190/0x190 [ 1304.822580] ? kernfs_put+0x3c2/0x5d0 [ 1304.826400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1304.832029] ? kernfs_create_link+0x1d2/0x250 [ 1304.836529] sysfs_create_groups+0x9b/0x141 [ 1304.841023] device_add+0x12de/0x1760 [ 1304.844824] ? get_device_parent.isra.0+0x570/0x570 [ 1304.849846] ? __init_waitqueue_head+0x36/0x90 [ 1304.854445] ? pm_runtime_init+0x347/0x400 [ 1304.859301] netdev_register_kobject+0x183/0x3b0 [ 1304.865024] register_netdevice+0x875/0xff0 [ 1304.869443] ? netdev_change_features+0xb0/0xb0 [ 1304.874110] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1304.879661] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1304.884846] ? ip6gre_tunnel_init+0x340/0x340 [ 1304.889335] ? lockdep_rtnl_is_held+0x26/0x30 [ 1304.894702] ? ip6gre_tunnel_find+0x496/0x640 [ 1304.899383] ip6gre_newlink+0x298/0x7a0 [ 1304.903355] ? ip6gre_changelink+0x560/0x560 [ 1304.907771] rtnl_newlink+0x1042/0x1600 [ 1304.911758] ? rtnl_link_unregister+0x250/0x250 [ 1304.916431] ? mark_held_locks+0x100/0x100 [ 1304.920684] ? debug_smp_processor_id+0x1c/0x20 [ 1304.925574] ? is_bpf_text_address+0xac/0x170 [ 1304.930324] ? find_held_lock+0x35/0x130 [ 1304.935261] ? is_bpf_text_address+0xac/0x170 [ 1304.940406] ? __lock_acquire+0x6ee/0x49c0 [ 1304.944764] ? __lock_acquire+0x6ee/0x49c0 [ 1304.949021] ? lock_downgrade+0x880/0x880 [ 1304.953283] ? mark_held_locks+0x100/0x100 [ 1304.957553] ? debug_smp_processor_id+0x1c/0x20 [ 1304.962405] ? perf_trace_lock_acquire+0xf5/0x580 [ 1304.967666] ? mark_held_locks+0x100/0x100 [ 1304.971985] ? debug_smp_processor_id+0x1c/0x20 [ 1304.976837] ? perf_trace_lock_acquire+0xf5/0x580 [ 1304.981710] ? find_held_lock+0x35/0x130 [ 1304.985782] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1304.991154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1304.996706] ? rtnl_link_unregister+0x250/0x250 [ 1305.001386] rtnetlink_rcv_msg+0x463/0xb00 [ 1305.005626] ? rtnetlink_put_metrics+0x560/0x560 [ 1305.010563] ? netdev_pick_tx+0x300/0x300 [ 1305.014981] ? netlink_deliver_tap+0x22d/0xc20 [ 1305.019733] ? find_held_lock+0x35/0x130 [ 1305.024946] netlink_rcv_skb+0x17d/0x460 [ 1305.029089] ? rtnetlink_put_metrics+0x560/0x560 [ 1305.034115] ? netlink_ack+0xb30/0xb30 [ 1305.037996] ? kasan_check_read+0x11/0x20 [ 1305.042921] ? netlink_deliver_tap+0x254/0xc20 [ 1305.047972] rtnetlink_rcv+0x1d/0x30 [ 1305.053095] netlink_unicast+0x53a/0x730 [ 1305.057700] ? netlink_attachskb+0x770/0x770 [ 1305.062739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.068903] netlink_sendmsg+0x8ae/0xd70 [ 1305.073760] ? netlink_unicast+0x730/0x730 [ 1305.078108] ? selinux_socket_sendmsg+0x36/0x40 [ 1305.083053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.089031] ? security_socket_sendmsg+0x8d/0xc0 [ 1305.094131] ? netlink_unicast+0x730/0x730 [ 1305.098365] sock_sendmsg+0xd7/0x130 [ 1305.102943] ___sys_sendmsg+0x803/0x920 [ 1305.107002] ? copy_msghdr_from_user+0x430/0x430 [ 1305.111847] ? lock_downgrade+0x880/0x880 [ 1305.116176] ? kasan_check_read+0x11/0x20 [ 1305.120405] ? __fget+0x367/0x540 [ 1305.124565] ? iterate_fd+0x360/0x360 [ 1305.128366] ? __fget_light+0x1a9/0x230 [ 1305.132336] ? __fdget+0x1b/0x20 [ 1305.135696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1305.141243] __sys_sendmsg+0x105/0x1d0 [ 1305.145123] ? __ia32_sys_shutdown+0x80/0x80 [ 1305.149534] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1305.154287] ? do_syscall_64+0x26/0x620 [ 1305.158341] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.163698] ? do_syscall_64+0x26/0x620 [ 1305.167694] __x64_sys_sendmsg+0x78/0xb0 [ 1305.171750] do_syscall_64+0xfd/0x620 [ 1305.175633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.180814] RIP: 0033:0x45af49 [ 1305.184003] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1305.202915] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.210642] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1305.217922] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1305.225533] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1305.232795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 12:53:40 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1305.240055] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r1 = getuid() setresuid(0xee01, r1, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r3 = getuid() setresuid(0xee01, r3, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xa0004, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions='default_permissions'}], [{@euid_lt={'euid<', r2}}, {@appraise='appraise'}, {@obj_type={'obj_type', 0x3d, '(+eth0'}}, {@hash='hash'}, {@smackfshat={'smackfshat', 0x3d, '[em1\xc4posix_acl_access'}}, {@fowner_lt={'fowner<', r3}}]}}) 12:53:40 executing program 1 (fault-call:4 fault-nth:50): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:40 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={[], 0x1, 0x2d1e4215, 0x9, 0x5, 0x800, r6}) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) 12:53:40 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1305.422466] FAULT_INJECTION: forcing a failure. [ 1305.422466] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.452691] CPU: 1 PID: 30437 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1305.460675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1305.470053] Call Trace: [ 1305.472684] dump_stack+0x197/0x210 [ 1305.476350] should_fail.cold+0xa/0x1b [ 1305.480286] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1305.485446] ? lock_downgrade+0x880/0x880 [ 1305.489644] __should_failslab+0x121/0x190 [ 1305.494022] should_failslab+0x9/0x14 [ 1305.497852] kmem_cache_alloc+0x2ae/0x700 [ 1305.502062] ? lock_downgrade+0x880/0x880 [ 1305.506246] __kernfs_new_node+0xef/0x6f0 [ 1305.510522] ? kasan_check_write+0x14/0x20 [ 1305.514882] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1305.519677] ? wait_for_completion+0x440/0x440 [ 1305.524310] ? mutex_unlock+0xd/0x10 [ 1305.528047] ? kernfs_activate+0x192/0x1f0 [ 1305.532309] kernfs_new_node+0x99/0x130 [ 1305.536321] __kernfs_create_file+0x51/0x33b [ 1305.540758] sysfs_add_file_mode_ns+0x222/0x560 [ 1305.545452] internal_create_group+0x383/0xc30 [ 1305.550050] ? remove_files.isra.0+0x190/0x190 [ 1305.554655] ? kernfs_put+0x3c2/0x5d0 [ 1305.558468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.564027] ? kernfs_create_link+0x1d2/0x250 [ 1305.568539] sysfs_create_groups+0x9b/0x141 [ 1305.572999] device_add+0x12de/0x1760 [ 1305.576840] ? get_device_parent.isra.0+0x570/0x570 [ 1305.581875] ? __init_waitqueue_head+0x36/0x90 [ 1305.586467] ? pm_runtime_init+0x347/0x400 [ 1305.590715] netdev_register_kobject+0x183/0x3b0 [ 1305.596365] register_netdevice+0x875/0xff0 [ 1305.601482] ? netdev_change_features+0xb0/0xb0 [ 1305.606352] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1305.611899] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1305.617093] ? ip6gre_tunnel_init+0x340/0x340 [ 1305.621600] ? lockdep_rtnl_is_held+0x26/0x30 [ 1305.626094] ? ip6gre_tunnel_find+0x496/0x640 [ 1305.630626] ip6gre_newlink+0x298/0x7a0 [ 1305.634613] ? ip6gre_changelink+0x560/0x560 [ 1305.639028] rtnl_newlink+0x1042/0x1600 [ 1305.643723] ? rtnl_link_unregister+0x250/0x250 [ 1305.648414] ? mark_held_locks+0x100/0x100 [ 1305.655712] ? __lock_acquire+0x6ee/0x49c0 [ 1305.659988] ? cpuacct_charge+0x1db/0x360 [ 1305.664152] ? __update_load_avg_se+0x5ec/0xa10 [ 1305.668824] ? __lock_is_held+0xb6/0x140 [ 1305.672990] ? mark_held_locks+0x100/0x100 [ 1305.677269] ? mark_held_locks+0x100/0x100 [ 1305.681717] ? debug_smp_processor_id+0x1c/0x20 [ 1305.686487] ? perf_trace_lock_acquire+0xf5/0x580 [ 1305.691422] ? finish_task_switch+0x146/0x7c0 [ 1305.695926] ? __mutex_lock+0xa67/0x1300 [ 1305.699984] ? find_held_lock+0x35/0x130 [ 1305.704206] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1305.709749] ? rtnl_link_unregister+0x250/0x250 [ 1305.714418] rtnetlink_rcv_msg+0x463/0xb00 [ 1305.718666] ? rtnetlink_put_metrics+0x560/0x560 [ 1305.723423] ? netdev_pick_tx+0x300/0x300 [ 1305.727574] ? netlink_deliver_tap+0x22d/0xc20 [ 1305.733388] ? find_held_lock+0x35/0x130 [ 1305.737626] netlink_rcv_skb+0x17d/0x460 [ 1305.741704] ? rtnetlink_put_metrics+0x560/0x560 [ 1305.746474] ? netlink_ack+0xb30/0xb30 [ 1305.750377] ? kasan_check_read+0x11/0x20 [ 1305.754550] ? netlink_deliver_tap+0x254/0xc20 [ 1305.759143] rtnetlink_rcv+0x1d/0x30 [ 1305.762878] netlink_unicast+0x53a/0x730 [ 1305.766958] ? netlink_attachskb+0x770/0x770 [ 1305.772016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.778347] netlink_sendmsg+0x8ae/0xd70 [ 1305.782858] ? netlink_unicast+0x730/0x730 [ 1305.787293] ? selinux_socket_sendmsg+0x36/0x40 [ 1305.794160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.799698] ? security_socket_sendmsg+0x8d/0xc0 [ 1305.804555] ? netlink_unicast+0x730/0x730 [ 1305.808887] sock_sendmsg+0xd7/0x130 [ 1305.812690] ___sys_sendmsg+0x803/0x920 [ 1305.816909] ? copy_msghdr_from_user+0x430/0x430 [ 1305.823042] ? lock_downgrade+0x880/0x880 [ 1305.828102] ? kasan_check_read+0x11/0x20 [ 1305.832909] ? __fget+0x367/0x540 [ 1305.836981] ? iterate_fd+0x360/0x360 [ 1305.842619] ? __fget_light+0x1a9/0x230 [ 1305.846681] ? __fdget+0x1b/0x20 [ 1305.850066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1305.856016] __sys_sendmsg+0x105/0x1d0 [ 1305.860195] ? __ia32_sys_shutdown+0x80/0x80 [ 1305.864712] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1305.869478] ? do_syscall_64+0x26/0x620 [ 1305.873672] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.879140] ? do_syscall_64+0x26/0x620 [ 1305.883565] __x64_sys_sendmsg+0x78/0xb0 [ 1305.888171] do_syscall_64+0xfd/0x620 [ 1305.891982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.897265] RIP: 0033:0x45af49 [ 1305.900724] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:53:41 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1305.920404] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.928108] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1305.935372] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1305.942657] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1305.950294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1305.957573] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:41 executing program 1 (fault-call:4 fault-nth:51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:41 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe37}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="028c6d37bfb721d80660d196864f"], 0xe, 0x3) [ 1306.106319] FAULT_INJECTION: forcing a failure. [ 1306.106319] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.141721] CPU: 1 PID: 30554 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1306.151666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.161240] Call Trace: [ 1306.163858] dump_stack+0x197/0x210 [ 1306.167525] should_fail.cold+0xa/0x1b [ 1306.171444] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1306.176573] ? lock_downgrade+0x880/0x880 [ 1306.180759] __should_failslab+0x121/0x190 [ 1306.185716] should_failslab+0x9/0x14 [ 1306.190585] kmem_cache_alloc+0x2ae/0x700 [ 1306.194764] ? lock_downgrade+0x880/0x880 [ 1306.199198] __kernfs_new_node+0xef/0x6f0 [ 1306.203371] ? kasan_check_write+0x14/0x20 [ 1306.207629] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1306.212412] ? wait_for_completion+0x440/0x440 [ 1306.217028] ? mutex_unlock+0xd/0x10 [ 1306.220760] ? kernfs_activate+0x192/0x1f0 [ 1306.225021] kernfs_new_node+0x99/0x130 [ 1306.229072] __kernfs_create_file+0x51/0x33b [ 1306.233513] sysfs_add_file_mode_ns+0x222/0x560 [ 1306.238459] internal_create_group+0x383/0xc30 [ 1306.243102] ? remove_files.isra.0+0x190/0x190 [ 1306.247712] ? kernfs_put+0x3c2/0x5d0 [ 1306.251559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 12:53:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xf577b1507c2c8ed0, @perf_bp={&(0x7f0000000180), 0x6}, 0x6c67ad95b4b260f9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x54006, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/246, 0xf6) creat(&(0x7f0000000040)='./file0\x00', 0x10) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @raw_data=[0xfe, 0x1, 0x2, 0x882, 0x3, 0x10000, 0xf11, 0x3, 0x8, 0x140000, 0x8001, 0x8, 0x3, 0x5e3, 0x0, 0xffffffff, 0x8, 0x1, 0x81, 0x1, 0x2, 0xf46e, 0x7fffffff, 0x200, 0x100, 0x80000001, 0xffffffff, 0x40, 0xc86, 0x3ff, 0x2fb]}) 12:53:41 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1306.257125] ? kernfs_create_link+0x1d2/0x250 [ 1306.261742] sysfs_create_groups+0x9b/0x141 [ 1306.266099] device_add+0x12de/0x1760 [ 1306.270026] ? get_device_parent.isra.0+0x570/0x570 [ 1306.275803] ? __init_waitqueue_head+0x36/0x90 [ 1306.280434] ? pm_runtime_init+0x347/0x400 [ 1306.285655] netdev_register_kobject+0x183/0x3b0 [ 1306.290710] register_netdevice+0x875/0xff0 [ 1306.295066] ? netdev_change_features+0xb0/0xb0 [ 1306.299763] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1306.305382] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1306.310613] ? ip6gre_tunnel_init+0x340/0x340 [ 1306.315126] ? lockdep_rtnl_is_held+0x26/0x30 [ 1306.319736] ? ip6gre_tunnel_find+0x496/0x640 [ 1306.324263] ip6gre_newlink+0x298/0x7a0 [ 1306.328269] ? ip6gre_changelink+0x560/0x560 [ 1306.332708] rtnl_newlink+0x1042/0x1600 [ 1306.336811] ? rtnl_link_unregister+0x250/0x250 [ 1306.341508] ? mark_held_locks+0x100/0x100 [ 1306.345771] ? debug_smp_processor_id+0x1c/0x20 [ 1306.351019] ? is_bpf_text_address+0xac/0x170 12:53:41 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1306.355540] ? find_held_lock+0x35/0x130 [ 1306.359630] ? is_bpf_text_address+0xac/0x170 [ 1306.364177] ? __lock_acquire+0x6ee/0x49c0 [ 1306.368432] ? __lock_acquire+0x6ee/0x49c0 [ 1306.372689] ? lock_downgrade+0x880/0x880 [ 1306.376874] ? mark_held_locks+0x100/0x100 [ 1306.381131] ? debug_smp_processor_id+0x1c/0x20 [ 1306.385822] ? perf_trace_lock_acquire+0xf5/0x580 [ 1306.390698] ? mark_held_locks+0x100/0x100 [ 1306.394955] ? debug_smp_processor_id+0x1c/0x20 [ 1306.399646] ? perf_trace_lock_acquire+0xf5/0x580 12:53:41 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1306.404569] ? find_held_lock+0x35/0x130 [ 1306.408664] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1306.413109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1306.418938] ? rtnl_link_unregister+0x250/0x250 [ 1306.423639] rtnetlink_rcv_msg+0x463/0xb00 [ 1306.427900] ? rtnetlink_put_metrics+0x560/0x560 [ 1306.433294] ? netdev_pick_tx+0x300/0x300 [ 1306.437635] ? netlink_deliver_tap+0x22d/0xc20 [ 1306.442240] ? find_held_lock+0x35/0x130 [ 1306.446336] netlink_rcv_skb+0x17d/0x460 [ 1306.450422] ? rtnetlink_put_metrics+0x560/0x560 [ 1306.455211] ? netlink_ack+0xb30/0xb30 [ 1306.459123] ? kasan_check_read+0x11/0x20 [ 1306.463307] ? netlink_deliver_tap+0x254/0xc20 [ 1306.467935] rtnetlink_rcv+0x1d/0x30 [ 1306.471675] netlink_unicast+0x53a/0x730 [ 1306.475829] ? netlink_attachskb+0x770/0x770 [ 1306.480434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1306.486005] netlink_sendmsg+0x8ae/0xd70 [ 1306.490160] ? netlink_unicast+0x730/0x730 [ 1306.494485] ? selinux_socket_sendmsg+0x36/0x40 [ 1306.499449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1306.505019] ? security_socket_sendmsg+0x8d/0xc0 [ 1306.509804] ? netlink_unicast+0x730/0x730 [ 1306.515117] sock_sendmsg+0xd7/0x130 [ 1306.518857] ___sys_sendmsg+0x803/0x920 [ 1306.522939] ? copy_msghdr_from_user+0x430/0x430 [ 1306.527725] ? lock_downgrade+0x880/0x880 [ 1306.532328] ? kasan_check_read+0x11/0x20 [ 1306.536505] ? __fget+0x367/0x540 [ 1306.539998] ? iterate_fd+0x360/0x360 [ 1306.543937] ? __fget_light+0x1a9/0x230 [ 1306.547933] ? __fdget+0x1b/0x20 [ 1306.551316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1306.556968] __sys_sendmsg+0x105/0x1d0 [ 1306.560854] ? __ia32_sys_shutdown+0x80/0x80 [ 1306.565363] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1306.570675] ? do_syscall_64+0x26/0x620 [ 1306.574736] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.582022] ? do_syscall_64+0x26/0x620 [ 1306.585994] __x64_sys_sendmsg+0x78/0xb0 [ 1306.590807] do_syscall_64+0xfd/0x620 [ 1306.594638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.599835] RIP: 0033:0x45af49 [ 1306.603170] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1306.623944] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.634216] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1306.641545] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1306.649036] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1306.656317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1306.663607] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1306.671634] net_ratelimit: 16 callbacks suppressed [ 1306.671642] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.681697] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.682109] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.686824] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.692275] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.697317] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.707574] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.713098] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.718240] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.723394] protocol 88fb is buggy, dev hsr_slave_1 12:53:42 executing program 1 (fault-call:4 fault-nth:52): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1306.837959] FAULT_INJECTION: forcing a failure. [ 1306.837959] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.857290] CPU: 1 PID: 30875 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1306.866095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.875462] Call Trace: [ 1306.878080] dump_stack+0x197/0x210 [ 1306.881748] should_fail.cold+0xa/0x1b [ 1306.886603] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1306.892093] ? lock_downgrade+0x880/0x880 [ 1306.896274] __should_failslab+0x121/0x190 [ 1306.900535] should_failslab+0x9/0x14 [ 1306.904406] kmem_cache_alloc+0x2ae/0x700 [ 1306.908590] ? lock_downgrade+0x880/0x880 [ 1306.912767] __kernfs_new_node+0xef/0x6f0 [ 1306.916942] ? kasan_check_write+0x14/0x20 [ 1306.921191] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1306.925979] ? wait_for_completion+0x440/0x440 [ 1306.930605] ? mutex_unlock+0xd/0x10 [ 1306.934337] ? kernfs_activate+0x192/0x1f0 [ 1306.938603] kernfs_new_node+0x99/0x130 [ 1306.942627] __kernfs_create_file+0x51/0x33b [ 1306.947153] sysfs_add_file_mode_ns+0x222/0x560 [ 1306.951854] internal_create_group+0x383/0xc30 [ 1306.956462] ? remove_files.isra.0+0x190/0x190 [ 1306.961228] ? kernfs_put+0x3c2/0x5d0 [ 1306.965056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1306.970626] ? kernfs_create_link+0x1d2/0x250 [ 1306.975157] sysfs_create_groups+0x9b/0x141 [ 1306.979494] device_add+0x12de/0x1760 [ 1306.983309] ? get_device_parent.isra.0+0x570/0x570 [ 1306.988319] ? __init_waitqueue_head+0x36/0x90 [ 1306.993966] ? pm_runtime_init+0x347/0x400 [ 1306.998207] netdev_register_kobject+0x183/0x3b0 [ 1307.002985] register_netdevice+0x875/0xff0 [ 1307.007327] ? netdev_change_features+0xb0/0xb0 [ 1307.012017] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1307.017670] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1307.022991] ? ip6gre_tunnel_init+0x340/0x340 [ 1307.027499] ? lockdep_rtnl_is_held+0x26/0x30 [ 1307.032000] ? ip6gre_tunnel_find+0x496/0x640 [ 1307.036511] ip6gre_newlink+0x298/0x7a0 [ 1307.040490] ? ip6gre_changelink+0x560/0x560 [ 1307.044907] rtnl_newlink+0x1042/0x1600 [ 1307.048885] ? rtnl_link_unregister+0x250/0x250 [ 1307.053552] ? trace_hardirqs_off+0x62/0x220 [ 1307.057964] ? __lock_acquire+0x6ee/0x49c0 [ 1307.062197] ? __lock_is_held+0xb6/0x140 [ 1307.066272] ? rcu_read_unlock+0x16/0x60 [ 1307.070327] ? mark_held_locks+0x100/0x100 [ 1307.074573] ? mark_held_locks+0x100/0x100 [ 1307.078816] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1307.083335] ? finish_task_switch+0x146/0x7c0 [ 1307.087852] ? finish_task_switch+0x118/0x7c0 [ 1307.092367] ? switch_mm_irqs_off+0x7fa/0x1360 [ 1307.097219] ? __mutex_lock+0xa67/0x1300 [ 1307.101296] ? find_held_lock+0x35/0x130 [ 1307.106587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1307.112128] ? rtnl_link_unregister+0x250/0x250 [ 1307.116794] rtnetlink_rcv_msg+0x463/0xb00 [ 1307.121024] ? rtnetlink_put_metrics+0x560/0x560 [ 1307.125786] ? netdev_pick_tx+0x300/0x300 [ 1307.129929] ? netlink_deliver_tap+0x22d/0xc20 [ 1307.134519] ? find_held_lock+0x35/0x130 [ 1307.138575] netlink_rcv_skb+0x17d/0x460 [ 1307.143601] ? rtnetlink_put_metrics+0x560/0x560 [ 1307.148355] ? netlink_ack+0xb30/0xb30 [ 1307.152250] ? kasan_check_read+0x11/0x20 [ 1307.156401] ? netlink_deliver_tap+0x254/0xc20 [ 1307.160992] rtnetlink_rcv+0x1d/0x30 [ 1307.164728] netlink_unicast+0x53a/0x730 [ 1307.168801] ? netlink_attachskb+0x770/0x770 [ 1307.173210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1307.178758] netlink_sendmsg+0x8ae/0xd70 [ 1307.182833] ? netlink_unicast+0x730/0x730 [ 1307.187087] ? selinux_socket_sendmsg+0x36/0x40 [ 1307.191968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1307.197523] ? security_socket_sendmsg+0x8d/0xc0 [ 1307.202383] ? netlink_unicast+0x730/0x730 [ 1307.206623] sock_sendmsg+0xd7/0x130 [ 1307.210353] ___sys_sendmsg+0x803/0x920 [ 1307.214340] ? copy_msghdr_from_user+0x430/0x430 [ 1307.219100] ? lock_downgrade+0x880/0x880 [ 1307.223252] ? kasan_check_read+0x11/0x20 [ 1307.228198] ? __fget+0x367/0x540 [ 1307.231661] ? iterate_fd+0x360/0x360 [ 1307.235481] ? __fget_light+0x1a9/0x230 [ 1307.239454] ? __fdget+0x1b/0x20 [ 1307.242812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1307.248359] __sys_sendmsg+0x105/0x1d0 [ 1307.252246] ? __ia32_sys_shutdown+0x80/0x80 [ 1307.256667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1307.261414] ? do_syscall_64+0x26/0x620 [ 1307.265380] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.270740] ? do_syscall_64+0x26/0x620 [ 1307.274726] __x64_sys_sendmsg+0x78/0xb0 [ 1307.279759] do_syscall_64+0xfd/0x620 [ 1307.283551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.288748] RIP: 0033:0x45af49 [ 1307.291943] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1307.310843] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.318542] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1307.325805] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1307.333113] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1307.340381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1307.347651] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:42 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x3}, 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000400)=""/241) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:42 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10486, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 12:53:42 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x100, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x2, 0x7, 0x3f, 0x5, 0x0, 0x6, 0x301, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xff, 0xe2d}, 0x8004, 0xffffffff, 0x1f, 0x1, 0x8, 0x8, 0x3}, r1, 0x1, r0, 0x4) 12:53:42 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:42 executing program 1 (fault-call:4 fault-nth:53): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:42 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1307.496237] FAULT_INJECTION: forcing a failure. [ 1307.496237] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.519273] CPU: 1 PID: 30994 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1307.527132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1307.536521] Call Trace: [ 1307.539141] dump_stack+0x197/0x210 [ 1307.542809] should_fail.cold+0xa/0x1b [ 1307.546731] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1307.551852] ? lock_downgrade+0x880/0x880 [ 1307.556129] __should_failslab+0x121/0x190 [ 1307.560394] should_failslab+0x9/0x14 [ 1307.564240] kmem_cache_alloc+0x2ae/0x700 [ 1307.568386] ? lock_downgrade+0x880/0x880 [ 1307.572583] __kernfs_new_node+0xef/0x6f0 [ 1307.576778] ? kasan_check_write+0x14/0x20 [ 1307.581010] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1307.585946] ? wait_for_completion+0x440/0x440 [ 1307.590642] ? mutex_unlock+0xd/0x10 [ 1307.594365] ? kernfs_activate+0x192/0x1f0 [ 1307.598592] kernfs_new_node+0x99/0x130 [ 1307.602561] __kernfs_create_file+0x51/0x33b [ 1307.607066] sysfs_add_file_mode_ns+0x222/0x560 [ 1307.612522] internal_create_group+0x383/0xc30 [ 1307.617119] ? remove_files.isra.0+0x190/0x190 [ 1307.621707] ? kernfs_put+0x3c2/0x5d0 [ 1307.625510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1307.631118] ? kernfs_create_link+0x1d2/0x250 [ 1307.635653] sysfs_create_groups+0x9b/0x141 [ 1307.639981] device_add+0x12de/0x1760 [ 1307.643798] ? get_device_parent.isra.0+0x570/0x570 [ 1307.648825] ? __init_waitqueue_head+0x36/0x90 [ 1307.653406] ? pm_runtime_init+0x347/0x400 [ 1307.657644] netdev_register_kobject+0x183/0x3b0 [ 1307.662400] register_netdevice+0x875/0xff0 [ 1307.666827] ? netdev_change_features+0xb0/0xb0 [ 1307.671498] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1307.677061] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1307.682268] ? ip6gre_tunnel_init+0x340/0x340 [ 1307.686793] ? lockdep_rtnl_is_held+0x26/0x30 [ 1307.691323] ? ip6gre_tunnel_find+0x496/0x640 [ 1307.695843] ip6gre_newlink+0x298/0x7a0 [ 1307.699823] ? ip6gre_changelink+0x560/0x560 [ 1307.704255] rtnl_newlink+0x1042/0x1600 [ 1307.708258] ? rtnl_link_unregister+0x250/0x250 [ 1307.712940] ? mark_held_locks+0x100/0x100 [ 1307.717198] ? is_bpf_text_address+0xac/0x170 [ 1307.722061] ? find_held_lock+0x35/0x130 [ 1307.726124] ? is_bpf_text_address+0xac/0x170 [ 1307.730623] ? __lock_acquire+0x6ee/0x49c0 [ 1307.734924] ? __lock_acquire+0x6ee/0x49c0 [ 1307.739175] ? lock_downgrade+0x880/0x880 [ 1307.743334] ? mark_held_locks+0x100/0x100 [ 1307.747562] ? mark_held_locks+0x100/0x100 [ 1307.751788] ? __kernel_text_address+0xd/0x40 [ 1307.756314] ? mark_held_locks+0x100/0x100 [ 1307.760566] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1307.765229] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1307.770270] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1307.775314] ? find_held_lock+0x35/0x130 [ 1307.779384] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1307.783830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1307.789395] ? rtnl_link_unregister+0x250/0x250 [ 1307.794081] rtnetlink_rcv_msg+0x463/0xb00 [ 1307.798323] ? rtnetlink_put_metrics+0x560/0x560 [ 1307.803133] ? netdev_pick_tx+0x300/0x300 [ 1307.807728] ? netlink_deliver_tap+0x22d/0xc20 [ 1307.812414] ? find_held_lock+0x35/0x130 [ 1307.816498] netlink_rcv_skb+0x17d/0x460 [ 1307.820573] ? rtnetlink_put_metrics+0x560/0x560 [ 1307.825488] ? netlink_ack+0xb30/0xb30 [ 1307.829387] ? kasan_check_read+0x11/0x20 [ 1307.833544] ? netlink_deliver_tap+0x254/0xc20 [ 1307.838130] rtnetlink_rcv+0x1d/0x30 [ 1307.841838] netlink_unicast+0x53a/0x730 [ 1307.845944] ? netlink_attachskb+0x770/0x770 [ 1307.850474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1307.856012] netlink_sendmsg+0x8ae/0xd70 [ 1307.860095] ? netlink_unicast+0x730/0x730 [ 1307.864341] ? selinux_socket_sendmsg+0x36/0x40 [ 1307.869021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1307.874572] ? security_socket_sendmsg+0x8d/0xc0 [ 1307.879332] ? netlink_unicast+0x730/0x730 [ 1307.883567] sock_sendmsg+0xd7/0x130 [ 1307.887278] ___sys_sendmsg+0x803/0x920 [ 1307.891261] ? copy_msghdr_from_user+0x430/0x430 [ 1307.896040] ? lock_downgrade+0x880/0x880 [ 1307.900196] ? kasan_check_read+0x11/0x20 [ 1307.904346] ? __fget+0x367/0x540 [ 1307.907793] ? iterate_fd+0x360/0x360 [ 1307.911586] ? __fget_light+0x1a9/0x230 [ 1307.915557] ? __fdget+0x1b/0x20 [ 1307.918945] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1307.924486] __sys_sendmsg+0x105/0x1d0 [ 1307.928366] ? __ia32_sys_shutdown+0x80/0x80 [ 1307.932841] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1307.937601] ? do_syscall_64+0x26/0x620 [ 1307.941695] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.947161] ? do_syscall_64+0x26/0x620 [ 1307.951132] __x64_sys_sendmsg+0x78/0xb0 [ 1307.955196] do_syscall_64+0xfd/0x620 [ 1307.958998] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.964175] RIP: 0033:0x45af49 [ 1307.967424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1307.986499] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.994215] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1308.001523] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1308.008804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1308.016073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1308.023427] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:43 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1, r0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50200a24}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000020000400c1bd7000ffdbdf2502f81f4c8f5c000008000100000000020800029b00ac1e0101015e42f2"], 0x3c}, 0x1, 0x0, 0x0, 0x200280c0}, 0x40082) 12:53:43 executing program 1 (fault-call:4 fault-nth:54): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:43 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x900, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='\x00', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x2, 'team0\x00', {0x10000}, 0x117}) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000040)=""/54) 12:53:43 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x245044, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x4c1ed9ce, 0xff, 0x1, 0x0, 0x81, 0x0, 0x5, 0x6, 0x81, 0x3, 0x40, 0x7}, {0xfff, 0x9, 0x7, 0x0, 0x81, 0x81, 0x20, 0x1, 0x9, 0x81, 0xf8, 0xb8, 0x3}, {0x8001, 0x0, 0x2, 0x7f, 0x0, 0x1, 0x81, 0x4, 0x6, 0x2, 0x10, 0x0, 0xfffffffffffffff7}], 0xfb}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x90304, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x9, @local, 0xfffff001}, @in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @multicast2}, 0x1}, @in6={0xa, 0x4e21, 0x4, @remote, 0x1000}, @in6={0xa, 0x4e20, 0x401, @loopback, 0x6e}, @in6={0xa, 0x4e21, 0x96f, @dev={0xfe, 0x80, [], 0xd}, 0x63d}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @empty}], 0xbc) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1308.222138] FAULT_INJECTION: forcing a failure. [ 1308.222138] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.257134] CPU: 1 PID: 31210 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 12:53:43 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8, 0x1) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x5, 0x7, 0xfffffff9}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000400)={r10, @in={{0x2, 0x4e23, @empty}}, [0x5b4b, 0x7fffffff, 0x26, 0x6, 0x6, 0x8, 0x7f, 0x2, 0x401, 0x2, 0x80000000, 0x1, 0x20080000, 0x73e0, 0x200]}, &(0x7f0000000040)=0x100) [ 1308.264992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.274360] Call Trace: [ 1308.276979] dump_stack+0x197/0x210 [ 1308.280638] should_fail.cold+0xa/0x1b [ 1308.284559] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1308.289990] ? lock_downgrade+0x880/0x880 [ 1308.294166] __should_failslab+0x121/0x190 [ 1308.298423] should_failslab+0x9/0x14 [ 1308.302256] kmem_cache_alloc+0x2ae/0x700 [ 1308.306430] ? lock_downgrade+0x880/0x880 [ 1308.310601] __kernfs_new_node+0xef/0x6f0 [ 1308.314767] ? kasan_check_write+0x14/0x20 [ 1308.319060] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1308.323840] ? wait_for_completion+0x440/0x440 [ 1308.328458] ? mutex_unlock+0xd/0x10 [ 1308.332194] ? kernfs_activate+0x192/0x1f0 [ 1308.336484] kernfs_new_node+0x99/0x130 [ 1308.340593] __kernfs_create_file+0x51/0x33b [ 1308.345036] sysfs_add_file_mode_ns+0x222/0x560 [ 1308.349716] internal_create_group+0x383/0xc30 [ 1308.354304] ? remove_files.isra.0+0x190/0x190 [ 1308.358940] ? kernfs_put+0x3c2/0x5d0 [ 1308.362979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1308.368530] ? kernfs_create_link+0x1d2/0x250 [ 1308.373029] sysfs_create_groups+0x9b/0x141 [ 1308.377344] device_add+0x12de/0x1760 [ 1308.381139] ? get_device_parent.isra.0+0x570/0x570 [ 1308.386165] ? __init_waitqueue_head+0x36/0x90 [ 1308.390776] ? pm_runtime_init+0x347/0x400 [ 1308.396016] netdev_register_kobject+0x183/0x3b0 [ 1308.401064] register_netdevice+0x875/0xff0 [ 1308.405414] ? netdev_change_features+0xb0/0xb0 [ 1308.410106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1308.415672] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1308.420892] ? ip6gre_tunnel_init+0x340/0x340 [ 1308.425399] ? lockdep_rtnl_is_held+0x26/0x30 [ 1308.429941] ? ip6gre_tunnel_find+0x496/0x640 [ 1308.434468] ip6gre_newlink+0x298/0x7a0 [ 1308.438464] ? ip6gre_changelink+0x560/0x560 [ 1308.442890] rtnl_newlink+0x1042/0x1600 [ 1308.446892] ? rtnl_link_unregister+0x250/0x250 [ 1308.451573] ? mark_held_locks+0x100/0x100 [ 1308.455822] ? debug_smp_processor_id+0x1c/0x20 [ 1308.460514] ? is_bpf_text_address+0xac/0x170 [ 1308.465026] ? find_held_lock+0x35/0x130 [ 1308.469104] ? is_bpf_text_address+0xac/0x170 [ 1308.473624] ? __lock_acquire+0x6ee/0x49c0 [ 1308.477885] ? __lock_acquire+0x6ee/0x49c0 [ 1308.482244] ? lock_downgrade+0x880/0x880 [ 1308.486399] ? mark_held_locks+0x100/0x100 [ 1308.490627] ? debug_smp_processor_id+0x1c/0x20 [ 1308.495292] ? perf_trace_lock_acquire+0xf5/0x580 [ 1308.500173] ? mark_held_locks+0x100/0x100 [ 1308.504410] ? debug_smp_processor_id+0x1c/0x20 [ 1308.509094] ? perf_trace_lock_acquire+0xf5/0x580 [ 1308.514011] ? find_held_lock+0x35/0x130 [ 1308.518100] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1308.522516] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1308.528268] ? rtnl_link_unregister+0x250/0x250 [ 1308.533027] rtnetlink_rcv_msg+0x463/0xb00 [ 1308.537284] ? rtnetlink_put_metrics+0x560/0x560 [ 1308.542084] ? netdev_pick_tx+0x300/0x300 [ 1308.546239] ? netlink_deliver_tap+0x22d/0xc20 [ 1308.550825] ? find_held_lock+0x35/0x130 [ 1308.554886] netlink_rcv_skb+0x17d/0x460 [ 1308.558944] ? rtnetlink_put_metrics+0x560/0x560 [ 1308.563788] ? netlink_ack+0xb30/0xb30 [ 1308.567670] ? kasan_check_read+0x11/0x20 [ 1308.571832] ? netlink_deliver_tap+0x254/0xc20 [ 1308.576415] rtnetlink_rcv+0x1d/0x30 [ 1308.580118] netlink_unicast+0x53a/0x730 [ 1308.584195] ? netlink_attachskb+0x770/0x770 [ 1308.588626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1308.594161] netlink_sendmsg+0x8ae/0xd70 [ 1308.598246] ? netlink_unicast+0x730/0x730 [ 1308.602476] ? selinux_socket_sendmsg+0x36/0x40 [ 1308.607138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1308.612694] ? security_socket_sendmsg+0x8d/0xc0 [ 1308.617447] ? netlink_unicast+0x730/0x730 [ 1308.621690] sock_sendmsg+0xd7/0x130 [ 1308.625415] ___sys_sendmsg+0x803/0x920 [ 1308.629406] ? copy_msghdr_from_user+0x430/0x430 [ 1308.634161] ? lock_downgrade+0x880/0x880 [ 1308.638305] ? kasan_check_read+0x11/0x20 [ 1308.642454] ? __fget+0x367/0x540 [ 1308.645918] ? iterate_fd+0x360/0x360 [ 1308.649731] ? __fget_light+0x1a9/0x230 [ 1308.653725] ? __fdget+0x1b/0x20 [ 1308.657092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1308.662645] __sys_sendmsg+0x105/0x1d0 [ 1308.666552] ? __ia32_sys_shutdown+0x80/0x80 [ 1308.671005] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1308.675860] ? do_syscall_64+0x26/0x620 [ 1308.679848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1308.685224] ? do_syscall_64+0x26/0x620 [ 1308.689261] __x64_sys_sendmsg+0x78/0xb0 [ 1308.693328] do_syscall_64+0xfd/0x620 [ 1308.697133] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1308.702344] RIP: 0033:0x45af49 12:53:44 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1308.706090] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1308.725279] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1308.732995] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1308.740359] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1308.747651] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1308.754962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1308.762245] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:44 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:44 executing program 1 (fault-call:4 fault-nth:55): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x1b0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:44 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x4) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:44 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:44 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x18) 12:53:44 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, r3, 0xee01) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x621, 0x6}, r4, 0xf, 0xffffffffffffffff, 0xd94bbb610126a51a) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1309.048855] FAULT_INJECTION: forcing a failure. [ 1309.048855] name failslab, interval 1, probability 0, space 0, times 0 12:53:44 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1309.125602] CPU: 0 PID: 31339 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1309.133460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.143006] Call Trace: [ 1309.145760] dump_stack+0x197/0x210 [ 1309.149427] should_fail.cold+0xa/0x1b [ 1309.153345] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1309.158478] ? lock_downgrade+0x880/0x880 [ 1309.162809] __should_failslab+0x121/0x190 [ 1309.167079] should_failslab+0x9/0x14 [ 1309.170900] kmem_cache_alloc+0x2ae/0x700 12:53:44 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1309.175076] ? lock_downgrade+0x880/0x880 [ 1309.179244] __kernfs_new_node+0xef/0x6f0 [ 1309.183413] ? kasan_check_write+0x14/0x20 [ 1309.187681] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1309.192470] ? wait_for_completion+0x440/0x440 [ 1309.197088] ? mutex_unlock+0xd/0x10 [ 1309.200951] ? kernfs_activate+0x192/0x1f0 [ 1309.206168] kernfs_new_node+0x99/0x130 [ 1309.210175] __kernfs_create_file+0x51/0x33b [ 1309.214624] sysfs_add_file_mode_ns+0x222/0x560 [ 1309.219333] internal_create_group+0x383/0xc30 [ 1309.223957] ? remove_files.isra.0+0x190/0x190 [ 1309.228574] ? kernfs_put+0x3c2/0x5d0 [ 1309.232422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1309.238009] ? kernfs_create_link+0x1d2/0x250 [ 1309.242558] sysfs_create_groups+0x9b/0x141 [ 1309.247009] device_add+0x12de/0x1760 [ 1309.250824] ? get_device_parent.isra.0+0x570/0x570 [ 1309.255867] ? __init_waitqueue_head+0x36/0x90 [ 1309.260457] ? pm_runtime_init+0x347/0x400 [ 1309.264717] netdev_register_kobject+0x183/0x3b0 [ 1309.269505] register_netdevice+0x875/0xff0 [ 1309.273837] ? netdev_change_features+0xb0/0xb0 [ 1309.278510] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1309.284090] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1309.289308] ? ip6gre_tunnel_init+0x340/0x340 [ 1309.294087] ? lockdep_rtnl_is_held+0x26/0x30 [ 1309.298622] ? ip6gre_tunnel_find+0x496/0x640 [ 1309.303130] ip6gre_newlink+0x298/0x7a0 [ 1309.307109] ? ip6gre_changelink+0x560/0x560 [ 1309.311537] rtnl_newlink+0x1042/0x1600 [ 1309.315539] ? rtnl_link_unregister+0x250/0x250 [ 1309.320230] ? mark_held_locks+0x100/0x100 [ 1309.324501] ? is_bpf_text_address+0xac/0x170 [ 1309.329002] ? find_held_lock+0x35/0x130 [ 1309.333078] ? is_bpf_text_address+0xac/0x170 [ 1309.337617] ? __lock_acquire+0x6ee/0x49c0 [ 1309.341861] ? __lock_acquire+0x6ee/0x49c0 [ 1309.346100] ? lock_downgrade+0x880/0x880 [ 1309.350291] ? mark_held_locks+0x100/0x100 [ 1309.354544] ? mark_held_locks+0x100/0x100 [ 1309.358781] ? __kernel_text_address+0xd/0x40 [ 1309.363306] ? mark_held_locks+0x100/0x100 [ 1309.367545] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1309.372214] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1309.377227] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1309.382282] ? find_held_lock+0x35/0x130 [ 1309.386345] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1309.390765] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1309.396302] ? rtnl_link_unregister+0x250/0x250 [ 1309.400978] rtnetlink_rcv_msg+0x463/0xb00 [ 1309.405218] ? rtnetlink_put_metrics+0x560/0x560 [ 1309.409982] ? netdev_pick_tx+0x300/0x300 [ 1309.414155] ? netlink_deliver_tap+0x22d/0xc20 [ 1309.418744] ? find_held_lock+0x35/0x130 [ 1309.422805] netlink_rcv_skb+0x17d/0x460 [ 1309.426868] ? rtnetlink_put_metrics+0x560/0x560 [ 1309.431627] ? netlink_ack+0xb30/0xb30 [ 1309.435513] ? kasan_check_read+0x11/0x20 [ 1309.439667] ? netlink_deliver_tap+0x254/0xc20 [ 1309.444252] rtnetlink_rcv+0x1d/0x30 [ 1309.447965] netlink_unicast+0x53a/0x730 [ 1309.452040] ? netlink_attachskb+0x770/0x770 [ 1309.456456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1309.461994] netlink_sendmsg+0x8ae/0xd70 [ 1309.466067] ? netlink_unicast+0x730/0x730 [ 1309.470316] ? selinux_socket_sendmsg+0x36/0x40 [ 1309.474990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1309.480522] ? security_socket_sendmsg+0x8d/0xc0 [ 1309.485291] ? netlink_unicast+0x730/0x730 [ 1309.489539] sock_sendmsg+0xd7/0x130 [ 1309.493251] ___sys_sendmsg+0x803/0x920 [ 1309.497234] ? copy_msghdr_from_user+0x430/0x430 [ 1309.502004] ? lock_downgrade+0x880/0x880 [ 1309.506167] ? kasan_check_read+0x11/0x20 [ 1309.510342] ? __fget+0x367/0x540 [ 1309.513800] ? iterate_fd+0x360/0x360 [ 1309.517605] ? __fget_light+0x1a9/0x230 [ 1309.521582] ? __fdget+0x1b/0x20 [ 1309.524954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1309.530491] __sys_sendmsg+0x105/0x1d0 [ 1309.534475] ? __ia32_sys_shutdown+0x80/0x80 [ 1309.538895] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1309.543651] ? do_syscall_64+0x26/0x620 [ 1309.547622] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.552996] ? do_syscall_64+0x26/0x620 [ 1309.557182] __x64_sys_sendmsg+0x78/0xb0 [ 1309.561244] do_syscall_64+0xfd/0x620 [ 1309.565067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.570251] RIP: 0033:0x45af49 [ 1309.573442] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1309.592340] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.600054] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1309.607326] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1309.614966] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1309.622244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1309.630223] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:45 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:45 executing program 1 (fault-call:4 fault-nth:56): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:45 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:45 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = getpid() prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0xfffffffffffffff8) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x7, 0x10000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0}]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpid() sched_setscheduler(r9, 0x0, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r10, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r9, @ANYRESDEC=r11], 0x8, 0x1) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x82000, 0x0) r13 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x6, 0x200) r14 = socket$packet(0x11, 0x3, 0x300) r15 = dup(r14) setsockopt$packet_int(r15, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) io_submit(r3, 0x7, &(0x7f00000018c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000400)="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", 0xfa, 0xffffffff, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x51f, r8, &(0x7f0000000500)="778af0aa514530b109dba44d8117b483a93753cdaa35ff3d51d3aa08f747e686256742acdc4c9e82fdc43b2c8ffe404b621eae653e8baa1e558a315c0610a22e9e2e1b4062d4648d7ac9aa9a78f284f7e48da078d285a733998d6cfb5f4e2d7567e60ec03ab1ae0b24f41e7b89937f9309ddc52a80603df82c82f56e16e82672917b329586c21d85fcc42cc6aacc944be52238f3eb0d3dbc349fa2b8cf16d7f8", 0xa0, 0x3, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f00000005c0)="e36b72dcb9c9b5f5968bfd11a308e10f7f420313812dd25f204772bc46826b963d5a3a411491bbca4a3306b6fad7f962eeeee4e78e3f63ea9896b4ee5d8252647911cd4f9874e2f18ae045dd780587554fa789e31c8465b7978f8bb89b18fd7c411f4a4d034d90a8a39a9c93f5ef73fd501be08cbff4e14bda5c7e194ee80f5cb183c59d255279aecd200a25de70d8bb08b40cff7b0f07da558d7e176171463de0609330f33dbaed1ac05840f5cc2861187671b2223d54a09d8c1ea31baf51fb9db4f8bd6431f96360921f671fad6334", 0xd0, 0x8, 0x0, 0x0, r10}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x4, r12, &(0x7f00000006c0)="6c871d76f4fff689e4112c3f039b3078139214f437681176bcdd24e1ed69e49bc76d8a7f72ec1561deeb6b929533384b3656c1268d93a0011111e1f627be3b57bbbda76ebcc373719268a2da81a63caec9a05c8e43162969f9be5d6b6f122211889728e375689b869384148289f36eb32461cdd8bd4dfe9b12c659b1567a5ec0925165f9e94ea70222d85e3fe750608e88b8273d10db9b1fc62a0c5b6aa20344e52e5701249118e73dcdec370573d284d3044bcac18c5b730c90c087fda8b9800724345d57224d708c81b45e42f1341382b90481b327e9b17893c7ef09b9e1674d6993f51f2ec724248d2cfd320814a9c5dd58e0e61ef39b2e643c51f75547389de455b68651f9f1cec5d7d66167fad81718b05803ba935ff44a2ca0981112d513668eeb438495189b9978b844844397b41ce0c45aa6e32268b904b2cdcfe6ea9331e1b777dea71003b596cd0018c7f60361d294151ea0fdf1ffa09ed13afa38120a90f40a4fd919942c80d520749690bd94a74bc64c74a321c3723860403d2e08f911736905094925b6fef450d4fd6a8bef1bab72cd7598c530bd6fa7e5b8b0a6bfecf69ddd25fbcfb5e26eb8ce50f5d44dc73189c11559e8e3c18f12a454614d20a3b2a10129c132de0f8114861675ad8989cd88ac3cb6c51fbdbba1d38c276e77ad2243271621e4de4949f3a3487b3084b5fbbae04fceb672dd26132e2851ab8674f8b858e1734dd6dc98e0a15f0ab01226e94bb8a6fa1ccf919f903c5a069e887dacc36d096b77019112c4ad2701ef34ff06edc0d8ba247d1cea57034f3f541819cf02ae394ed7d1ef3a03f5898b834af04ca930756984acec57de0ccb337e20d8c7930ca8850f1e3ea43a01b20ecb27ffc75d1bc596f6b90d6e3f04105efe48131937dcae538e8c55086b988b7385ca209f070a071a5b06ac26b38b2cb828335ed76ee53e0801670b3f16e4938250034d300cc7471fba2c215181dadfd98dfc313d9a2448a9defd654a83815879c21bf96000a09c3c878b9066fb7347a8c61383731b2fae5e8e245ea40c016215e095b4bdfdde46dd4cf03ab3ecf6e82ea98786d98cd3c78d9ca3aae399e5b2fc56f751368413cced030d5ed9419a22662fe4707e0c9928327cd02ed491c54fdcbfa30a30d4ad1f82ff3ef09acca614756a82291f34b4e4fd48517b4ff36cac151dacf9ffedf54967b31422e6904b2e266fd801769da221432e5c834dbfd9e4e24c2f78dc82276c9dd03bbed7b64cd7c6745a13434cf23361306f7251f3829cc47bdf0c6ec01bfe170c923f23d751821ea46681977dae1a0ad0f1d4ac3f7a822f1afbc874f60fe23007a206dc79101da68ce0f7577fe6e0db4b3b0241c6186b9d6d3447f88a0ec7696c5035c58ac0af6173d48e63660ae9c1f28680e03bf8ded398e1bef54191c8738e4c94068ac4b108d4cd8b529a23da16922e5ff3823cecbc7c71b90f9ba22cb0705d33bd88ed46001cf9aaf237aed5fecc138e73605710cff0b8b1f92a4850ee52398ccfa81dedbe546cc54e58eacf03604888e43e142145f91f7de4ff84839b7026778e7d1bbe589b92a5b158ce69963e8fad0387ef55de3995c24c2f449d3d13c0fb138a1adf836bc9db3c4a8b92e39e624e8285dd4dc7fa7460000325ad58df4c5aca5442c2f1dd94ae0f1cf96ad6e8fbcd431860dd066995b32ac8f3189fb7bc49b3b80aae0050f2c25c819e95f24f464640de2c1fe9cd8ca85573457cd79558aa4146d77669e5814e7fd4396156f6c258a05d1634352c9374956d6d2544c89eac336c67b10607f6b82ddb8099c9db9a8caaea1e46020b21fd981ae1429543b380e0cd62167ab8adae5333e34b0badd5a8b63ee067091b165aab92d4ea5d895c798ae6a800d6e3732ccd28d8a7de13b0de98d00a32cd53092ac32d9ec71bf49bfc74db2742cbcc7ff90ab7c7111f3f1a0911733017144fecc829c524bc6ca49c69ee9eaa5684c2aa13cee658771a0e41958cd8daf79f2676fab0ea690e92228ffc1a289a52b84a239494b5e822f6aa5a9c4d360157df9dd6949b0465611deb0be15d8e46874cdf6a0b50cde93647fb3a0a088c9cecfa30c9cf4483ed3b652d0d1efc8cb6f29343e1d0f448a7a6ac4707aa9dc3e39bf248f2ef0f9bd3506ee936e630f2e035d99bad2bf1448877f5369c4aebadee97cb01cf6bae3cbeb1a16be17606bb08c4d3e303797c7efabd8dd045f547f838ff83af00a53962fb4db85ce29b3277ee42daddaa7ac0b57c95dce40a3cb582c47b99b8a1696d5ff14c362ba7b7685d8212069adf5cc4e607b55a4a548e7eb1c7e3be3c868e95ade477827c72d791ffba30340dfadfffd89b238880320fca46af79463d74a33d173646c9539a103daac5984b0cebc4529bb96d6edaaa733b2f4adf4cd8c80793193984921c22e81a69f459f3714387ed6a6dfca0ad980f694ce425c1e2a2b73a946b274a07f74e94236c1f58c40c0619d016d0dac77b90a3dad97dec08a3e1d41af50085f9a1d1ffe086d47987f6010b0805a93869b679ff91cfe79e6e4ed8f3e55d272fb1805003f65befe7bdc42bec4dd1b000e8b2215532daf192608b58ecc1fbd252e67b863c1e6fa2e505fd807a72c452447ab583f949ab236e6d5140e82ddac15e7b903da91c33cb828f71cf44eef8bb27d0b752a187a4851d28977776a6299df80eca345ce0c7429b6cebdac279f9f024582529167166c44c4b68a572d3c2f9ace5f9bdf57246865dba6a42cc16be155a7a3233e148dc93ec5536aff1f163d4610ad71f4e627215accbd1d2bf5a2b58c3ad25345c4a8009a9e03a6c4d1227daa03c1686ae14a269e76bf6719e920c85358b9c84276f1a0b45cebebcf082dea8f26ac496b93d2d92c70f9c3897bc3cecaadf96ef07003866724f1b9206716a2295444b130746181cc609799fa6dc1ba4236abb88dc9fe3561fb18d09afd98937dd0e06aeae0b246e34733080a09367a8195990194a1fba61ead7f40c1b4dc2323b7a61e575d97e84be1c99438570a5cff7fbc67ceb98b3ffcd52fb200b029f9a260946bd0daa4b776820a113f67163b76d3e03122d94e04bf19c11243dbdc6b14c06f358a004b440a1f6c5285aef699fddb621af3fbaeedf3efe24d8a1bd63f44002319b90645ae32dcbb1fb96f9a6bd1fb69856d016453152325a6780a3d1add53685b633167bb517a3c03945e935b05ad34ce0cc5d8ee9a75c0f3488d5d9d5d9d09cda2eed07651831931157a9f04d839ddd00c5031c796a8f173051d041cf08cdc7b058fc5a2bd7b5d709fc736d0acf2d53b560eb6bdaff68c1b434120465ac1ab850ab48bf3b1a2cb7a6d9c5aa64fe599fa98888891077d755049a9693eda2bb2b90f9d1f333e9e1d9001521f7fb9cf1f3607645c01df30df48c28e298d481774bc97346879bbd917de76dddb3a082d92b9cf0e89bded8f4798ed5f243b69de9c53f309d37c550ef1c8c9601100b2c018aeda14c2722aef336ad5635b0c81a6ef4cbcb7385706fb0cd68c69a788ac4f854d32235e9780cc54327a2bf969fcbeaeaf4379858e19d3d0d1ce07a93f505fa5f9b289adac7007f48320d08e2e2955490425313e3eba3119edb4b47ea34500c037e220b80f3bb4fe08402ba7e51575abd2c623718c8443c62d68b7c29057d2e0123fad905030c1122241b234e0e47e6b402c903545346f6d95f47409739f1499edfbfc654050ad9e8a729b86d9dcec3ef58e7b51a50201410edc1d7823ecc38aa3290313765820473df7180438c3fe805faa68f6287266cad9b694487bb3f3c002769569da74d4a9a2dc0f71490af8887d9a71456cf5208751a223d9a5d0f2e02105eeaff219c44fb38d959344b858ee600c71fd0e63e4737bc1efb05a8c3e0ebdf637f7252c26ad0d96b66349f940bb6627d6eac5199aed93998057604ddcefc188917e3497eaf624adaa72be0fcf952ff9fdcda7cbec5a7a32177a7bf99b703d0fc41f322e9c7e93f98ae3b2b3681a794e27deeaebf6c4a777ea9789d08efb08d43a8686afb9fa3e37a5c2afe3b02e5343a768e1ca6cc4b670e51d3a9e294c7815f57ecfbaf552b6235201671098d23cdcdc72c6d369dea40501905f03aabc3b45b032f84e0374462be03a78b0b94e8032feb5d0f1a590e6f53df8a13ba939d66e6126962efe821e1ad6daa34d5f78cac702992b7d304f074f26b5b13ea4e3210613024cda7a80d10b0b62a3c183abffbe1511de80276441159d154d13d78ee5c45873dc3f333d45f9fb6d086200faa5e26eb1b2fe340523db71e06b778bfa7a64a184c8446123cae2bdbbb14eda20e2cb5c0dc33389b3bf94ceab258e187e6f44bc6ff8970f573fdd8d23fc22d8d82cf4482b262d2b730b0d9103900248b54cac9cbf5fb730293ec3614484388f2e4e8259c8a05a809bb845d0e522ff99a9d0dcf153e8e9beffe596ff03369fd73d71a944242900d4d3076a91f54667d0d0b46d84dbbe7bc1722edfacf6b5c4bf7d825ec74cc74c0430dcfdee70824b90db8e3dc34ee69213c7e2993a1eed2fa6e9567693a65af58c948682245a79b7d74d74c73c52e9c91bcab1a2c5f0829d6d9a619c67c8145e2b795cfe733f4f775c36d502d18b7a0ed7655b6919d5e93ba427395eba80f6430a0ce3ea426720fc3213713b4c392687a7e6d1235cbafb64000994fbaa1e89f8dbb2c5eebc638cb43f0b26d17b5e2797834d31552813538e6c887ad141cad3ed1a7b192f9de7b03a2186de54eb7d474cda2919c170eb0cd0cdaedd238761d8fa94d3c2cf2ad192512840b6dff09e509b50a54952c89ee4f294c9a3deaaa92fc54439220d017b0cc200143d45c88642c58f68cc824e54b8be725a1eec3c7fc7a53078ea096726d734cfb851bce54dfc8136426872c08e644269e42f35a6b5195366ca48c7b674bd067c2eff4bf56361404832c7d8938b6b129a141a4139f32653a7cfcfc33315043d5998e021df500627c261953d28fbf008c5dc69d3b8a28d1fafbe6a8961cb1182758a859a7550bff4c52827bac4e5a48074fcea73c477b666c6bf2607e90de9a047211fb7fdf6f8f479bcbdd151603510602eb94bf359de5efbd462ce6a65372b0d525cd3551e0a171a6075048c9649b124d7693d069e7b8b51fe048bb1ec5288db48137ea85fa63a2e5fb6808aec206c820b1c12ddc3c1ea4f003a180dfe2d0d60f40e604ea3302f2c8416bf310d9dd5aa2d088560eea37e489a766d95ee56f163cef6ab9b9c2707de7f4c5b4deb6f56630e4abb7595a88d1cee884957f38dfdec4ac110998faed8434c6137daed048433edd843701e6436134fad59dde9e34be34e81af2ce86ee7c5c69f7cc9f8e9b3badbf7a77e969c1a58af6f83adbb3780d4441a3d129f4490e7825794a84efab87bcbf12930c0464c994baa4c054ead8bcde9c416d6be40c2218851ec086b9b473ab8cd77701245147dc6ab211090d7814745218ac76d58a5b4573d8ca443a0db5236a117544b511423fe4ab77bad927bd4a612b5663d26136233215146bd4052826033cd8d324881ece44e72f417a05f77a8ec9760f56b45377055523b517c9985ebc5402b12804aaa35a3a496e137cf6c7871f3f2b83b8d97525be74892cf24a030e28e0d6496bbdba13e773ce04c87a719ee3b49d620f922664150d84cf612b790197bb9b944e301755962a2d7bf04a8712390c9c2e3f3aeefd1fbae96986595f22abe1ee49daf50bfcff6a3912db97c1c98dcf57b27c26cc112301211fda1750389c0e23be2ab6", 0x1000, 0x8, 0x0, 0x1, r13}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0xeb53f2b93da2948e, 0x5, r0, &(0x7f0000001700)="a17860303d42d00a99d6db118da3d547cf8541ee09f57b5c61655e7d126680440163c4bb91fad202e0778bf19e73d1ca3ecc2984b0a5f205d8783922831b48626c23e9ac59fd32928108e20e4dfe13f546719aa4ecfc7628c89ebd2bf2a5e35299abb1", 0x63, 0xffff, 0x0, 0x2, r15}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x5, 0x7, r16, &(0x7f00000017c0)="0a46cb5c0d373d917124045ec01ce874a885a681ea500bbb2b2aedbb870f9bac9d8897a953b65188be62", 0x2a, 0x9c, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000001840)="60779ca4629a", 0x6, 0x5, 0x0, 0x1}]) r17 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r18 = fcntl$dupfd(r17, 0x0, r2) ioctl$EVIOCGPROP(r18, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r19+30000000}, 0x0) 12:53:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:45 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1309.945334] FAULT_INJECTION: forcing a failure. [ 1309.945334] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.000578] CPU: 1 PID: 31373 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1310.008926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.019232] Call Trace: [ 1310.022578] dump_stack+0x197/0x210 [ 1310.026239] should_fail.cold+0xa/0x1b [ 1310.030599] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1310.035749] ? lock_downgrade+0x880/0x880 [ 1310.040292] __should_failslab+0x121/0x190 [ 1310.045522] should_failslab+0x9/0x14 [ 1310.049728] kmem_cache_alloc+0x2ae/0x700 [ 1310.054177] ? lock_downgrade+0x880/0x880 [ 1310.058361] __kernfs_new_node+0xef/0x6f0 [ 1310.062723] ? kasan_check_write+0x14/0x20 [ 1310.067710] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1310.073703] ? wait_for_completion+0x440/0x440 [ 1310.080154] ? mutex_unlock+0xd/0x10 [ 1310.085723] ? kernfs_activate+0x192/0x1f0 [ 1310.091682] kernfs_new_node+0x99/0x130 [ 1310.096043] __kernfs_create_file+0x51/0x33b 12:53:45 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{}]}) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1310.100574] sysfs_add_file_mode_ns+0x222/0x560 [ 1310.105677] internal_create_group+0x383/0xc30 [ 1310.110569] ? remove_files.isra.0+0x190/0x190 [ 1310.116192] ? kernfs_put+0x3c2/0x5d0 [ 1310.120197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1310.126032] ? kernfs_create_link+0x1d2/0x250 [ 1310.131524] sysfs_create_groups+0x9b/0x141 [ 1310.136239] device_add+0x12de/0x1760 [ 1310.140290] ? get_device_parent.isra.0+0x570/0x570 [ 1310.145869] ? __init_waitqueue_head+0x36/0x90 [ 1310.151265] ? pm_runtime_init+0x347/0x400 [ 1310.155902] netdev_register_kobject+0x183/0x3b0 [ 1310.160937] register_netdevice+0x875/0xff0 [ 1310.165302] ? netdev_change_features+0xb0/0xb0 [ 1310.170719] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1310.176393] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1310.181850] ? ip6gre_tunnel_init+0x340/0x340 [ 1310.186380] ? lockdep_rtnl_is_held+0x26/0x30 [ 1310.190904] ? ip6gre_tunnel_find+0x496/0x640 [ 1310.195509] ip6gre_newlink+0x298/0x7a0 [ 1310.199484] ? ip6gre_changelink+0x560/0x560 [ 1310.203901] rtnl_newlink+0x1042/0x1600 [ 1310.207897] ? rtnl_link_unregister+0x250/0x250 [ 1310.212888] ? mark_held_locks+0x100/0x100 [ 1310.217747] ? debug_smp_processor_id+0x1c/0x20 [ 1310.222537] ? is_bpf_text_address+0xac/0x170 [ 1310.227401] ? find_held_lock+0x35/0x130 [ 1310.231472] ? is_bpf_text_address+0xac/0x170 [ 1310.235968] ? __lock_acquire+0x6ee/0x49c0 [ 1310.240201] ? __lock_acquire+0x6ee/0x49c0 [ 1310.244449] ? lock_downgrade+0x880/0x880 [ 1310.248805] ? mark_held_locks+0x100/0x100 [ 1310.253125] ? debug_smp_processor_id+0x1c/0x20 [ 1310.257881] ? perf_trace_lock_acquire+0xf5/0x580 [ 1310.262751] ? mark_held_locks+0x100/0x100 [ 1310.266994] ? debug_smp_processor_id+0x1c/0x20 [ 1310.271674] ? perf_trace_lock_acquire+0xf5/0x580 [ 1310.276574] ? find_held_lock+0x35/0x130 [ 1310.280657] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1310.285070] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1310.290609] ? rtnl_link_unregister+0x250/0x250 [ 1310.295724] rtnetlink_rcv_msg+0x463/0xb00 [ 1310.300054] ? rtnetlink_put_metrics+0x560/0x560 [ 1310.304892] ? netdev_pick_tx+0x300/0x300 [ 1310.309091] ? netlink_deliver_tap+0x22d/0xc20 [ 1310.313704] ? find_held_lock+0x35/0x130 [ 1310.317813] netlink_rcv_skb+0x17d/0x460 [ 1310.321973] ? rtnetlink_put_metrics+0x560/0x560 [ 1310.326908] ? netlink_ack+0xb30/0xb30 [ 1310.330827] ? kasan_check_read+0x11/0x20 [ 1310.335011] ? netlink_deliver_tap+0x254/0xc20 [ 1310.339628] rtnetlink_rcv+0x1d/0x30 [ 1310.343354] netlink_unicast+0x53a/0x730 [ 1310.347437] ? netlink_attachskb+0x770/0x770 [ 1310.351875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1310.357479] netlink_sendmsg+0x8ae/0xd70 [ 1310.361575] ? netlink_unicast+0x730/0x730 [ 1310.365841] ? selinux_socket_sendmsg+0x36/0x40 [ 1310.370508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1310.376066] ? security_socket_sendmsg+0x8d/0xc0 [ 1310.380937] ? netlink_unicast+0x730/0x730 [ 1310.385570] sock_sendmsg+0xd7/0x130 [ 1310.389282] ___sys_sendmsg+0x803/0x920 [ 1310.393267] ? copy_msghdr_from_user+0x430/0x430 [ 1310.398215] ? lock_downgrade+0x880/0x880 [ 1310.402362] ? kasan_check_read+0x11/0x20 [ 1310.406524] ? __fget+0x367/0x540 [ 1310.410006] ? iterate_fd+0x360/0x360 [ 1310.413829] ? __fget_light+0x1a9/0x230 [ 1310.417817] ? __fdget+0x1b/0x20 [ 1310.421284] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1310.426919] __sys_sendmsg+0x105/0x1d0 [ 1310.430830] ? __ia32_sys_shutdown+0x80/0x80 [ 1310.436134] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1310.440891] ? do_syscall_64+0x26/0x620 [ 1310.444873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1310.450261] ? do_syscall_64+0x26/0x620 [ 1310.454335] __x64_sys_sendmsg+0x78/0xb0 [ 1310.458409] do_syscall_64+0xfd/0x620 [ 1310.462219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1310.467417] RIP: 0033:0x45af49 [ 1310.471227] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1310.493039] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1310.500813] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1310.508208] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1310.515474] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1310.522755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1310.530107] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:46 executing program 1 (fault-call:4 fault-nth:57): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:46 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x2) 12:53:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) sendmsg$nl_crypto(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@getstat={0xe0, 0x15, 0x200, 0x70bd29, 0x25dfdbff, {{'streebog256-generic\x00'}, [], [], 0x200, 0x5f4660126d25966}, ["", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008004}, 0x10) [ 1310.649853] FAULT_INJECTION: forcing a failure. [ 1310.649853] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.664707] CPU: 1 PID: 31590 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1310.672825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.683424] Call Trace: [ 1310.686017] dump_stack+0x197/0x210 [ 1310.689646] should_fail.cold+0xa/0x1b [ 1310.693555] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1310.698686] ? lock_downgrade+0x880/0x880 [ 1310.702866] __should_failslab+0x121/0x190 [ 1310.707129] should_failslab+0x9/0x14 [ 1310.710950] kmem_cache_alloc+0x2ae/0x700 [ 1310.715116] ? lock_downgrade+0x880/0x880 [ 1310.719262] __kernfs_new_node+0xef/0x6f0 [ 1310.723412] ? kasan_check_write+0x14/0x20 [ 1310.727641] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1310.732401] ? wait_for_completion+0x440/0x440 [ 1310.736988] ? mutex_unlock+0xd/0x10 [ 1310.740713] ? kernfs_activate+0x192/0x1f0 [ 1310.744944] kernfs_new_node+0x99/0x130 [ 1310.748921] __kernfs_create_file+0x51/0x33b [ 1310.753337] sysfs_add_file_mode_ns+0x222/0x560 [ 1310.758006] internal_create_group+0x383/0xc30 [ 1310.762589] ? remove_files.isra.0+0x190/0x190 [ 1310.767163] ? kernfs_put+0x3c2/0x5d0 [ 1310.770975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1310.776517] ? kernfs_create_link+0x1d2/0x250 [ 1310.781019] sysfs_create_groups+0x9b/0x141 [ 1310.785332] device_add+0x12de/0x1760 [ 1310.789130] ? get_device_parent.isra.0+0x570/0x570 [ 1310.794138] ? __init_waitqueue_head+0x36/0x90 [ 1310.798715] ? pm_runtime_init+0x347/0x400 [ 1310.802945] netdev_register_kobject+0x183/0x3b0 [ 1310.808044] register_netdevice+0x875/0xff0 [ 1310.812363] ? netdev_change_features+0xb0/0xb0 [ 1310.817022] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1310.822575] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1310.827855] ? ip6gre_tunnel_init+0x340/0x340 [ 1310.832434] ? lockdep_rtnl_is_held+0x26/0x30 [ 1310.836936] ? ip6gre_tunnel_find+0x496/0x640 [ 1310.841437] ip6gre_newlink+0x298/0x7a0 [ 1310.845415] ? ip6gre_changelink+0x560/0x560 [ 1310.849838] rtnl_newlink+0x1042/0x1600 [ 1310.853818] ? rtnl_link_unregister+0x250/0x250 [ 1310.858493] ? mark_held_locks+0x100/0x100 [ 1310.862738] ? is_bpf_text_address+0xac/0x170 [ 1310.867238] ? find_held_lock+0x35/0x130 [ 1310.871299] ? is_bpf_text_address+0xac/0x170 [ 1310.875791] ? __lock_acquire+0x6ee/0x49c0 [ 1310.880020] ? __lock_acquire+0x6ee/0x49c0 [ 1310.884247] ? lock_downgrade+0x880/0x880 [ 1310.888396] ? mark_held_locks+0x100/0x100 [ 1310.892629] ? mark_held_locks+0x100/0x100 [ 1310.896856] ? __kernel_text_address+0xd/0x40 [ 1310.901799] ? mark_held_locks+0x100/0x100 [ 1310.906037] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1310.910701] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1310.915745] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1310.920793] ? find_held_lock+0x35/0x130 [ 1310.924846] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1310.929281] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1310.934931] ? rtnl_link_unregister+0x250/0x250 [ 1310.939716] rtnetlink_rcv_msg+0x463/0xb00 [ 1310.944110] ? rtnetlink_put_metrics+0x560/0x560 [ 1310.948885] ? netdev_pick_tx+0x300/0x300 [ 1310.953062] ? netlink_deliver_tap+0x22d/0xc20 [ 1310.957643] ? find_held_lock+0x35/0x130 [ 1310.961715] netlink_rcv_skb+0x17d/0x460 [ 1310.965834] ? rtnetlink_put_metrics+0x560/0x560 [ 1310.970592] ? netlink_ack+0xb30/0xb30 [ 1310.974476] ? kasan_check_read+0x11/0x20 [ 1310.978625] ? netlink_deliver_tap+0x254/0xc20 [ 1310.983207] rtnetlink_rcv+0x1d/0x30 [ 1310.986924] netlink_unicast+0x53a/0x730 [ 1310.990984] ? netlink_attachskb+0x770/0x770 [ 1310.995391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1311.000925] netlink_sendmsg+0x8ae/0xd70 [ 1311.004986] ? netlink_unicast+0x730/0x730 [ 1311.009216] ? selinux_socket_sendmsg+0x36/0x40 [ 1311.013881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1311.019407] ? security_socket_sendmsg+0x8d/0xc0 [ 1311.024156] ? netlink_unicast+0x730/0x730 [ 1311.028384] sock_sendmsg+0xd7/0x130 [ 1311.032093] ___sys_sendmsg+0x803/0x920 [ 1311.036085] ? copy_msghdr_from_user+0x430/0x430 [ 1311.040855] ? lock_downgrade+0x880/0x880 [ 1311.045008] ? kasan_check_read+0x11/0x20 [ 1311.049156] ? __fget+0x367/0x540 [ 1311.052603] ? iterate_fd+0x360/0x360 [ 1311.056400] ? __fget_light+0x1a9/0x230 [ 1311.060364] ? __fdget+0x1b/0x20 [ 1311.063721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1311.069253] __sys_sendmsg+0x105/0x1d0 [ 1311.073130] ? __ia32_sys_shutdown+0x80/0x80 [ 1311.077537] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1311.082293] ? do_syscall_64+0x26/0x620 [ 1311.086255] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1311.091607] ? do_syscall_64+0x26/0x620 [ 1311.095589] __x64_sys_sendmsg+0x78/0xb0 [ 1311.099640] do_syscall_64+0xfd/0x620 [ 1311.103436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1311.108611] RIP: 0033:0x45af49 [ 1311.111804] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1311.131312] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1311.139010] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:46 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1311.146280] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1311.153572] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1311.160961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1311.168391] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:46 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, 0xffffffffffffffff, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 12:53:46 executing program 1 (fault-call:4 fault-nth:58): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:46 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:46 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x21020, 0x3480}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x8, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000280)={0x1718000, 0xbc56, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x500d8, 0xde, [], @p_u32=&(0x7f0000000140)=0x7}}) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)=0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) fcntl$dupfd(r7, 0x0, r0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101002, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r9, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x2, {0x20, 0x2, 0x0, 0x3}}) ioctl$UI_GET_VERSION(r8, 0x8004552d, &(0x7f0000000100)) [ 1311.457926] FAULT_INJECTION: forcing a failure. [ 1311.457926] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.485826] CPU: 0 PID: 31709 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1311.493673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.503032] Call Trace: [ 1311.505629] dump_stack+0x197/0x210 [ 1311.509265] should_fail.cold+0xa/0x1b [ 1311.513168] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1311.518272] ? lock_downgrade+0x880/0x880 [ 1311.522437] __should_failslab+0x121/0x190 [ 1311.526688] should_failslab+0x9/0x14 [ 1311.530492] kmem_cache_alloc+0x2ae/0x700 [ 1311.535090] ? lock_downgrade+0x880/0x880 [ 1311.539238] __kernfs_new_node+0xef/0x6f0 [ 1311.543381] ? kasan_check_write+0x14/0x20 [ 1311.547618] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1311.552403] ? wait_for_completion+0x440/0x440 [ 1311.556988] ? mutex_unlock+0xd/0x10 [ 1311.560720] ? kernfs_activate+0x192/0x1f0 [ 1311.564955] kernfs_new_node+0x99/0x130 [ 1311.568938] __kernfs_create_file+0x51/0x33b [ 1311.573356] sysfs_add_file_mode_ns+0x222/0x560 [ 1311.578028] internal_create_group+0x383/0xc30 [ 1311.582639] ? remove_files.isra.0+0x190/0x190 [ 1311.587217] ? kernfs_put+0x3c2/0x5d0 [ 1311.591019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1311.596554] ? kernfs_create_link+0x1d2/0x250 [ 1311.601051] sysfs_create_groups+0x9b/0x141 [ 1311.605390] device_add+0x12de/0x1760 [ 1311.609188] ? get_device_parent.isra.0+0x570/0x570 [ 1311.614200] ? __init_waitqueue_head+0x36/0x90 [ 1311.618785] ? pm_runtime_init+0x347/0x400 [ 1311.623022] netdev_register_kobject+0x183/0x3b0 [ 1311.627778] register_netdevice+0x875/0xff0 [ 1311.632099] ? netdev_change_features+0xb0/0xb0 [ 1311.636761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1311.642310] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1311.647495] ? ip6gre_tunnel_init+0x340/0x340 [ 1311.651987] ? lockdep_rtnl_is_held+0x26/0x30 [ 1311.656511] ? ip6gre_tunnel_find+0x496/0x640 [ 1311.661023] ip6gre_newlink+0x298/0x7a0 [ 1311.665015] ? ip6gre_changelink+0x560/0x560 [ 1311.669431] rtnl_newlink+0x1042/0x1600 [ 1311.673418] ? rtnl_link_unregister+0x250/0x250 [ 1311.678085] ? mark_held_locks+0x100/0x100 [ 1311.682327] ? debug_smp_processor_id+0x1c/0x20 [ 1311.687007] ? is_bpf_text_address+0xac/0x170 [ 1311.691517] ? find_held_lock+0x35/0x130 [ 1311.695584] ? is_bpf_text_address+0xac/0x170 [ 1311.700163] ? __lock_acquire+0x6ee/0x49c0 [ 1311.704396] ? __lock_acquire+0x6ee/0x49c0 [ 1311.708652] ? lock_downgrade+0x880/0x880 [ 1311.712826] ? mark_held_locks+0x100/0x100 [ 1311.717063] ? debug_smp_processor_id+0x1c/0x20 [ 1311.721826] ? perf_trace_lock_acquire+0xf5/0x580 [ 1311.726713] ? mark_held_locks+0x100/0x100 [ 1311.730950] ? debug_smp_processor_id+0x1c/0x20 [ 1311.735708] ? perf_trace_lock_acquire+0xf5/0x580 [ 1311.740605] ? find_held_lock+0x35/0x130 [ 1311.744665] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1311.749084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1311.754644] ? rtnl_link_unregister+0x250/0x250 [ 1311.759319] rtnetlink_rcv_msg+0x463/0xb00 [ 1311.763553] ? rtnetlink_put_metrics+0x560/0x560 [ 1311.768316] ? netdev_pick_tx+0x300/0x300 [ 1311.773256] ? netlink_deliver_tap+0x22d/0xc20 [ 1311.777836] ? find_held_lock+0x35/0x130 [ 1311.781899] netlink_rcv_skb+0x17d/0x460 [ 1311.785970] ? rtnetlink_put_metrics+0x560/0x560 [ 1311.791028] ? netlink_ack+0xb30/0xb30 [ 1311.794938] ? kasan_check_read+0x11/0x20 [ 1311.799111] ? netlink_deliver_tap+0x254/0xc20 [ 1311.803707] rtnetlink_rcv+0x1d/0x30 [ 1311.807422] netlink_unicast+0x53a/0x730 [ 1311.811494] ? netlink_attachskb+0x770/0x770 [ 1311.815908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1311.821446] netlink_sendmsg+0x8ae/0xd70 [ 1311.825520] ? netlink_unicast+0x730/0x730 [ 1311.829756] ? selinux_socket_sendmsg+0x36/0x40 [ 1311.834428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1311.839969] ? security_socket_sendmsg+0x8d/0xc0 [ 1311.844722] ? netlink_unicast+0x730/0x730 [ 1311.848961] sock_sendmsg+0xd7/0x130 [ 1311.852673] ___sys_sendmsg+0x803/0x920 [ 1311.856644] ? copy_msghdr_from_user+0x430/0x430 [ 1311.861421] ? lock_downgrade+0x880/0x880 [ 1311.865565] ? kasan_check_read+0x11/0x20 [ 1311.869720] ? __fget+0x367/0x540 [ 1311.873171] ? iterate_fd+0x360/0x360 [ 1311.876976] ? __fget_light+0x1a9/0x230 [ 1311.880949] ? __fdget+0x1b/0x20 [ 1311.884317] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1311.889860] __sys_sendmsg+0x105/0x1d0 [ 1311.893743] ? __ia32_sys_shutdown+0x80/0x80 [ 1311.898161] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1311.902913] ? do_syscall_64+0x26/0x620 [ 1311.906883] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1311.912244] ? do_syscall_64+0x26/0x620 [ 1311.916244] __x64_sys_sendmsg+0x78/0xb0 [ 1311.920453] do_syscall_64+0xfd/0x620 [ 1311.924274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1311.929478] RIP: 0033:0x45af49 [ 1311.932681] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1311.951593] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1311.959309] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1311.966572] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1311.973834] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1311.981097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1311.988366] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:47 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x6fe0, 0x648500) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000400)=""/170) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 12:53:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0xff, 0x0, 0x0, 0x0, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa62f74df9425acd0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x402000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000ee00000000000000aa0000001da965cda73210c8812c119a2f19c9cfa30ce0a787b7d119abe432c221a078e918fa5c7ab33688d7a22c32f7c3bd17cd1a1a89303bd900872c9440cd9f2888166231b49d9d54e3d0c00a28efee1a5122ad928bc02dd99e440604d680d6d23e7ce986ee8f995f47d047723d6650c3e83250a7aa6c5c4f3f44072edd5c799860b4289b313c1538826c88faf760f26596cca71e5fc852b2d674c833a81f852718467ffd31d98975f883615a"], &(0x7f0000000040)=0xce) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000140)) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0xb0042, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x8, 0x1) write$ppp(r3, &(0x7f0000000080)="814fa8189f98fdeff19d21f2b9a5ee5ec262ec9979185c6473ad5ec510ed8bc1971380bfee1589c36c2d91d5bf6f4a866a4364600039f7ca1e768f", 0x3b) 12:53:47 executing program 1 (fault-call:4 fault-nth:59): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1312.148998] FAULT_INJECTION: forcing a failure. [ 1312.148998] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.161392] CPU: 0 PID: 31827 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1312.169207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.178567] Call Trace: [ 1312.181166] dump_stack+0x197/0x210 [ 1312.184830] should_fail.cold+0xa/0x1b [ 1312.188722] ? is_bpf_text_address+0xd3/0x170 [ 1312.193230] ? fault_create_debugfs_attr+0x1e0/0x1e0 12:53:47 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, 0xffffffffffffffff, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1312.198351] ? __kernel_text_address+0xd/0x40 [ 1312.202861] ? unwind_get_return_address+0x61/0xa0 [ 1312.207820] __should_failslab+0x121/0x190 [ 1312.212079] should_failslab+0x9/0x14 [ 1312.215899] kmem_cache_alloc+0x47/0x700 [ 1312.219988] ? save_stack+0xa9/0xd0 [ 1312.223731] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 1312.229384] idr_get_free+0x527/0xa28 [ 1312.233231] idr_alloc_u32+0x1d6/0x390 [ 1312.237152] ? __fprop_inc_percpu_max+0x230/0x230 [ 1312.242054] ? __lock_is_held+0xb6/0x140 [ 1312.246138] ? should_fail+0x14d/0x85c [ 1312.250062] ? __lock_is_held+0xb6/0x140 [ 1312.254152] idr_alloc_cyclic+0x132/0x270 [ 1312.258338] ? idr_alloc+0x150/0x150 [ 1312.262427] ? kasan_check_write+0x14/0x20 [ 1312.266682] ? do_raw_spin_lock+0xd7/0x250 [ 1312.270947] __kernfs_new_node+0x139/0x6f0 [ 1312.275211] ? kasan_check_write+0x14/0x20 [ 1312.279467] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1312.285206] ? wait_for_completion+0x440/0x440 [ 1312.289955] ? mutex_unlock+0xd/0x10 [ 1312.293814] ? kernfs_activate+0x192/0x1f0 [ 1312.298087] kernfs_new_node+0x99/0x130 [ 1312.302213] __kernfs_create_file+0x51/0x33b [ 1312.306641] sysfs_add_file_mode_ns+0x222/0x560 [ 1312.311325] internal_create_group+0x383/0xc30 [ 1312.315925] ? remove_files.isra.0+0x190/0x190 [ 1312.320503] ? kernfs_put+0x3c2/0x5d0 [ 1312.324300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1312.329841] ? kernfs_create_link+0x1d2/0x250 [ 1312.334338] sysfs_create_groups+0x9b/0x141 [ 1312.338653] device_add+0x12de/0x1760 [ 1312.342449] ? get_device_parent.isra.0+0x570/0x570 [ 1312.347459] ? __init_waitqueue_head+0x36/0x90 [ 1312.352034] ? pm_runtime_init+0x347/0x400 [ 1312.356275] netdev_register_kobject+0x183/0x3b0 [ 1312.361035] register_netdevice+0x875/0xff0 [ 1312.365361] ? netdev_change_features+0xb0/0xb0 [ 1312.371021] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1312.376577] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1312.381768] ? ip6gre_tunnel_init+0x340/0x340 [ 1312.386264] ? lockdep_rtnl_is_held+0x26/0x30 [ 1312.390751] ? ip6gre_tunnel_find+0x496/0x640 [ 1312.395250] ip6gre_newlink+0x298/0x7a0 [ 1312.399231] ? ip6gre_changelink+0x560/0x560 [ 1312.403644] rtnl_newlink+0x1042/0x1600 [ 1312.407623] ? rtnl_link_unregister+0x250/0x250 [ 1312.412293] ? mark_held_locks+0x100/0x100 [ 1312.416529] ? is_bpf_text_address+0xac/0x170 [ 1312.421104] ? find_held_lock+0x35/0x130 [ 1312.425272] ? is_bpf_text_address+0xac/0x170 [ 1312.429769] ? __lock_acquire+0x6ee/0x49c0 [ 1312.433998] ? __lock_acquire+0x6ee/0x49c0 [ 1312.438224] ? lock_downgrade+0x880/0x880 [ 1312.442372] ? mark_held_locks+0x100/0x100 [ 1312.446599] ? mark_held_locks+0x100/0x100 [ 1312.450823] ? __kernel_text_address+0xd/0x40 [ 1312.455349] ? mark_held_locks+0x100/0x100 [ 1312.459615] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1312.464300] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1312.469331] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1312.474396] ? find_held_lock+0x35/0x130 [ 1312.478455] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1312.482966] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1312.488496] ? rtnl_link_unregister+0x250/0x250 [ 1312.493158] rtnetlink_rcv_msg+0x463/0xb00 [ 1312.497388] ? rtnetlink_put_metrics+0x560/0x560 [ 1312.502135] ? netdev_pick_tx+0x300/0x300 [ 1312.506275] ? netlink_deliver_tap+0x22d/0xc20 [ 1312.511121] ? find_held_lock+0x35/0x130 [ 1312.515176] netlink_rcv_skb+0x17d/0x460 [ 1312.519230] ? rtnetlink_put_metrics+0x560/0x560 [ 1312.523979] ? netlink_ack+0xb30/0xb30 [ 1312.527867] ? kasan_check_read+0x11/0x20 [ 1312.532008] ? netlink_deliver_tap+0x254/0xc20 [ 1312.536674] rtnetlink_rcv+0x1d/0x30 [ 1312.540378] netlink_unicast+0x53a/0x730 [ 1312.544954] ? netlink_attachskb+0x770/0x770 [ 1312.549356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1312.554888] netlink_sendmsg+0x8ae/0xd70 [ 1312.558946] ? netlink_unicast+0x730/0x730 [ 1312.563176] ? selinux_socket_sendmsg+0x36/0x40 [ 1312.567835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1312.573372] ? security_socket_sendmsg+0x8d/0xc0 [ 1312.578132] ? netlink_unicast+0x730/0x730 [ 1312.582379] sock_sendmsg+0xd7/0x130 [ 1312.586106] ___sys_sendmsg+0x803/0x920 [ 1312.590086] ? copy_msghdr_from_user+0x430/0x430 [ 1312.594838] ? lock_downgrade+0x880/0x880 [ 1312.598976] ? kasan_check_read+0x11/0x20 [ 1312.603115] ? __fget+0x367/0x540 [ 1312.606562] ? iterate_fd+0x360/0x360 [ 1312.610362] ? __fget_light+0x1a9/0x230 [ 1312.614339] ? __fdget+0x1b/0x20 [ 1312.617716] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1312.624114] __sys_sendmsg+0x105/0x1d0 [ 1312.627992] ? __ia32_sys_shutdown+0x80/0x80 [ 1312.632411] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1312.637159] ? do_syscall_64+0x26/0x620 [ 1312.641125] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1312.646476] ? do_syscall_64+0x26/0x620 [ 1312.650462] __x64_sys_sendmsg+0x78/0xb0 [ 1312.654622] do_syscall_64+0xfd/0x620 [ 1312.658428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1312.663619] RIP: 0033:0x45af49 [ 1312.666809] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1312.685707] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.693415] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:48 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, [], "cce0cbda5b3e952632a2f1f359bfc0d6"}) perf_event_open(&(0x7f0000000180)={0x2, 0x2, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$UI_DEV_DESTROY(r3, 0x5502) [ 1312.700672] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1312.707934] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1312.715235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1312.722504] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:48 executing program 1 (fault-call:4 fault-nth:60): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:48 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1312.914803] FAULT_INJECTION: forcing a failure. [ 1312.914803] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.930569] CPU: 0 PID: 32028 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1312.938430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.947811] Call Trace: [ 1312.950423] dump_stack+0x197/0x210 [ 1312.954109] should_fail.cold+0xa/0x1b [ 1312.958010] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1312.963128] ? lock_downgrade+0x880/0x880 [ 1312.967275] __should_failslab+0x121/0x190 [ 1312.971506] should_failslab+0x9/0x14 [ 1312.975295] kmem_cache_alloc+0x2ae/0x700 [ 1312.979436] ? lock_downgrade+0x880/0x880 [ 1312.983580] __kernfs_new_node+0xef/0x6f0 [ 1312.987750] ? kasan_check_write+0x14/0x20 [ 1312.991977] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1312.996858] ? wait_for_completion+0x440/0x440 [ 1313.001513] ? mutex_unlock+0xd/0x10 [ 1313.005240] ? kernfs_activate+0x192/0x1f0 [ 1313.009510] kernfs_new_node+0x99/0x130 [ 1313.013506] __kernfs_create_file+0x51/0x33b [ 1313.017912] sysfs_add_file_mode_ns+0x222/0x560 [ 1313.022593] internal_create_group+0x383/0xc30 [ 1313.027178] ? remove_files.isra.0+0x190/0x190 [ 1313.031760] ? kernfs_put+0x3c2/0x5d0 [ 1313.035557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1313.041086] ? kernfs_create_link+0x1d2/0x250 [ 1313.045579] sysfs_create_groups+0x9b/0x141 [ 1313.049892] device_add+0x12de/0x1760 [ 1313.053693] ? get_device_parent.isra.0+0x570/0x570 [ 1313.058701] ? __init_waitqueue_head+0x36/0x90 [ 1313.063275] ? pm_runtime_init+0x347/0x400 [ 1313.067506] netdev_register_kobject+0x183/0x3b0 [ 1313.072258] register_netdevice+0x875/0xff0 [ 1313.076573] ? netdev_change_features+0xb0/0xb0 [ 1313.081366] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1313.086919] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1313.092126] ? ip6gre_tunnel_init+0x340/0x340 [ 1313.096742] ? lockdep_rtnl_is_held+0x26/0x30 [ 1313.101238] ? ip6gre_tunnel_find+0x496/0x640 [ 1313.105740] ip6gre_newlink+0x298/0x7a0 [ 1313.109715] ? ip6gre_changelink+0x560/0x560 [ 1313.114120] rtnl_newlink+0x1042/0x1600 [ 1313.118109] ? rtnl_link_unregister+0x250/0x250 [ 1313.122771] ? mark_held_locks+0x100/0x100 [ 1313.127019] ? __lock_acquire+0x6ee/0x49c0 [ 1313.131242] ? cpuacct_charge+0x1db/0x360 [ 1313.135381] ? __lock_is_held+0xb6/0x140 [ 1313.139440] ? mark_held_locks+0x100/0x100 [ 1313.143686] ? mark_held_locks+0x100/0x100 [ 1313.147911] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1313.152401] ? finish_task_switch+0x146/0x7c0 [ 1313.156886] ? finish_task_switch+0x118/0x7c0 [ 1313.161371] ? switch_mm_irqs_off+0x7fa/0x1360 [ 1313.165952] ? __mutex_lock+0xa67/0x1300 [ 1313.170091] ? find_held_lock+0x35/0x130 [ 1313.174183] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1313.179800] ? rtnl_link_unregister+0x250/0x250 [ 1313.184473] rtnetlink_rcv_msg+0x463/0xb00 [ 1313.188719] ? rtnetlink_put_metrics+0x560/0x560 [ 1313.193468] ? netdev_pick_tx+0x300/0x300 [ 1313.197617] ? netlink_deliver_tap+0x22d/0xc20 [ 1313.202202] ? find_held_lock+0x35/0x130 [ 1313.206529] netlink_rcv_skb+0x17d/0x460 [ 1313.210600] ? rtnetlink_put_metrics+0x560/0x560 [ 1313.215349] ? netlink_ack+0xb30/0xb30 [ 1313.219226] ? kasan_check_read+0x11/0x20 [ 1313.223368] ? netlink_deliver_tap+0x254/0xc20 [ 1313.227945] rtnetlink_rcv+0x1d/0x30 [ 1313.231650] netlink_unicast+0x53a/0x730 [ 1313.235721] ? netlink_attachskb+0x770/0x770 [ 1313.240122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1313.245652] netlink_sendmsg+0x8ae/0xd70 [ 1313.249711] ? netlink_unicast+0x730/0x730 [ 1313.253941] ? selinux_socket_sendmsg+0x36/0x40 [ 1313.258599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1313.264126] ? security_socket_sendmsg+0x8d/0xc0 [ 1313.268883] ? netlink_unicast+0x730/0x730 [ 1313.273110] sock_sendmsg+0xd7/0x130 [ 1313.276826] ___sys_sendmsg+0x803/0x920 [ 1313.280802] ? copy_msghdr_from_user+0x430/0x430 [ 1313.285563] ? lock_downgrade+0x880/0x880 [ 1313.289718] ? kasan_check_read+0x11/0x20 [ 1313.293875] ? __fget+0x367/0x540 [ 1313.297333] ? iterate_fd+0x360/0x360 [ 1313.301131] ? __fget_light+0x1a9/0x230 [ 1313.305104] ? __fdget+0x1b/0x20 [ 1313.308459] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1313.314004] __sys_sendmsg+0x105/0x1d0 [ 1313.319532] ? __ia32_sys_shutdown+0x80/0x80 [ 1313.323946] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1313.328690] ? do_syscall_64+0x26/0x620 [ 1313.332651] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1313.338014] ? do_syscall_64+0x26/0x620 [ 1313.342069] __x64_sys_sendmsg+0x78/0xb0 [ 1313.346120] do_syscall_64+0xfd/0x620 [ 1313.349932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1313.355109] RIP: 0033:0x45af49 [ 1313.358305] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1313.377326] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1313.385044] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1313.392306] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1313.399582] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1313.406853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 12:53:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x1, 0x3, [@random="4ada1a7ce251", @broadcast, @broadcast]}) recvfrom$netrom(r0, &(0x7f0000000040)=""/9, 0x9, 0x1, 0x0, 0x0) [ 1313.414202] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1313.422101] net_ratelimit: 22 callbacks suppressed [ 1313.422109] protocol 88fb is buggy, dev hsr_slave_0 [ 1313.422252] protocol 88fb is buggy, dev hsr_slave_0 [ 1313.427123] protocol 88fb is buggy, dev hsr_slave_1 [ 1313.432170] protocol 88fb is buggy, dev hsr_slave_1 [ 1313.437192] protocol 88fb is buggy, dev hsr_slave_0 12:53:48 executing program 1 (fault-call:4 fault-nth:61): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:49 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000003000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000380)=""/46) sched_setscheduler(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000480)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000580)=0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) setsockopt$packet_int(r9, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="8a9c69e605000000ed846a269ca438138b77062af22fb20223e0cb266470b41f4df4c211bbc746f66236f068542ce6585e580affcb0d68f600000000000000045c00"/79, @ANYRES32, @ANYRES32=r2, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32=r7], @ANYRES64, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32=0x0]], @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r3], 0x8, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x74d9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x3fe, 0x4, [], @ptr=0x20}}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000400)={0x0, @can, @ax25={0x3, @null, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x4}}, 0x4a7, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='gre0\x00', 0x4, 0x401, 0x3ff}) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x7fffffff, 0xdf0, 0xfff, 0x4, 0x901, 0x1}) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f0000000300)={0x40000016}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x80000000000, 0x90800) 12:53:49 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1313.589301] FAULT_INJECTION: forcing a failure. [ 1313.589301] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.610828] CPU: 1 PID: 32085 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1313.618946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.628321] Call Trace: [ 1313.630951] dump_stack+0x197/0x210 [ 1313.634620] should_fail.cold+0xa/0x1b [ 1313.638549] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1313.643683] ? lock_downgrade+0x880/0x880 [ 1313.647886] __should_failslab+0x121/0x190 [ 1313.652152] should_failslab+0x9/0x14 [ 1313.655984] kmem_cache_alloc+0x2ae/0x700 [ 1313.660239] ? lock_downgrade+0x880/0x880 [ 1313.665999] __kernfs_new_node+0xef/0x6f0 [ 1313.670175] ? kasan_check_write+0x14/0x20 [ 1313.674434] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1313.679211] ? wait_for_completion+0x440/0x440 [ 1313.683806] ? mutex_unlock+0xd/0x10 [ 1313.687533] ? kernfs_activate+0x192/0x1f0 [ 1313.692986] kernfs_new_node+0x99/0x130 [ 1313.696968] __kernfs_create_file+0x51/0x33b [ 1313.701376] sysfs_add_file_mode_ns+0x222/0x560 [ 1313.706051] internal_create_group+0x383/0xc30 [ 1313.710651] ? remove_files.isra.0+0x190/0x190 [ 1313.715226] ? kernfs_put+0x3c2/0x5d0 [ 1313.719038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1313.724573] ? kernfs_create_link+0x1d2/0x250 [ 1313.729070] sysfs_create_groups+0x9b/0x141 [ 1313.733406] device_add+0x12de/0x1760 [ 1313.737206] ? get_device_parent.isra.0+0x570/0x570 [ 1313.742222] ? __init_waitqueue_head+0x36/0x90 [ 1313.746801] ? pm_runtime_init+0x347/0x400 [ 1313.751042] netdev_register_kobject+0x183/0x3b0 [ 1313.755803] register_netdevice+0x875/0xff0 [ 1313.760124] ? netdev_change_features+0xb0/0xb0 [ 1313.764901] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1313.770443] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1313.775631] ? ip6gre_tunnel_init+0x340/0x340 [ 1313.780214] ? lockdep_rtnl_is_held+0x26/0x30 [ 1313.784708] ? ip6gre_tunnel_find+0x496/0x640 [ 1313.789208] ip6gre_newlink+0x298/0x7a0 [ 1313.793203] ? ip6gre_changelink+0x560/0x560 [ 1313.797611] rtnl_newlink+0x1042/0x1600 [ 1313.801610] ? rtnl_link_unregister+0x250/0x250 [ 1313.806280] ? mark_held_locks+0x100/0x100 [ 1313.810527] ? debug_smp_processor_id+0x1c/0x20 [ 1313.815200] ? is_bpf_text_address+0xac/0x170 [ 1313.819719] ? find_held_lock+0x35/0x130 [ 1313.823789] ? is_bpf_text_address+0xac/0x170 [ 1313.828289] ? __lock_acquire+0x6ee/0x49c0 [ 1313.832525] ? __lock_acquire+0x6ee/0x49c0 [ 1313.837722] ? lock_downgrade+0x880/0x880 [ 1313.841876] ? mark_held_locks+0x100/0x100 [ 1313.846109] ? debug_smp_processor_id+0x1c/0x20 [ 1313.850781] ? perf_trace_lock_acquire+0xf5/0x580 [ 1313.855657] ? mark_held_locks+0x100/0x100 [ 1313.859895] ? debug_smp_processor_id+0x1c/0x20 [ 1313.864565] ? perf_trace_lock_acquire+0xf5/0x580 [ 1313.869451] ? find_held_lock+0x35/0x130 [ 1313.873868] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1313.878293] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1313.883825] ? rtnl_link_unregister+0x250/0x250 [ 1313.889274] rtnetlink_rcv_msg+0x463/0xb00 [ 1313.893510] ? rtnetlink_put_metrics+0x560/0x560 [ 1313.898262] ? netdev_pick_tx+0x300/0x300 [ 1313.902681] ? netlink_deliver_tap+0x22d/0xc20 [ 1313.908053] ? find_held_lock+0x35/0x130 [ 1313.912119] netlink_rcv_skb+0x17d/0x460 [ 1313.916197] ? rtnetlink_put_metrics+0x560/0x560 [ 1313.920977] ? netlink_ack+0xb30/0xb30 [ 1313.924884] ? kasan_check_read+0x11/0x20 [ 1313.929038] ? netlink_deliver_tap+0x254/0xc20 [ 1313.933627] rtnetlink_rcv+0x1d/0x30 [ 1313.937348] netlink_unicast+0x53a/0x730 [ 1313.941412] ? netlink_attachskb+0x770/0x770 [ 1313.945819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1313.951355] netlink_sendmsg+0x8ae/0xd70 [ 1313.955515] ? netlink_unicast+0x730/0x730 [ 1313.959753] ? selinux_socket_sendmsg+0x36/0x40 [ 1313.964414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1313.969946] ? security_socket_sendmsg+0x8d/0xc0 [ 1313.974700] ? netlink_unicast+0x730/0x730 [ 1313.978943] sock_sendmsg+0xd7/0x130 [ 1313.982655] ___sys_sendmsg+0x803/0x920 [ 1313.986631] ? copy_msghdr_from_user+0x430/0x430 [ 1313.991387] ? lock_downgrade+0x880/0x880 [ 1313.995536] ? kasan_check_read+0x11/0x20 [ 1313.999682] ? __fget+0x367/0x540 [ 1314.003141] ? iterate_fd+0x360/0x360 [ 1314.006953] ? __fget_light+0x1a9/0x230 [ 1314.010925] ? __fdget+0x1b/0x20 [ 1314.014291] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1314.019830] __sys_sendmsg+0x105/0x1d0 [ 1314.023715] ? __ia32_sys_shutdown+0x80/0x80 [ 1314.028144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1314.032893] ? do_syscall_64+0x26/0x620 [ 1314.036860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.042214] ? do_syscall_64+0x26/0x620 [ 1314.046189] __x64_sys_sendmsg+0x78/0xb0 [ 1314.050264] do_syscall_64+0xfd/0x620 [ 1314.054068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.059249] RIP: 0033:0x45af49 [ 1314.062439] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1314.081358] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:53:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1314.089083] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1314.096345] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1314.103609] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1314.110871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1314.118150] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:49 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r0, 0x0, 0x0) keyctl$describe(0x11, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 12:53:49 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, 0xffffffffffffffff, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 12:53:49 executing program 1 (fault-call:4 fault-nth:62): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:49 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1314.368672] FAULT_INJECTION: forcing a failure. [ 1314.368672] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.392536] CPU: 0 PID: 32309 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1314.400399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.409766] Call Trace: [ 1314.412363] dump_stack+0x197/0x210 [ 1314.415990] should_fail.cold+0xa/0x1b [ 1314.419879] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1314.424996] ? lock_downgrade+0x880/0x880 [ 1314.429206] __should_failslab+0x121/0x190 [ 1314.433459] should_failslab+0x9/0x14 [ 1314.437294] kmem_cache_alloc+0x2ae/0x700 [ 1314.441475] ? lock_downgrade+0x880/0x880 [ 1314.445665] __kernfs_new_node+0xef/0x6f0 [ 1314.449827] ? kasan_check_write+0x14/0x20 [ 1314.454072] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1314.458844] ? wait_for_completion+0x440/0x440 [ 1314.463450] ? mutex_unlock+0xd/0x10 [ 1314.467190] ? kernfs_activate+0x192/0x1f0 [ 1314.472923] kernfs_new_node+0x99/0x130 [ 1314.477097] __kernfs_create_file+0x51/0x33b [ 1314.481533] sysfs_add_file_mode_ns+0x222/0x560 [ 1314.486239] internal_create_group+0x383/0xc30 [ 1314.490838] ? remove_files.isra.0+0x190/0x190 [ 1314.495430] ? kernfs_put+0x3c2/0x5d0 [ 1314.499222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1314.504767] ? kernfs_create_link+0x1d2/0x250 [ 1314.509268] sysfs_create_groups+0x9b/0x141 [ 1314.513578] device_add+0x12de/0x1760 [ 1314.517367] ? get_device_parent.isra.0+0x570/0x570 [ 1314.522396] ? __init_waitqueue_head+0x36/0x90 [ 1314.526988] ? pm_runtime_init+0x347/0x400 [ 1314.531214] netdev_register_kobject+0x183/0x3b0 [ 1314.535961] register_netdevice+0x875/0xff0 [ 1314.540280] ? netdev_change_features+0xb0/0xb0 [ 1314.544950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1314.550509] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1314.555686] ? ip6gre_tunnel_init+0x340/0x340 [ 1314.560167] ? lockdep_rtnl_is_held+0x26/0x30 [ 1314.564663] ? ip6gre_tunnel_find+0x496/0x640 [ 1314.569178] ip6gre_newlink+0x298/0x7a0 [ 1314.573273] ? ip6gre_changelink+0x560/0x560 [ 1314.577690] rtnl_newlink+0x1042/0x1600 [ 1314.581681] ? rtnl_link_unregister+0x250/0x250 [ 1314.586350] ? mark_held_locks+0x100/0x100 [ 1314.590605] ? is_bpf_text_address+0xac/0x170 [ 1314.595711] ? find_held_lock+0x35/0x130 [ 1314.599761] ? is_bpf_text_address+0xac/0x170 [ 1314.604355] ? __lock_acquire+0x6ee/0x49c0 [ 1314.608598] ? __lock_acquire+0x6ee/0x49c0 [ 1314.612833] ? lock_downgrade+0x880/0x880 [ 1314.616979] ? mark_held_locks+0x100/0x100 [ 1314.621232] ? mark_held_locks+0x100/0x100 [ 1314.625548] ? __kernel_text_address+0xd/0x40 [ 1314.630051] ? mark_held_locks+0x100/0x100 [ 1314.635000] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1314.639682] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1314.644709] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1314.649761] ? find_held_lock+0x35/0x130 [ 1314.653817] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1314.658224] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1314.663772] ? rtnl_link_unregister+0x250/0x250 [ 1314.668456] rtnetlink_rcv_msg+0x463/0xb00 [ 1314.672691] ? rtnetlink_put_metrics+0x560/0x560 [ 1314.677441] ? netdev_pick_tx+0x300/0x300 [ 1314.681613] ? netlink_deliver_tap+0x22d/0xc20 [ 1314.686204] ? find_held_lock+0x35/0x130 [ 1314.690267] netlink_rcv_skb+0x17d/0x460 [ 1314.694319] ? rtnetlink_put_metrics+0x560/0x560 [ 1314.699063] ? netlink_ack+0xb30/0xb30 [ 1314.702965] ? kasan_check_read+0x11/0x20 [ 1314.707213] ? netlink_deliver_tap+0x254/0xc20 [ 1314.711806] rtnetlink_rcv+0x1d/0x30 [ 1314.715516] netlink_unicast+0x53a/0x730 [ 1314.719665] ? netlink_attachskb+0x770/0x770 [ 1314.724090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1314.729633] netlink_sendmsg+0x8ae/0xd70 [ 1314.731086] protocol 88fb is buggy, dev hsr_slave_0 [ 1314.733696] ? netlink_unicast+0x730/0x730 [ 1314.738747] protocol 88fb is buggy, dev hsr_slave_1 [ 1314.742936] ? selinux_socket_sendmsg+0x36/0x40 [ 1314.742950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1314.742965] ? security_socket_sendmsg+0x8d/0xc0 [ 1314.742985] ? netlink_unicast+0x730/0x730 [ 1314.767445] sock_sendmsg+0xd7/0x130 [ 1314.771191] ___sys_sendmsg+0x803/0x920 [ 1314.775533] ? copy_msghdr_from_user+0x430/0x430 [ 1314.780297] ? lock_downgrade+0x880/0x880 [ 1314.784445] ? kasan_check_read+0x11/0x20 [ 1314.788585] ? __fget+0x367/0x540 [ 1314.792055] ? iterate_fd+0x360/0x360 [ 1314.795861] ? __fget_light+0x1a9/0x230 [ 1314.799831] ? __fdget+0x1b/0x20 [ 1314.803215] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1314.808741] __sys_sendmsg+0x105/0x1d0 [ 1314.812644] ? __ia32_sys_shutdown+0x80/0x80 [ 1314.817071] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1314.821826] ? do_syscall_64+0x26/0x620 [ 1314.825787] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.831150] ? do_syscall_64+0x26/0x620 [ 1314.835131] __x64_sys_sendmsg+0x78/0xb0 [ 1314.839182] do_syscall_64+0xfd/0x620 [ 1314.842993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.848172] RIP: 0033:0x45af49 [ 1314.851383] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:53:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x11, &(0x7f0000000000)='GPLcpusetself{%@\x00'}, 0x30) ptrace$setsig(0x4203, r2, 0x1, &(0x7f0000000100)={0x3b, 0xac3b, 0x3}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) [ 1314.870557] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1314.878260] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1314.885520] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1314.892870] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1314.900139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1314.907581] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:50 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) dup(0xffffffffffffffff) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:50 executing program 1 (fault-call:4 fault-nth:63): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:50 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0xfffffffffffffe33, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:50 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1315.097875] FAULT_INJECTION: forcing a failure. [ 1315.097875] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.114933] CPU: 1 PID: 32486 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1315.122777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.132148] Call Trace: [ 1315.134766] dump_stack+0x197/0x210 [ 1315.138425] should_fail.cold+0xa/0x1b [ 1315.142352] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1315.147484] ? lock_downgrade+0x880/0x880 [ 1315.151671] __should_failslab+0x121/0x190 [ 1315.155928] should_failslab+0x9/0x14 [ 1315.159759] kmem_cache_alloc+0x2ae/0x700 [ 1315.163940] ? lock_downgrade+0x880/0x880 [ 1315.168125] __kernfs_new_node+0xef/0x6f0 [ 1315.172343] ? kasan_check_write+0x14/0x20 [ 1315.176609] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1315.181520] ? wait_for_completion+0x440/0x440 [ 1315.186129] ? mutex_unlock+0xd/0x10 [ 1315.189995] ? kernfs_activate+0x192/0x1f0 [ 1315.194230] kernfs_new_node+0x99/0x130 [ 1315.198221] __kernfs_create_file+0x51/0x33b [ 1315.202672] sysfs_add_file_mode_ns+0x222/0x560 [ 1315.207372] internal_create_group+0x383/0xc30 [ 1315.211975] ? remove_files.isra.0+0x190/0x190 [ 1315.216551] ? kernfs_put+0x3c2/0x5d0 [ 1315.220376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1315.226021] ? kernfs_create_link+0x1d2/0x250 [ 1315.230555] sysfs_create_groups+0x9b/0x141 [ 1315.234883] device_add+0x12de/0x1760 [ 1315.238721] ? get_device_parent.isra.0+0x570/0x570 [ 1315.243808] ? __init_waitqueue_head+0x36/0x90 12:53:50 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x40, 0x4) sched_setscheduler(r0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r4], 0x8, 0x1) read$rfkill(r3, &(0x7f0000000000), 0x8) [ 1315.248405] ? pm_runtime_init+0x347/0x400 [ 1315.252838] netdev_register_kobject+0x183/0x3b0 [ 1315.257795] register_netdevice+0x875/0xff0 [ 1315.262131] ? netdev_change_features+0xb0/0xb0 [ 1315.266884] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1315.272438] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1315.277635] ? ip6gre_tunnel_init+0x340/0x340 [ 1315.282295] ? lockdep_rtnl_is_held+0x26/0x30 [ 1315.286816] ? ip6gre_tunnel_find+0x496/0x640 [ 1315.291550] ip6gre_newlink+0x298/0x7a0 [ 1315.295649] ? ip6gre_changelink+0x560/0x560 [ 1315.300204] rtnl_newlink+0x1042/0x1600 [ 1315.304219] ? rtnl_link_unregister+0x250/0x250 [ 1315.308929] ? mark_held_locks+0x100/0x100 [ 1315.313182] ? is_bpf_text_address+0xac/0x170 [ 1315.317688] ? find_held_lock+0x35/0x130 [ 1315.321777] ? is_bpf_text_address+0xac/0x170 [ 1315.326280] ? __lock_acquire+0x6ee/0x49c0 [ 1315.330517] ? __lock_acquire+0x6ee/0x49c0 [ 1315.334753] ? lock_downgrade+0x880/0x880 [ 1315.338929] ? mark_held_locks+0x100/0x100 [ 1315.343168] ? mark_held_locks+0x100/0x100 [ 1315.347417] ? __kernel_text_address+0xd/0x40 [ 1315.352985] ? mark_held_locks+0x100/0x100 [ 1315.357220] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1315.361894] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1315.366925] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1315.371986] ? find_held_lock+0x35/0x130 [ 1315.376222] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1315.380735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1315.386455] ? rtnl_link_unregister+0x250/0x250 [ 1315.391124] rtnetlink_rcv_msg+0x463/0xb00 [ 1315.396063] ? rtnetlink_put_metrics+0x560/0x560 [ 1315.400821] ? netdev_pick_tx+0x300/0x300 [ 1315.405066] ? netlink_deliver_tap+0x22d/0xc20 [ 1315.409646] ? find_held_lock+0x35/0x130 [ 1315.413714] netlink_rcv_skb+0x17d/0x460 [ 1315.417891] ? rtnetlink_put_metrics+0x560/0x560 [ 1315.422663] ? netlink_ack+0xb30/0xb30 [ 1315.426560] ? kasan_check_read+0x11/0x20 [ 1315.430715] ? netlink_deliver_tap+0x254/0xc20 [ 1315.435404] rtnetlink_rcv+0x1d/0x30 [ 1315.439475] netlink_unicast+0x53a/0x730 [ 1315.443978] ? netlink_attachskb+0x770/0x770 [ 1315.448561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1315.454274] netlink_sendmsg+0x8ae/0xd70 [ 1315.458536] ? netlink_unicast+0x730/0x730 [ 1315.462880] ? selinux_socket_sendmsg+0x36/0x40 [ 1315.467638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1315.479077] ? security_socket_sendmsg+0x8d/0xc0 [ 1315.485063] ? netlink_unicast+0x730/0x730 [ 1315.489558] sock_sendmsg+0xd7/0x130 [ 1315.493289] ___sys_sendmsg+0x803/0x920 [ 1315.497784] ? copy_msghdr_from_user+0x430/0x430 [ 1315.502544] ? lock_downgrade+0x880/0x880 [ 1315.506709] ? kasan_check_read+0x11/0x20 [ 1315.511000] ? __fget+0x367/0x540 [ 1315.516081] ? iterate_fd+0x360/0x360 [ 1315.521811] ? __fget_light+0x1a9/0x230 [ 1315.527340] ? __fdget+0x1b/0x20 [ 1315.530719] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1315.536725] __sys_sendmsg+0x105/0x1d0 [ 1315.540649] ? __ia32_sys_shutdown+0x80/0x80 [ 1315.545171] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1315.549945] ? do_syscall_64+0x26/0x620 [ 1315.553923] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1315.559988] ? do_syscall_64+0x26/0x620 [ 1315.563976] __x64_sys_sendmsg+0x78/0xb0 [ 1315.568212] do_syscall_64+0xfd/0x620 [ 1315.572737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1315.579942] RIP: 0033:0x45af49 [ 1315.584205] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1315.603820] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1315.613663] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1315.620966] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1315.628260] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1315.635528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1315.642794] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1315.652089] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.657215] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.662445] protocol 88fb is buggy, dev hsr_slave_0 12:53:51 executing program 1 (fault-call:4 fault-nth:64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:51 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:51 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/104, &(0x7f0000000080)=0x68) [ 1315.843838] FAULT_INJECTION: forcing a failure. [ 1315.843838] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.877423] CPU: 1 PID: 32704 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1315.885950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.895720] Call Trace: [ 1315.898446] dump_stack+0x197/0x210 [ 1315.902540] should_fail.cold+0xa/0x1b [ 1315.906803] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1315.911902] ? lock_downgrade+0x880/0x880 [ 1315.916083] __should_failslab+0x121/0x190 [ 1315.920347] should_failslab+0x9/0x14 [ 1315.924178] kmem_cache_alloc+0x2ae/0x700 [ 1315.929290] ? lock_downgrade+0x880/0x880 [ 1315.933810] __kernfs_new_node+0xef/0x6f0 [ 1315.937973] ? kasan_check_write+0x14/0x20 [ 1315.942242] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1315.947167] ? wait_for_completion+0x440/0x440 [ 1315.951746] ? mutex_unlock+0xd/0x10 [ 1315.955486] ? kernfs_activate+0x192/0x1f0 [ 1315.959750] kernfs_new_node+0x99/0x130 [ 1315.963760] __kernfs_create_file+0x51/0x33b [ 1315.968207] sysfs_add_file_mode_ns+0x222/0x560 [ 1315.973144] internal_create_group+0x383/0xc30 [ 1315.978091] ? remove_files.isra.0+0x190/0x190 [ 1315.982990] ? kernfs_put+0x3c2/0x5d0 [ 1315.987160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1315.993673] ? kernfs_create_link+0x1d2/0x250 [ 1315.998621] sysfs_create_groups+0x9b/0x141 [ 1316.003045] device_add+0x12de/0x1760 [ 1316.007128] ? get_device_parent.isra.0+0x570/0x570 [ 1316.012558] ? __init_waitqueue_head+0x36/0x90 [ 1316.017487] ? pm_runtime_init+0x347/0x400 [ 1316.023323] netdev_register_kobject+0x183/0x3b0 [ 1316.028776] register_netdevice+0x875/0xff0 [ 1316.033271] ? netdev_change_features+0xb0/0xb0 [ 1316.038677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1316.044413] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1316.049686] ? ip6gre_tunnel_init+0x340/0x340 [ 1316.054452] ? lockdep_rtnl_is_held+0x26/0x30 [ 1316.059652] ? ip6gre_tunnel_find+0x496/0x640 [ 1316.064494] ip6gre_newlink+0x298/0x7a0 [ 1316.069333] ? ip6gre_changelink+0x560/0x560 [ 1316.073838] rtnl_newlink+0x1042/0x1600 [ 1316.077944] ? rtnl_link_unregister+0x250/0x250 [ 1316.082713] ? mark_held_locks+0x100/0x100 [ 1316.087146] ? is_bpf_text_address+0xac/0x170 [ 1316.091637] ? find_held_lock+0x35/0x130 [ 1316.095694] ? is_bpf_text_address+0xac/0x170 [ 1316.100286] ? __lock_acquire+0x6ee/0x49c0 [ 1316.104535] ? __lock_acquire+0x6ee/0x49c0 [ 1316.109030] ? lock_downgrade+0x880/0x880 [ 1316.113640] ? mark_held_locks+0x100/0x100 [ 1316.118221] ? mark_held_locks+0x100/0x100 [ 1316.122463] ? __kernel_text_address+0xd/0x40 [ 1316.127707] ? mark_held_locks+0x100/0x100 [ 1316.131951] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1316.136789] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1316.141884] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1316.147369] ? find_held_lock+0x35/0x130 [ 1316.151525] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1316.156057] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1316.161618] ? rtnl_link_unregister+0x250/0x250 [ 1316.166281] rtnetlink_rcv_msg+0x463/0xb00 [ 1316.170522] ? rtnetlink_put_metrics+0x560/0x560 [ 1316.176226] ? netdev_pick_tx+0x300/0x300 [ 1316.180819] ? netlink_deliver_tap+0x22d/0xc20 [ 1316.185413] ? find_held_lock+0x35/0x130 [ 1316.189496] netlink_rcv_skb+0x17d/0x460 [ 1316.193582] ? rtnetlink_put_metrics+0x560/0x560 [ 1316.198444] ? netlink_ack+0xb30/0xb30 [ 1316.203311] ? kasan_check_read+0x11/0x20 [ 1316.208410] ? netlink_deliver_tap+0x254/0xc20 [ 1316.214029] rtnetlink_rcv+0x1d/0x30 [ 1316.220067] netlink_unicast+0x53a/0x730 [ 1316.224742] ? netlink_attachskb+0x770/0x770 [ 1316.229513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1316.236081] netlink_sendmsg+0x8ae/0xd70 [ 1316.240499] ? netlink_unicast+0x730/0x730 [ 1316.244822] ? selinux_socket_sendmsg+0x36/0x40 [ 1316.249599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1316.256317] ? security_socket_sendmsg+0x8d/0xc0 [ 1316.261307] ? netlink_unicast+0x730/0x730 [ 1316.266093] sock_sendmsg+0xd7/0x130 [ 1316.270718] ___sys_sendmsg+0x803/0x920 [ 1316.274811] ? copy_msghdr_from_user+0x430/0x430 [ 1316.279786] ? lock_downgrade+0x880/0x880 [ 1316.284380] ? kasan_check_read+0x11/0x20 [ 1316.288549] ? __fget+0x367/0x540 [ 1316.292013] ? iterate_fd+0x360/0x360 [ 1316.296144] ? __fget_light+0x1a9/0x230 [ 1316.300852] ? __fdget+0x1b/0x20 [ 1316.304481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1316.310413] __sys_sendmsg+0x105/0x1d0 [ 1316.314334] ? __ia32_sys_shutdown+0x80/0x80 [ 1316.318939] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1316.324524] ? do_syscall_64+0x26/0x620 [ 1316.328806] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1316.334498] ? do_syscall_64+0x26/0x620 [ 1316.338737] __x64_sys_sendmsg+0x78/0xb0 [ 1316.342807] do_syscall_64+0xfd/0x620 [ 1316.346809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1316.352267] RIP: 0033:0x45af49 [ 1316.355735] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1316.376059] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1316.383851] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:51 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000400)={0xa, 0x0, [{0x80000001, 0x9, 0x4, 0x36cf, 0x5, 0x1, 0x3f}, {0x80000008, 0x1, 0x2, 0xa802, 0x20, 0x4c8e, 0x100}, {0xb, 0x9, 0x2, 0x280, 0x400, 0x7fffffff, 0x6}, {0x1a, 0x1, 0xe, 0x6, 0x3, 0x1, 0x3f}, {0xc0000000, 0x4000000, 0x2bee9fb525b3953e, 0x4d, 0x7, 0x3}, {0x5817f085090629b9, 0x7f, 0x1, 0x7, 0x10001, 0x8e35, 0x2a7}, {0xb, 0x800, 0x4, 0x1, 0x2, 0x8, 0x7}, {0x0, 0x4, 0x1d5cd37f7dcd9576, 0x6, 0x7d, 0x3, 0x401}, {0x1, 0x401, 0x2, 0x3, 0x200, 0x6, 0x6}, {0x7, 0x0, 0x6, 0x8001, 0x7, 0x2, 0x8}]}) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0xd, 0x6, 0x80, 0x70bd2d, 0x25dfdbff, {0x5608b448e94176e3, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}]}, 0x30}}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) r8 = accept(r5, &(0x7f00000005c0)=@un=@abs, &(0x7f00000002c0)=0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'caif0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10002dbd7000fbdbdf250600000008000300", @ANYRES32=r10, @ANYBLOB="0c0001000200000014000400627269646765300000000000000000007e693255dadbed9b8b48546f2261eed1e918"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x402c088) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0) [ 1316.391500] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1316.398775] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1316.406047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1316.413334] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:51 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvlan0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x3, [{}, {}, {}]}}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000080)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:52 executing program 1 (fault-call:4 fault-nth:65): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:52 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:52 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1316.647805] FAULT_INJECTION: forcing a failure. [ 1316.647805] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.691131] CPU: 0 PID: 454 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1316.698808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.708194] Call Trace: [ 1316.710853] dump_stack+0x197/0x210 [ 1316.714515] should_fail.cold+0xa/0x1b [ 1316.718425] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1316.723549] ? lock_downgrade+0x880/0x880 [ 1316.727729] __should_failslab+0x121/0x190 [ 1316.732002] should_failslab+0x9/0x14 [ 1316.735830] kmem_cache_alloc+0x2ae/0x700 [ 1316.740011] ? lock_downgrade+0x880/0x880 [ 1316.744188] __kernfs_new_node+0xef/0x6f0 [ 1316.748359] ? kasan_check_write+0x14/0x20 [ 1316.752652] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1316.757427] ? wait_for_completion+0x440/0x440 [ 1316.762041] ? mutex_unlock+0xd/0x10 [ 1316.765772] ? kernfs_activate+0x192/0x1f0 [ 1316.770037] kernfs_new_node+0x99/0x130 [ 1316.774049] __kernfs_create_file+0x51/0x33b [ 1316.778490] sysfs_add_file_mode_ns+0x222/0x560 [ 1316.783341] internal_create_group+0x383/0xc30 [ 1316.788084] ? remove_files.isra.0+0x190/0x190 [ 1316.792704] ? kernfs_put+0x3c2/0x5d0 [ 1316.796702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1316.802669] ? kernfs_create_link+0x1d2/0x250 [ 1316.807203] sysfs_create_groups+0x9b/0x141 [ 1316.811728] device_add+0x12de/0x1760 [ 1316.815569] ? get_device_parent.isra.0+0x570/0x570 [ 1316.820627] ? __init_waitqueue_head+0x36/0x90 [ 1316.825244] ? pm_runtime_init+0x347/0x400 [ 1316.829526] netdev_register_kobject+0x183/0x3b0 [ 1316.834415] register_netdevice+0x875/0xff0 [ 1316.838794] ? netdev_change_features+0xb0/0xb0 [ 1316.845932] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1316.851891] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1316.858338] ? ip6gre_tunnel_init+0x340/0x340 [ 1316.863395] ? lockdep_rtnl_is_held+0x26/0x30 [ 1316.867946] ? ip6gre_tunnel_find+0x496/0x640 [ 1316.872562] ip6gre_newlink+0x298/0x7a0 [ 1316.877515] ? ip6gre_changelink+0x560/0x560 [ 1316.882570] rtnl_newlink+0x1042/0x1600 [ 1316.887094] ? rtnl_link_unregister+0x250/0x250 [ 1316.892844] ? mark_held_locks+0x100/0x100 [ 1316.897206] ? debug_smp_processor_id+0x1c/0x20 [ 1316.902175] ? is_bpf_text_address+0xac/0x170 [ 1316.906704] ? find_held_lock+0x35/0x130 [ 1316.910821] ? is_bpf_text_address+0xac/0x170 [ 1316.915348] ? __lock_acquire+0x6ee/0x49c0 [ 1316.919618] ? __lock_acquire+0x6ee/0x49c0 [ 1316.923972] ? lock_downgrade+0x880/0x880 [ 1316.928244] ? mark_held_locks+0x100/0x100 [ 1316.932611] ? debug_smp_processor_id+0x1c/0x20 [ 1316.937329] ? perf_trace_lock_acquire+0xf5/0x580 [ 1316.943634] ? mark_held_locks+0x100/0x100 [ 1316.947921] ? debug_smp_processor_id+0x1c/0x20 [ 1316.952617] ? perf_trace_lock_acquire+0xf5/0x580 [ 1316.957541] ? find_held_lock+0x35/0x130 [ 1316.961724] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1316.966436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1316.972137] ? rtnl_link_unregister+0x250/0x250 [ 1316.976926] rtnetlink_rcv_msg+0x463/0xb00 [ 1316.981213] ? rtnetlink_put_metrics+0x560/0x560 [ 1316.985999] ? netdev_pick_tx+0x300/0x300 [ 1316.990199] ? netlink_deliver_tap+0x22d/0xc20 [ 1316.994811] ? find_held_lock+0x35/0x130 [ 1316.998973] netlink_rcv_skb+0x17d/0x460 [ 1317.003105] ? rtnetlink_put_metrics+0x560/0x560 [ 1317.007926] ? netlink_ack+0xb30/0xb30 [ 1317.011841] ? kasan_check_read+0x11/0x20 [ 1317.016022] ? netlink_deliver_tap+0x254/0xc20 [ 1317.020641] rtnetlink_rcv+0x1d/0x30 [ 1317.024387] netlink_unicast+0x53a/0x730 [ 1317.028482] ? netlink_attachskb+0x770/0x770 [ 1317.032934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.038522] netlink_sendmsg+0x8ae/0xd70 [ 1317.042600] ? netlink_unicast+0x730/0x730 [ 1317.046947] ? selinux_socket_sendmsg+0x36/0x40 [ 1317.051618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.057156] ? security_socket_sendmsg+0x8d/0xc0 [ 1317.061927] ? netlink_unicast+0x730/0x730 [ 1317.066185] sock_sendmsg+0xd7/0x130 [ 1317.070336] ___sys_sendmsg+0x803/0x920 [ 1317.074314] ? copy_msghdr_from_user+0x430/0x430 [ 1317.079073] ? lock_downgrade+0x880/0x880 [ 1317.083250] ? kasan_check_read+0x11/0x20 [ 1317.087750] ? __fget+0x367/0x540 [ 1317.091202] ? iterate_fd+0x360/0x360 [ 1317.095002] ? __fget_light+0x1a9/0x230 [ 1317.098968] ? __fdget+0x1b/0x20 [ 1317.102435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.107982] __sys_sendmsg+0x105/0x1d0 [ 1317.112997] ? __ia32_sys_shutdown+0x80/0x80 [ 1317.117422] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1317.122191] ? do_syscall_64+0x26/0x620 [ 1317.126261] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1317.131625] ? do_syscall_64+0x26/0x620 [ 1317.136777] __x64_sys_sendmsg+0x78/0xb0 [ 1317.140840] do_syscall_64+0xfd/0x620 [ 1317.144642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1317.150044] RIP: 0033:0x45af49 [ 1317.154012] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1317.173009] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.180715] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:52 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)=0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="1dc6b4bad99e7fc3e4001f11dcea6db9d35c94ccbbbac5ee5d276e9bfd16f04dce818e533d9138409c5ee81a6ab73beb3d872fd786baf2c9775600000100e2fd00"/80, @ANYRES32, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR], @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000001c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0xff738000) sendto$inet6(r2, &(0x7f0000000100)="c996ded4c29d4bc0a08155a6be283c9fd15c2cec479bd8c93b6a881e053d0adf9a178c7c9feab100e59b742d3900ebd9f2ee8f8e81169cf753dbcf8c0be67c323cb3f25223f4e6a1cf469adb05b0ba34e98cba3cb6eeada5280d249ef6feb5e1ec2c350675fea25183952e2d518c6c90d3158625d03e901c9de36568c9be93ee305660157307c7cbaf9ddc6be750cb22e641", 0x92, 0x404c844, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x200c40) [ 1317.187984] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1317.195242] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1317.203131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1317.210571] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:52 executing program 1 (fault-call:4 fault-nth:66): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1317.342581] FAULT_INJECTION: forcing a failure. [ 1317.342581] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.354147] CPU: 1 PID: 680 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1317.361806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.371176] Call Trace: [ 1317.373793] dump_stack+0x197/0x210 [ 1317.377452] should_fail.cold+0xa/0x1b [ 1317.381379] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1317.386512] ? lock_downgrade+0x880/0x880 12:53:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1317.390706] __should_failslab+0x121/0x190 [ 1317.394973] should_failslab+0x9/0x14 [ 1317.398861] kmem_cache_alloc+0x2ae/0x700 [ 1317.403023] ? lock_downgrade+0x880/0x880 [ 1317.407195] __kernfs_new_node+0xef/0x6f0 [ 1317.411359] ? kasan_check_write+0x14/0x20 [ 1317.415591] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1317.420357] ? wait_for_completion+0x440/0x440 [ 1317.424951] ? mutex_unlock+0xd/0x10 [ 1317.428658] ? kernfs_activate+0x192/0x1f0 [ 1317.432887] kernfs_new_node+0x99/0x130 [ 1317.436870] __kernfs_create_file+0x51/0x33b [ 1317.441304] sysfs_add_file_mode_ns+0x222/0x560 [ 1317.445981] internal_create_group+0x383/0xc30 [ 1317.450601] ? remove_files.isra.0+0x190/0x190 [ 1317.455191] ? kernfs_put+0x3c2/0x5d0 [ 1317.459045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.465216] ? kernfs_create_link+0x1d2/0x250 [ 1317.469726] sysfs_create_groups+0x9b/0x141 [ 1317.474054] device_add+0x12de/0x1760 [ 1317.477884] ? get_device_parent.isra.0+0x570/0x570 [ 1317.482897] ? __init_waitqueue_head+0x36/0x90 [ 1317.487489] ? pm_runtime_init+0x347/0x400 [ 1317.491737] netdev_register_kobject+0x183/0x3b0 [ 1317.496503] register_netdevice+0x875/0xff0 [ 1317.500851] ? netdev_change_features+0xb0/0xb0 [ 1317.505536] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1317.511093] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1317.516307] ? ip6gre_tunnel_init+0x340/0x340 [ 1317.520798] ? lockdep_rtnl_is_held+0x26/0x30 [ 1317.525464] ? ip6gre_tunnel_find+0x496/0x640 [ 1317.529985] ip6gre_newlink+0x298/0x7a0 [ 1317.533978] ? ip6gre_changelink+0x560/0x560 [ 1317.538385] rtnl_newlink+0x1042/0x1600 [ 1317.542356] ? rtnl_link_unregister+0x250/0x250 [ 1317.547016] ? mark_held_locks+0x100/0x100 [ 1317.551250] ? is_bpf_text_address+0xac/0x170 [ 1317.555733] ? find_held_lock+0x35/0x130 [ 1317.559784] ? is_bpf_text_address+0xac/0x170 [ 1317.564516] ? __lock_acquire+0x6ee/0x49c0 [ 1317.568768] ? __lock_acquire+0x6ee/0x49c0 [ 1317.573013] ? lock_downgrade+0x880/0x880 [ 1317.577172] ? mark_held_locks+0x100/0x100 [ 1317.581400] ? mark_held_locks+0x100/0x100 [ 1317.585623] ? __kernel_text_address+0xd/0x40 [ 1317.590122] ? mark_held_locks+0x100/0x100 [ 1317.594350] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1317.599159] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1317.604184] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1317.609252] ? find_held_lock+0x35/0x130 [ 1317.613467] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1317.617897] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.623434] ? rtnl_link_unregister+0x250/0x250 [ 1317.628097] rtnetlink_rcv_msg+0x463/0xb00 [ 1317.633208] ? rtnetlink_put_metrics+0x560/0x560 [ 1317.637960] ? netdev_pick_tx+0x300/0x300 [ 1317.642110] ? netlink_deliver_tap+0x22d/0xc20 [ 1317.646686] ? find_held_lock+0x35/0x130 [ 1317.650743] netlink_rcv_skb+0x17d/0x460 [ 1317.654801] ? rtnetlink_put_metrics+0x560/0x560 [ 1317.659552] ? netlink_ack+0xb30/0xb30 [ 1317.663578] ? kasan_check_read+0x11/0x20 [ 1317.667739] ? netlink_deliver_tap+0x254/0xc20 [ 1317.672930] rtnetlink_rcv+0x1d/0x30 [ 1317.676674] netlink_unicast+0x53a/0x730 [ 1317.680742] ? netlink_attachskb+0x770/0x770 [ 1317.685155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.690701] netlink_sendmsg+0x8ae/0xd70 [ 1317.694756] ? netlink_unicast+0x730/0x730 [ 1317.699020] ? selinux_socket_sendmsg+0x36/0x40 [ 1317.703698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.709232] ? security_socket_sendmsg+0x8d/0xc0 [ 1317.714006] ? netlink_unicast+0x730/0x730 [ 1317.718253] sock_sendmsg+0xd7/0x130 [ 1317.725877] ___sys_sendmsg+0x803/0x920 [ 1317.729860] ? copy_msghdr_from_user+0x430/0x430 [ 1317.734623] ? lock_downgrade+0x880/0x880 [ 1317.738785] ? kasan_check_read+0x11/0x20 [ 1317.742936] ? __fget+0x367/0x540 [ 1317.746400] ? iterate_fd+0x360/0x360 [ 1317.750212] ? __fget_light+0x1a9/0x230 [ 1317.754193] ? __fdget+0x1b/0x20 [ 1317.757557] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.763099] __sys_sendmsg+0x105/0x1d0 [ 1317.766987] ? __ia32_sys_shutdown+0x80/0x80 [ 1317.771425] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1317.776248] ? do_syscall_64+0x26/0x620 [ 1317.781163] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1317.787265] ? do_syscall_64+0x26/0x620 [ 1317.791239] __x64_sys_sendmsg+0x78/0xb0 [ 1317.795305] do_syscall_64+0xfd/0x620 [ 1317.799113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1317.804330] RIP: 0033:0x45af49 [ 1317.807531] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1317.826452] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.834172] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 12:53:53 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:53 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x50, "423bad72d7fdea03f33a5aa58c9e2dd3531fec5aeb18e67d20e3576841fe093031f179b5d96b5123bb8ddc8e23f468ed3d64d87dcb1775ff5f983d82209ec6e113471ce5ba888600d1bf3197b63d318e"}, &(0x7f0000000100)=0x74) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xb51, 0x4) [ 1317.841591] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1317.848865] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1317.856465] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1317.863747] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:53 executing program 1 (fault-call:4 fault-nth:67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1318.050359] FAULT_INJECTION: forcing a failure. [ 1318.050359] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.066952] CPU: 1 PID: 792 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1318.075184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.086206] Call Trace: [ 1318.088831] dump_stack+0x197/0x210 [ 1318.092561] should_fail.cold+0xa/0x1b [ 1318.096471] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1318.101578] ? lock_downgrade+0x880/0x880 [ 1318.106002] __should_failslab+0x121/0x190 [ 1318.111458] should_failslab+0x9/0x14 [ 1318.117038] kmem_cache_alloc+0x2ae/0x700 [ 1318.121376] ? lock_downgrade+0x880/0x880 [ 1318.125647] __kernfs_new_node+0xef/0x6f0 [ 1318.129832] ? kasan_check_write+0x14/0x20 [ 1318.134425] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1318.140327] ? wait_for_completion+0x440/0x440 [ 1318.144930] ? mutex_unlock+0xd/0x10 [ 1318.148658] ? kernfs_activate+0x192/0x1f0 [ 1318.152915] kernfs_new_node+0x99/0x130 [ 1318.157617] __kernfs_create_file+0x51/0x33b [ 1318.162199] sysfs_add_file_mode_ns+0x222/0x560 [ 1318.167774] internal_create_group+0x383/0xc30 [ 1318.172359] ? remove_files.isra.0+0x190/0x190 [ 1318.177017] ? kernfs_put+0x3c2/0x5d0 [ 1318.182374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.189073] ? kernfs_create_link+0x1d2/0x250 [ 1318.193603] sysfs_create_groups+0x9b/0x141 [ 1318.198202] device_add+0x12de/0x1760 [ 1318.202268] ? get_device_parent.isra.0+0x570/0x570 [ 1318.207370] ? __init_waitqueue_head+0x36/0x90 [ 1318.211965] ? pm_runtime_init+0x347/0x400 [ 1318.216518] netdev_register_kobject+0x183/0x3b0 [ 1318.221822] register_netdevice+0x875/0xff0 [ 1318.226152] ? netdev_change_features+0xb0/0xb0 [ 1318.230913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1318.236816] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1318.242636] ? ip6gre_tunnel_init+0x340/0x340 [ 1318.247489] ? lockdep_rtnl_is_held+0x26/0x30 [ 1318.251981] ? ip6gre_tunnel_find+0x496/0x640 [ 1318.256476] ip6gre_newlink+0x298/0x7a0 [ 1318.260453] ? ip6gre_changelink+0x560/0x560 [ 1318.265003] rtnl_newlink+0x1042/0x1600 [ 1318.269000] ? rtnl_link_unregister+0x250/0x250 [ 1318.273672] ? mark_held_locks+0x100/0x100 [ 1318.278817] ? is_bpf_text_address+0xac/0x170 [ 1318.283324] ? find_held_lock+0x35/0x130 [ 1318.287399] ? is_bpf_text_address+0xac/0x170 [ 1318.291892] ? __lock_acquire+0x6ee/0x49c0 [ 1318.296146] ? __lock_is_held+0xb6/0x140 [ 1318.300212] ? mark_held_locks+0x100/0x100 [ 1318.304457] ? mark_held_locks+0x100/0x100 [ 1318.308692] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1318.313181] ? finish_task_switch+0x146/0x7c0 [ 1318.317665] ? finish_task_switch+0x118/0x7c0 [ 1318.322150] ? switch_mm_irqs_off+0x7fa/0x1360 [ 1318.326756] ? __mutex_lock+0xa67/0x1300 [ 1318.331261] ? find_held_lock+0x35/0x130 [ 1318.335366] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1318.341700] ? rtnl_link_unregister+0x250/0x250 [ 1318.346403] rtnetlink_rcv_msg+0x463/0xb00 [ 1318.350672] ? rtnetlink_put_metrics+0x560/0x560 [ 1318.355440] ? netdev_pick_tx+0x300/0x300 [ 1318.360143] ? netlink_deliver_tap+0x22d/0xc20 [ 1318.364743] ? find_held_lock+0x35/0x130 [ 1318.368821] netlink_rcv_skb+0x17d/0x460 [ 1318.372903] ? rtnetlink_put_metrics+0x560/0x560 [ 1318.377671] ? netlink_ack+0xb30/0xb30 [ 1318.381563] ? kasan_check_read+0x11/0x20 [ 1318.385706] ? netlink_deliver_tap+0x254/0xc20 [ 1318.390309] rtnetlink_rcv+0x1d/0x30 [ 1318.394028] netlink_unicast+0x53a/0x730 [ 1318.398183] ? netlink_attachskb+0x770/0x770 [ 1318.402608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.408165] netlink_sendmsg+0x8ae/0xd70 [ 1318.412243] ? netlink_unicast+0x730/0x730 [ 1318.416475] ? selinux_socket_sendmsg+0x36/0x40 [ 1318.421147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.426689] ? security_socket_sendmsg+0x8d/0xc0 [ 1318.431812] ? netlink_unicast+0x730/0x730 [ 1318.436065] sock_sendmsg+0xd7/0x130 [ 1318.439800] ___sys_sendmsg+0x803/0x920 [ 1318.443781] ? copy_msghdr_from_user+0x430/0x430 [ 1318.448594] ? lock_downgrade+0x880/0x880 [ 1318.452767] ? kasan_check_read+0x11/0x20 [ 1318.456921] ? __fget+0x367/0x540 [ 1318.460380] ? iterate_fd+0x360/0x360 [ 1318.464181] ? __fget_light+0x1a9/0x230 [ 1318.468247] ? __fdget+0x1b/0x20 [ 1318.471618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1318.477178] __sys_sendmsg+0x105/0x1d0 [ 1318.481080] ? __ia32_sys_shutdown+0x80/0x80 [ 1318.485495] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1318.490262] ? do_syscall_64+0x26/0x620 [ 1318.494232] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.499629] ? do_syscall_64+0x26/0x620 [ 1318.503614] __x64_sys_sendmsg+0x78/0xb0 [ 1318.507673] do_syscall_64+0xfd/0x620 [ 1318.511474] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.516850] RIP: 0033:0x45af49 [ 1318.520035] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1318.538943] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.546657] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1318.554016] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1318.561277] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1318.568547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1318.575808] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:54 executing program 1 (fault-call:4 fault-nth:68): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:54 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:54 executing program 5: syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:54 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:54 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x4880, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = getpid() setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000700)=0xffffffff, 0x4) sched_setscheduler(r7, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r13, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) fsetxattr$system_posix_acl(r13, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="a852b4b5ed6d12783114fbc0de991bd107218e7373b26d0f4a7627365f12c387f0c497322a654cb81aceee01b9faaa15155e177084693987b1addeab21f5a2563ae5c11be6ef0d1a374432a65b05c35c15157311b9302f8c20bf1f5e4f87289edd4afadfb25d8c4bee647854fbac1a1b", @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r7, @ANYRESDEC=r9], 0x8, 0x1) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r14, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[@ANYBLOB="14ff1c13a51dea736e116d6d5140d2338cc682840000041a984228df02b9669041603c72f4e3c462867ee1f4eb77", @ANYRES16=r15, @ANYBLOB="0540ade0a834241a360008000000"], 0x14}}, 0x0) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000400)=0xff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x683e2d2782f64a2a}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r16+30000000}, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000001c0)) [ 1318.746919] FAULT_INJECTION: forcing a failure. [ 1318.746919] name failslab, interval 1, probability 0, space 0, times 0 12:53:54 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ffe, 0x40) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB="40594255a9b992e11cd75ce76bcb650ed8cb18e151f953dc8a4b57dd82d3ce67ddd8669da47d8828d96f84284a4ce566dab5a54627cabb27d70253f838b4e52289aa69b69205d129f98d956767f4ebf6c5181fd54ffec6608cffddd59faebfdeedf44d588e6bd7402865ec5c8cff3d7fa3db870075a8fdc00e426b", @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) kcmp(r1, 0xffffffffffffffff, 0xebc12be9c0871744, r0, r5) [ 1318.797882] CPU: 1 PID: 801 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1318.805576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.814954] Call Trace: [ 1318.817570] dump_stack+0x197/0x210 [ 1318.821237] should_fail.cold+0xa/0x1b [ 1318.825156] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1318.830288] ? lock_downgrade+0x880/0x880 [ 1318.834453] __should_failslab+0x121/0x190 [ 1318.838702] should_failslab+0x9/0x14 [ 1318.842509] kmem_cache_alloc+0x2ae/0x700 [ 1318.846667] ? lock_downgrade+0x880/0x880 [ 1318.850828] __kernfs_new_node+0xef/0x6f0 [ 1318.854979] ? kasan_check_write+0x14/0x20 [ 1318.859214] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1318.863971] ? wait_for_completion+0x440/0x440 [ 1318.868565] ? mutex_unlock+0xd/0x10 [ 1318.872276] ? kernfs_activate+0x192/0x1f0 [ 1318.876513] kernfs_new_node+0x99/0x130 [ 1318.880490] __kernfs_create_file+0x51/0x33b [ 1318.884899] sysfs_add_file_mode_ns+0x222/0x560 [ 1318.889584] internal_create_group+0x383/0xc30 [ 1318.894178] ? remove_files.isra.0+0x190/0x190 [ 1318.898754] ? kernfs_put+0x3c2/0x5d0 [ 1318.902560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.908095] ? kernfs_create_link+0x1d2/0x250 [ 1318.912602] sysfs_create_groups+0x9b/0x141 [ 1318.916927] device_add+0x12de/0x1760 [ 1318.920752] ? get_device_parent.isra.0+0x570/0x570 [ 1318.925765] ? __init_waitqueue_head+0x36/0x90 [ 1318.930365] ? pm_runtime_init+0x347/0x400 [ 1318.934731] netdev_register_kobject+0x183/0x3b0 [ 1318.939672] register_netdevice+0x875/0xff0 [ 1318.944023] ? netdev_change_features+0xb0/0xb0 [ 1318.949391] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1318.954935] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1318.960119] ? ip6gre_tunnel_init+0x340/0x340 [ 1318.964610] ? lockdep_rtnl_is_held+0x26/0x30 [ 1318.969105] ? ip6gre_tunnel_find+0x496/0x640 [ 1318.973599] ip6gre_newlink+0x298/0x7a0 [ 1318.977571] ? ip6gre_changelink+0x560/0x560 [ 1318.981975] rtnl_newlink+0x1042/0x1600 [ 1318.985962] ? rtnl_link_unregister+0x250/0x250 [ 1318.990626] ? mark_held_locks+0x100/0x100 [ 1318.995057] ? __lock_acquire+0x6ee/0x49c0 [ 1318.999721] ? cpuacct_charge+0x1db/0x360 [ 1319.003868] ? __update_load_avg_se+0x5ec/0xa10 [ 1319.008536] ? __lock_is_held+0xb6/0x140 [ 1319.012604] ? mark_held_locks+0x100/0x100 [ 1319.016880] ? mark_held_locks+0x100/0x100 [ 1319.021116] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1319.025657] ? finish_task_switch+0x146/0x7c0 [ 1319.030151] ? finish_task_switch+0x118/0x7c0 [ 1319.034643] ? switch_mm_irqs_off+0x7fa/0x1360 [ 1319.039243] ? __mutex_lock+0xa67/0x1300 [ 1319.043388] ? find_held_lock+0x35/0x130 [ 1319.047507] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1319.053044] ? rtnl_link_unregister+0x250/0x250 [ 1319.057714] rtnetlink_rcv_msg+0x463/0xb00 [ 1319.061953] ? rtnetlink_put_metrics+0x560/0x560 [ 1319.066717] ? netdev_pick_tx+0x300/0x300 [ 1319.071151] ? netlink_deliver_tap+0x22d/0xc20 [ 1319.076201] ? find_held_lock+0x35/0x130 [ 1319.080355] netlink_rcv_skb+0x17d/0x460 [ 1319.084502] ? rtnetlink_put_metrics+0x560/0x560 [ 1319.089812] ? netlink_ack+0xb30/0xb30 [ 1319.094109] ? kasan_check_read+0x11/0x20 [ 1319.098818] ? netlink_deliver_tap+0x254/0xc20 [ 1319.106115] rtnetlink_rcv+0x1d/0x30 [ 1319.110341] netlink_unicast+0x53a/0x730 [ 1319.114948] ? netlink_attachskb+0x770/0x770 [ 1319.120225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1319.125777] netlink_sendmsg+0x8ae/0xd70 [ 1319.129884] ? netlink_unicast+0x730/0x730 [ 1319.134124] ? selinux_socket_sendmsg+0x36/0x40 [ 1319.139264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1319.144813] ? security_socket_sendmsg+0x8d/0xc0 [ 1319.150117] ? netlink_unicast+0x730/0x730 [ 1319.154706] sock_sendmsg+0xd7/0x130 [ 1319.159635] ___sys_sendmsg+0x803/0x920 [ 1319.163887] ? copy_msghdr_from_user+0x430/0x430 [ 1319.168646] ? lock_downgrade+0x880/0x880 [ 1319.172797] ? kasan_check_read+0x11/0x20 [ 1319.176964] ? __fget+0x367/0x540 [ 1319.180570] ? iterate_fd+0x360/0x360 [ 1319.184584] ? __fget_light+0x1a9/0x230 [ 1319.188566] ? __fdget+0x1b/0x20 [ 1319.191933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1319.198362] __sys_sendmsg+0x105/0x1d0 [ 1319.202357] ? __ia32_sys_shutdown+0x80/0x80 [ 1319.206782] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1319.211651] ? do_syscall_64+0x26/0x620 [ 1319.215622] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1319.220985] ? do_syscall_64+0x26/0x620 [ 1319.224973] __x64_sys_sendmsg+0x78/0xb0 [ 1319.229035] do_syscall_64+0xfd/0x620 [ 1319.232836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1319.238028] RIP: 0033:0x45af49 [ 1319.241218] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1319.260111] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1319.267828] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1319.275107] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1319.282371] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1319.289636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1319.296919] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1319.305403] net_ratelimit: 5 callbacks suppressed [ 1319.305413] protocol 88fb is buggy, dev hsr_slave_0 [ 1319.315513] protocol 88fb is buggy, dev hsr_slave_1 12:53:54 executing program 1 (fault-call:4 fault-nth:69): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:54 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:54 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:54 executing program 5: lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x10d, 0x0, 0x6, "8a552b287197f2a22029bd73e7d9def8", "5b72fac1c943b0da63316341f00376546bdbe5d6ca3d0a97b8d8711b0ed457945d3a301bf8f046e17b5f8b41563b29bde485845c557170efc8f542575e76d1e96c543e1d271c0700c956fefcbbff68bfc843f0432d10695f92fe9c2947f7cff84d5d7c668ff1f2b14d4aee047fb20aa68fdba1f7a27508fd6da9ceadb7bb9235664300c7a672fb8e9bb3c39748f569514d529f9bd534cf64e3e2d0ba09943829c58f92f9cd3b382d22658ec9bcfe57f9266af112213c330f42d02f96267b96d448cb389fb4a09e9847f420e4b621995fd60089495a618df852fc1e454b94f37ef99e15a863426fe701d08b04a99f6692e75315d6dbe2519f"}, 0x10d, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) fanotify_mark(r1, 0x10, 0x4, r3, &(0x7f0000000080)='./file0\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000001) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:54 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1319.522378] FAULT_INJECTION: forcing a failure. [ 1319.522378] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.573525] CPU: 0 PID: 821 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1319.581294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.590669] Call Trace: [ 1319.593288] dump_stack+0x197/0x210 [ 1319.596952] should_fail.cold+0xa/0x1b [ 1319.600893] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1319.606019] ? lock_downgrade+0x880/0x880 [ 1319.610195] __should_failslab+0x121/0x190 [ 1319.614524] should_failslab+0x9/0x14 [ 1319.618343] kmem_cache_alloc+0x2ae/0x700 [ 1319.622530] ? lock_downgrade+0x880/0x880 [ 1319.626808] __kernfs_new_node+0xef/0x6f0 [ 1319.630967] ? kasan_check_write+0x14/0x20 [ 1319.635212] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1319.639980] ? wait_for_completion+0x440/0x440 [ 1319.644590] ? mutex_unlock+0xd/0x10 [ 1319.648324] ? kernfs_activate+0x192/0x1f0 [ 1319.652580] kernfs_new_node+0x99/0x130 [ 1319.656564] __kernfs_create_file+0x51/0x33b [ 1319.660993] sysfs_add_file_mode_ns+0x222/0x560 [ 1319.665677] internal_create_group+0x383/0xc30 [ 1319.670267] ? remove_files.isra.0+0x190/0x190 [ 1319.674843] ? kernfs_put+0x3c2/0x5d0 [ 1319.678655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1319.684199] ? kernfs_create_link+0x1d2/0x250 [ 1319.688698] sysfs_create_groups+0x9b/0x141 [ 1319.693039] device_add+0x12de/0x1760 [ 1319.696854] ? get_device_parent.isra.0+0x570/0x570 [ 1319.701877] ? __init_waitqueue_head+0x36/0x90 [ 1319.706458] ? pm_runtime_init+0x347/0x400 [ 1319.710797] netdev_register_kobject+0x183/0x3b0 [ 1319.715567] register_netdevice+0x875/0xff0 [ 1319.719900] ? netdev_change_features+0xb0/0xb0 [ 1319.724577] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1319.730117] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1319.735320] ? ip6gre_tunnel_init+0x340/0x340 [ 1319.739810] ? lockdep_rtnl_is_held+0x26/0x30 [ 1319.744391] ? ip6gre_tunnel_find+0x496/0x640 [ 1319.748902] ip6gre_newlink+0x298/0x7a0 [ 1319.752879] ? ip6gre_changelink+0x560/0x560 [ 1319.757818] rtnl_newlink+0x1042/0x1600 [ 1319.761810] ? rtnl_link_unregister+0x250/0x250 [ 1319.766476] ? mark_held_locks+0x100/0x100 [ 1319.770718] ? is_bpf_text_address+0xac/0x170 [ 1319.775211] ? find_held_lock+0x35/0x130 [ 1319.779280] ? is_bpf_text_address+0xac/0x170 [ 1319.783782] ? __lock_acquire+0x6ee/0x49c0 [ 1319.788023] ? __lock_acquire+0x6ee/0x49c0 [ 1319.792270] ? lock_downgrade+0x880/0x880 [ 1319.796525] ? mark_held_locks+0x100/0x100 [ 1319.800774] ? mark_held_locks+0x100/0x100 [ 1319.805005] ? __kernel_text_address+0xd/0x40 [ 1319.809802] ? mark_held_locks+0x100/0x100 [ 1319.814189] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1319.818880] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1319.823901] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1319.828964] ? find_held_lock+0x35/0x130 [ 1319.833026] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1319.837830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1319.843408] ? rtnl_link_unregister+0x250/0x250 [ 1319.848133] rtnetlink_rcv_msg+0x463/0xb00 [ 1319.852409] ? rtnetlink_put_metrics+0x560/0x560 [ 1319.857178] ? netdev_pick_tx+0x300/0x300 [ 1319.861349] ? netlink_deliver_tap+0x22d/0xc20 [ 1319.865961] ? find_held_lock+0x35/0x130 [ 1319.870050] netlink_rcv_skb+0x17d/0x460 [ 1319.874265] ? rtnetlink_put_metrics+0x560/0x560 [ 1319.879037] ? netlink_ack+0xb30/0xb30 [ 1319.882940] ? kasan_check_read+0x11/0x20 [ 1319.887123] ? netlink_deliver_tap+0x254/0xc20 [ 1319.891728] rtnetlink_rcv+0x1d/0x30 [ 1319.895446] netlink_unicast+0x53a/0x730 [ 1319.900418] ? netlink_attachskb+0x770/0x770 [ 1319.905045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1319.910617] netlink_sendmsg+0x8ae/0xd70 [ 1319.914710] ? netlink_unicast+0x730/0x730 [ 1319.919004] ? selinux_socket_sendmsg+0x36/0x40 [ 1319.923686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1319.930294] ? security_socket_sendmsg+0x8d/0xc0 [ 1319.935063] ? netlink_unicast+0x730/0x730 [ 1319.939572] sock_sendmsg+0xd7/0x130 [ 1319.943383] ___sys_sendmsg+0x803/0x920 [ 1319.947366] ? copy_msghdr_from_user+0x430/0x430 [ 1319.952145] ? lock_downgrade+0x880/0x880 [ 1319.956294] ? kasan_check_read+0x11/0x20 [ 1319.960540] ? __fget+0x367/0x540 [ 1319.964029] ? iterate_fd+0x360/0x360 [ 1319.967846] ? __fget_light+0x1a9/0x230 [ 1319.971841] ? __fdget+0x1b/0x20 [ 1319.975241] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1319.980816] __sys_sendmsg+0x105/0x1d0 [ 1319.984754] ? __ia32_sys_shutdown+0x80/0x80 [ 1319.989295] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1319.994170] ? do_syscall_64+0x26/0x620 [ 1319.998159] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1320.003557] ? do_syscall_64+0x26/0x620 [ 1320.007552] __x64_sys_sendmsg+0x78/0xb0 [ 1320.011759] do_syscall_64+0xfd/0x620 [ 1320.015630] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1320.020834] RIP: 0033:0x45af49 [ 1320.024175] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1320.043263] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.051004] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1320.058282] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1320.066009] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1320.073289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1320.080574] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 [ 1320.089055] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.094361] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.102461] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.107679] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.112960] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.118065] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.123256] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.128356] protocol 88fb is buggy, dev hsr_slave_1 12:53:55 executing program 1 (fault-call:4 fault-nth:70): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1320.218510] FAULT_INJECTION: forcing a failure. [ 1320.218510] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.235752] CPU: 1 PID: 936 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1320.243453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.252825] Call Trace: [ 1320.255442] dump_stack+0x197/0x210 [ 1320.259234] should_fail.cold+0xa/0x1b [ 1320.263157] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1320.268273] ? lock_downgrade+0x880/0x880 [ 1320.272446] __should_failslab+0x121/0x190 [ 1320.276707] should_failslab+0x9/0x14 [ 1320.280529] kmem_cache_alloc+0x2ae/0x700 [ 1320.284709] ? lock_downgrade+0x880/0x880 [ 1320.288985] __kernfs_new_node+0xef/0x6f0 [ 1320.293504] ? kasan_check_write+0x14/0x20 [ 1320.297760] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1320.302556] ? wait_for_completion+0x440/0x440 [ 1320.307169] ? mutex_unlock+0xd/0x10 [ 1320.310987] ? kernfs_activate+0x192/0x1f0 12:53:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 1320.315264] kernfs_new_node+0x99/0x130 [ 1320.319269] __kernfs_create_file+0x51/0x33b [ 1320.324696] sysfs_add_file_mode_ns+0x222/0x560 [ 1320.330899] internal_create_group+0x383/0xc30 [ 1320.335884] ? remove_files.isra.0+0x190/0x190 [ 1320.340683] ? kernfs_put+0x3c2/0x5d0 [ 1320.344506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1320.350305] ? kernfs_create_link+0x1d2/0x250 [ 1320.355008] sysfs_create_groups+0x9b/0x141 [ 1320.359453] device_add+0x12de/0x1760 [ 1320.363280] ? get_device_parent.isra.0+0x570/0x570 [ 1320.368292] ? __init_waitqueue_head+0x36/0x90 [ 1320.373828] ? pm_runtime_init+0x347/0x400 [ 1320.378078] netdev_register_kobject+0x183/0x3b0 [ 1320.382837] register_netdevice+0x875/0xff0 [ 1320.387245] ? netdev_change_features+0xb0/0xb0 [ 1320.391929] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1320.397522] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1320.402743] ? ip6gre_tunnel_init+0x340/0x340 [ 1320.407267] ? lockdep_rtnl_is_held+0x26/0x30 [ 1320.411791] ? ip6gre_tunnel_find+0x496/0x640 [ 1320.416321] ip6gre_newlink+0x298/0x7a0 [ 1320.420325] ? ip6gre_changelink+0x560/0x560 [ 1320.431853] rtnl_newlink+0x1042/0x1600 [ 1320.435857] ? rtnl_link_unregister+0x250/0x250 [ 1320.440883] ? mark_held_locks+0x100/0x100 [ 1320.445131] ? is_bpf_text_address+0xac/0x170 [ 1320.449651] ? find_held_lock+0x35/0x130 [ 1320.453713] ? is_bpf_text_address+0xac/0x170 [ 1320.458208] ? __lock_acquire+0x6ee/0x49c0 [ 1320.462438] ? __lock_acquire+0x6ee/0x49c0 [ 1320.466668] ? lock_downgrade+0x880/0x880 [ 1320.470821] ? mark_held_locks+0x100/0x100 [ 1320.475050] ? mark_held_locks+0x100/0x100 [ 1320.479286] ? __kernel_text_address+0xd/0x40 [ 1320.483798] ? mark_held_locks+0x100/0x100 [ 1320.488055] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1320.492751] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1320.503003] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1320.508057] ? find_held_lock+0x35/0x130 [ 1320.512114] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1320.516535] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1320.522089] ? rtnl_link_unregister+0x250/0x250 [ 1320.526766] rtnetlink_rcv_msg+0x463/0xb00 [ 1320.531021] ? rtnetlink_put_metrics+0x560/0x560 [ 1320.535964] ? netdev_pick_tx+0x300/0x300 [ 1320.540281] ? netlink_deliver_tap+0x22d/0xc20 [ 1320.544886] ? find_held_lock+0x35/0x130 [ 1320.548952] netlink_rcv_skb+0x17d/0x460 [ 1320.553032] ? rtnetlink_put_metrics+0x560/0x560 [ 1320.557803] ? netlink_ack+0xb30/0xb30 [ 1320.562207] ? kasan_check_read+0x11/0x20 [ 1320.566364] ? netlink_deliver_tap+0x254/0xc20 [ 1320.570944] rtnetlink_rcv+0x1d/0x30 [ 1320.574658] netlink_unicast+0x53a/0x730 [ 1320.578908] ? netlink_attachskb+0x770/0x770 [ 1320.583412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1320.588973] netlink_sendmsg+0x8ae/0xd70 [ 1320.593070] ? netlink_unicast+0x730/0x730 [ 1320.597334] ? selinux_socket_sendmsg+0x36/0x40 [ 1320.601999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1320.607529] ? security_socket_sendmsg+0x8d/0xc0 [ 1320.612303] ? netlink_unicast+0x730/0x730 [ 1320.616540] sock_sendmsg+0xd7/0x130 [ 1320.620281] ___sys_sendmsg+0x803/0x920 [ 1320.624310] ? copy_msghdr_from_user+0x430/0x430 [ 1320.629224] ? lock_downgrade+0x880/0x880 [ 1320.633387] ? kasan_check_read+0x11/0x20 [ 1320.637532] ? __fget+0x367/0x540 [ 1320.641151] ? iterate_fd+0x360/0x360 [ 1320.645094] ? __fget_light+0x1a9/0x230 [ 1320.649200] ? __fdget+0x1b/0x20 [ 1320.652657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1320.658295] __sys_sendmsg+0x105/0x1d0 [ 1320.662192] ? __ia32_sys_shutdown+0x80/0x80 [ 1320.667658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1320.672552] ? do_syscall_64+0x26/0x620 [ 1320.676582] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1320.682503] ? do_syscall_64+0x26/0x620 [ 1320.687147] __x64_sys_sendmsg+0x78/0xb0 [ 1320.691808] do_syscall_64+0xfd/0x620 [ 1320.696243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1320.701786] RIP: 0033:0x45af49 [ 1320.704989] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1320.727272] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.734986] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1320.742264] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1320.749549] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1320.757810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 12:53:56 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1320.766910] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {r3, r4/1000+10000}}, 0x100) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) 12:53:56 executing program 1 (fault-call:4 fault-nth:71): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:56 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:56 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0xf963, 0x0, 0x819, 0x7f, 0x33, 0x675, 0xeb9c, 0x1}) [ 1321.032731] FAULT_INJECTION: forcing a failure. [ 1321.032731] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.091129] CPU: 1 PID: 1160 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1321.098917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.108288] Call Trace: [ 1321.110909] dump_stack+0x197/0x210 [ 1321.114573] should_fail.cold+0xa/0x1b [ 1321.118576] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1321.123710] ? lock_downgrade+0x880/0x880 [ 1321.127947] __should_failslab+0x121/0x190 [ 1321.132207] should_failslab+0x9/0x14 [ 1321.136007] kmem_cache_alloc+0x2ae/0x700 [ 1321.140153] ? lock_downgrade+0x880/0x880 [ 1321.144303] __kernfs_new_node+0xef/0x6f0 [ 1321.148622] ? kasan_check_write+0x14/0x20 [ 1321.152856] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1321.157611] ? wait_for_completion+0x440/0x440 [ 1321.162198] ? mutex_unlock+0xd/0x10 [ 1321.165909] ? kernfs_activate+0x192/0x1f0 [ 1321.170143] kernfs_new_node+0x99/0x130 [ 1321.174120] __kernfs_create_file+0x51/0x33b [ 1321.178529] sysfs_add_file_mode_ns+0x222/0x560 [ 1321.183205] internal_create_group+0x383/0xc30 [ 1321.187811] ? remove_files.isra.0+0x190/0x190 [ 1321.192396] ? kernfs_put+0x3c2/0x5d0 [ 1321.196194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1321.201726] ? kernfs_create_link+0x1d2/0x250 [ 1321.206237] sysfs_create_groups+0x9b/0x141 [ 1321.210567] device_add+0x12de/0x1760 [ 1321.214455] ? get_device_parent.isra.0+0x570/0x570 [ 1321.219466] ? __init_waitqueue_head+0x36/0x90 [ 1321.224046] ? pm_runtime_init+0x347/0x400 [ 1321.228290] netdev_register_kobject+0x183/0x3b0 [ 1321.233230] register_netdevice+0x875/0xff0 [ 1321.237551] ? netdev_change_features+0xb0/0xb0 [ 1321.242218] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1321.247760] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1321.252948] ? ip6gre_tunnel_init+0x340/0x340 [ 1321.257437] ? lockdep_rtnl_is_held+0x26/0x30 [ 1321.261938] ? ip6gre_tunnel_find+0x496/0x640 [ 1321.266435] ip6gre_newlink+0x298/0x7a0 [ 1321.270415] ? ip6gre_changelink+0x560/0x560 [ 1321.274832] rtnl_newlink+0x1042/0x1600 [ 1321.278821] ? rtnl_link_unregister+0x250/0x250 [ 1321.283483] ? mark_held_locks+0x100/0x100 [ 1321.287734] ? is_bpf_text_address+0xac/0x170 [ 1321.292228] ? find_held_lock+0x35/0x130 [ 1321.296294] ? is_bpf_text_address+0xac/0x170 [ 1321.300806] ? __lock_acquire+0x6ee/0x49c0 [ 1321.305050] ? __lock_acquire+0x6ee/0x49c0 [ 1321.309280] ? lock_downgrade+0x880/0x880 [ 1321.313433] ? mark_held_locks+0x100/0x100 [ 1321.317678] ? mark_held_locks+0x100/0x100 [ 1321.321905] ? __kernel_text_address+0xd/0x40 [ 1321.326435] ? mark_held_locks+0x100/0x100 [ 1321.331018] ? avc_has_perm_noaudit+0x3b6/0x570 [ 1321.335687] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1321.340699] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1321.345759] ? find_held_lock+0x35/0x130 [ 1321.349819] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1321.354238] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1321.359770] ? rtnl_link_unregister+0x250/0x250 [ 1321.364434] rtnetlink_rcv_msg+0x463/0xb00 [ 1321.368688] ? rtnetlink_put_metrics+0x560/0x560 [ 1321.373441] ? netdev_pick_tx+0x300/0x300 [ 1321.377933] ? netlink_deliver_tap+0x22d/0xc20 [ 1321.382520] ? find_held_lock+0x35/0x130 [ 1321.386760] netlink_rcv_skb+0x17d/0x460 [ 1321.390823] ? rtnetlink_put_metrics+0x560/0x560 [ 1321.395681] ? netlink_ack+0xb30/0xb30 [ 1321.399580] ? kasan_check_read+0x11/0x20 [ 1321.403732] ? netlink_deliver_tap+0x254/0xc20 [ 1321.408420] rtnetlink_rcv+0x1d/0x30 [ 1321.412132] netlink_unicast+0x53a/0x730 [ 1321.416197] ? netlink_attachskb+0x770/0x770 [ 1321.420603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1321.426159] netlink_sendmsg+0x8ae/0xd70 [ 1321.430326] ? netlink_unicast+0x730/0x730 [ 1321.434571] ? selinux_socket_sendmsg+0x36/0x40 [ 1321.439241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1321.444780] ? security_socket_sendmsg+0x8d/0xc0 [ 1321.449567] ? netlink_unicast+0x730/0x730 [ 1321.453820] sock_sendmsg+0xd7/0x130 [ 1321.457538] ___sys_sendmsg+0x803/0x920 [ 1321.461525] ? copy_msghdr_from_user+0x430/0x430 [ 1321.466297] ? lock_downgrade+0x880/0x880 [ 1321.470451] ? kasan_check_read+0x11/0x20 [ 1321.474642] ? __fget+0x367/0x540 [ 1321.478105] ? iterate_fd+0x360/0x360 [ 1321.481929] ? __fget_light+0x1a9/0x230 [ 1321.485901] ? __fdget+0x1b/0x20 [ 1321.489262] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1321.494808] __sys_sendmsg+0x105/0x1d0 [ 1321.498691] ? __ia32_sys_shutdown+0x80/0x80 [ 1321.503110] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1321.507860] ? do_syscall_64+0x26/0x620 [ 1321.511830] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1321.517199] ? do_syscall_64+0x26/0x620 [ 1321.521189] __x64_sys_sendmsg+0x78/0xb0 [ 1321.525246] do_syscall_64+0xfd/0x620 [ 1321.529053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1321.534235] RIP: 0033:0x45af49 [ 1321.538117] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1321.557020] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1321.564731] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1321.571996] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1321.579258] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1321.586522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1321.593903] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:57 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) dup(r0) r1 = semget$private(0x0, 0x7, 0x0) r2 = semget$private(0x0, 0x7, 0x0) semop(r2, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x0]) r3 = semget$private(0x0, 0x7, 0x0) semop(r3, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = semget$private(0x0, 0x7, 0x0) semop(r4, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x0]) r5 = semget$private(0x0, 0x0, 0x80) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000300)=[0x9a7f, 0x1450]) r6 = semget$private(0x0, 0x7, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x7fff, 0x8) semop(r6, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000080)=[0x0]) semop(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x0]) semctl$SEM_STAT_ANY(r1, 0x7, 0x14, &(0x7f0000000200)=""/213) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:57 executing program 1 (fault-call:4 fault-nth:72): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:57 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000200)=""/4096) 12:53:57 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1321.900952] FAULT_INJECTION: forcing a failure. [ 1321.900952] name failslab, interval 1, probability 0, space 0, times 0 12:53:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1ff, 0x6, 0x7ff}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x5}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x568}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x4000000, 0x0, 0x8000}, 0x0, &(0x7f0000000140)={0x1000, 0x0, 0x0, 0x80000000000, 0x69dc}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1322.004655] CPU: 0 PID: 1178 Comm: syz-executor.1 Not tainted 4.19.95-syzkaller #0 [ 1322.012434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.021819] Call Trace: [ 1322.024463] dump_stack+0x197/0x210 [ 1322.028145] should_fail.cold+0xa/0x1b [ 1322.032067] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1322.037198] ? lock_downgrade+0x880/0x880 [ 1322.041388] __should_failslab+0x121/0x190 [ 1322.045651] should_failslab+0x9/0x14 [ 1322.049500] kmem_cache_alloc+0x2ae/0x700 [ 1322.053676] ? lock_downgrade+0x880/0x880 [ 1322.057857] __kernfs_new_node+0xef/0x6f0 [ 1322.062034] ? kasan_check_write+0x14/0x20 [ 1322.066295] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1322.071091] ? wait_for_completion+0x440/0x440 [ 1322.075709] ? mutex_unlock+0xd/0x10 [ 1322.079442] ? kernfs_activate+0x192/0x1f0 [ 1322.084139] kernfs_new_node+0x99/0x130 [ 1322.088146] __kernfs_create_file+0x51/0x33b [ 1322.092585] sysfs_add_file_mode_ns+0x222/0x560 [ 1322.097296] internal_create_group+0x383/0xc30 [ 1322.101907] ? remove_files.isra.0+0x190/0x190 [ 1322.106504] ? kernfs_put+0x3c2/0x5d0 [ 1322.110504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1322.116060] ? kernfs_create_link+0x1d2/0x250 [ 1322.120590] sysfs_create_groups+0x9b/0x141 [ 1322.125006] device_add+0x12de/0x1760 [ 1322.128850] ? get_device_parent.isra.0+0x570/0x570 [ 1322.133886] ? __init_waitqueue_head+0x36/0x90 [ 1322.138497] ? pm_runtime_init+0x347/0x400 [ 1322.142760] netdev_register_kobject+0x183/0x3b0 [ 1322.147551] register_netdevice+0x875/0xff0 [ 1322.151884] ? netdev_change_features+0xb0/0xb0 [ 1322.156587] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1322.162148] ip6gre_newlink_common.isra.0+0x165/0x3c0 [ 1322.167372] ? ip6gre_tunnel_init+0x340/0x340 [ 1322.171884] ? lockdep_rtnl_is_held+0x26/0x30 [ 1322.176384] ? ip6gre_tunnel_find+0x496/0x640 [ 1322.180885] ip6gre_newlink+0x298/0x7a0 [ 1322.184860] ? ip6gre_changelink+0x560/0x560 [ 1322.189277] rtnl_newlink+0x1042/0x1600 [ 1322.193257] ? rtnl_link_unregister+0x250/0x250 [ 1322.197923] ? mark_held_locks+0x100/0x100 [ 1322.202178] ? __lock_acquire+0x6ee/0x49c0 [ 1322.206407] ? cpuacct_charge+0x1db/0x360 [ 1322.210566] ? __update_load_avg_se+0x5ec/0xa10 [ 1322.215251] ? __lock_is_held+0xb6/0x140 [ 1322.219313] ? mark_held_locks+0xb1/0x100 [ 1322.223467] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.228221] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.233005] ? mark_held_locks+0x100/0x100 [ 1322.237248] ? debug_smp_processor_id+0x1c/0x20 [ 1322.241940] ? perf_trace_lock_acquire+0xf5/0x580 [ 1322.246788] ? finish_task_switch+0x146/0x7c0 [ 1322.251280] ? __mutex_lock+0xa67/0x1300 [ 1322.255349] ? find_held_lock+0x35/0x130 [ 1322.259470] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1322.265020] ? rtnl_link_unregister+0x250/0x250 [ 1322.269703] rtnetlink_rcv_msg+0x463/0xb00 [ 1322.273944] ? rtnetlink_put_metrics+0x560/0x560 [ 1322.278724] ? netdev_pick_tx+0x300/0x300 [ 1322.282878] ? netlink_deliver_tap+0x22d/0xc20 [ 1322.287462] ? find_held_lock+0x35/0x130 [ 1322.291549] netlink_rcv_skb+0x17d/0x460 [ 1322.295609] ? rtnetlink_put_metrics+0x560/0x560 [ 1322.300383] ? netlink_ack+0xb30/0xb30 [ 1322.304371] ? kasan_check_read+0x11/0x20 [ 1322.308535] ? netlink_deliver_tap+0x254/0xc20 [ 1322.313125] rtnetlink_rcv+0x1d/0x30 [ 1322.316837] netlink_unicast+0x53a/0x730 [ 1322.320911] ? netlink_attachskb+0x770/0x770 [ 1322.325322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1322.330872] netlink_sendmsg+0x8ae/0xd70 [ 1322.334973] ? netlink_unicast+0x730/0x730 [ 1322.339214] ? selinux_socket_sendmsg+0x36/0x40 [ 1322.344331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1322.349863] ? security_socket_sendmsg+0x8d/0xc0 [ 1322.354619] ? netlink_unicast+0x730/0x730 [ 1322.358856] sock_sendmsg+0xd7/0x130 [ 1322.362575] ___sys_sendmsg+0x803/0x920 [ 1322.366564] ? copy_msghdr_from_user+0x430/0x430 [ 1322.371325] ? lock_downgrade+0x880/0x880 [ 1322.375481] ? kasan_check_read+0x11/0x20 [ 1322.379639] ? __fget+0x367/0x540 [ 1322.383093] ? iterate_fd+0x360/0x360 [ 1322.386912] ? __fget_light+0x1a9/0x230 [ 1322.390883] ? __fdget+0x1b/0x20 [ 1322.394243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1322.399783] __sys_sendmsg+0x105/0x1d0 [ 1322.403669] ? __ia32_sys_shutdown+0x80/0x80 [ 1322.408087] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.412870] ? do_syscall_64+0x26/0x620 [ 1322.416864] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1322.422584] ? do_syscall_64+0x26/0x620 [ 1322.426591] __x64_sys_sendmsg+0x78/0xb0 [ 1322.430693] do_syscall_64+0xfd/0x620 [ 1322.434542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1322.439751] RIP: 0033:0x45af49 12:53:57 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xfff, 0x3ff}, @mss={0x2, 0x3}, @sack_perm, @timestamp, @sack_perm], 0x5) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) [ 1322.442955] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1322.461957] RSP: 002b:00007f529b088c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.469676] RAX: ffffffffffffffda RBX: 00007f529b088c90 RCX: 000000000045af49 [ 1322.476963] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1322.484236] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1322.491609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f529b0896d4 [ 1322.498870] R13: 00000000004caa88 R14: 00000000004e40f8 R15: 0000000000000005 12:53:58 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1064c, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xe401, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000080)={0x1}, 0x8, 0x80800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB="c2ceb8d7804e30c43983dd6de256415b0219f64be82f5e07c44ec0170c95011002913082c7cb322495e72ac01ad8f936f5eceee294c8a93b5d77413423b5c5743cd9935bb4dda16dfab0dea9aa8d349a18a9c06db5e8ff24b0adce21a9df1d742255788c74aa7069654355dec4cbbcd6124d49a9fcd5eb3921a218ac38bdd560efb136a0c0ce1216367f0299e56ae1d12f68512e", @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000040)=0x101, 0x4) 12:53:58 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r2, r3, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 12:53:58 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:58 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x80, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001580)={0x14, r3, 0x11, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8, 0x1) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000dfd000/0x200000)=nil, 0x200000}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x164, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}]}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xecc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x2633b445}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x41}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x9}, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x11}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x28}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x0, 0x2, 0x5d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfc1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbb4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xad}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0xfa, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x1}, 0x4008048) r7 = fcntl$dupfd(r0, 0x406, r1) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) 12:53:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:58 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000002020900032cbd7000fff06c19df00f869da00010073797a31000000000008000500000000160000000000007c74efbba17239230dcf6e728a2b242253f28b9011b3d54ceb6b7ffa01c1f78accbfb2068cc56d79167dc85a69d8d9ceb3a4d2c6889d05414329827e0182e9fe128b8dd4d35b0ecff71de01f83dfe4bb1e55a0ba2638dd8f930e08d9a04a2f1dc3f429e78d76306a2e57353ed66e6c440108bc533d0f260a2e3309f49927b503757ea6cb"], 0x38}, 0x1, 0x0, 0x0, 0xc451}, 0x1000) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$UHID_INPUT2(r1, &(0x7f0000000000)={0xc, {0xe, "3e7c1f8af75c8fd5488c85762c87"}}, 0x14) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000240)=0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000200)) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:58 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:58 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffffff, 0xfffffffb}, 0xc) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:58 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r5) 12:53:58 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:58 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:59 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(0xffffffffffffffff, r2, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 12:53:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:59 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:59 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000180)=0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000780)) r8 = dup(r6) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000280)={0x400, 0xa, 0x4, 0x4000, 0x4a5c, {r4, r5/1000+10000}, {0x3, 0xf3294cce27e51522, 0x80, 0x2, 0x6, 0x9, "8dd4cca8"}, 0x9937, 0x7, @fd=r8, 0x400, 0x0, r1}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r9, 0x4040ae72, &(0x7f0000000400)={0x4, 0xfffffffb, 0x4, 0x4, 0xff}) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00000006c0)={0x0, 0x1a}, &(0x7f0000000700)=0x8) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = dup(r10) setsockopt$packet_int(r11, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r11, 0xc2604111, &(0x7f0000000440)={0x6, [[0x1000, 0x5, 0x3, 0x264, 0x7, 0x9, 0x80, 0x3], [0xea0, 0x2, 0x3, 0x1, 0xffffff7f, 0x7, 0x7ff, 0x7fffffff], [0x6b, 0x1ff, 0x9, 0x8001, 0x3, 0x2, 0x9, 0x80000000]], [], [{0x2, 0x1ff, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x6, 0xcedc, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xdc, 0x1, 0x1, 0x0, 0x1}, {0xda43, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x1d4000, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x81, 0x8, 0x1, 0x0, 0x1}, {0xb58f, 0xc681, 0x1, 0x0, 0x1, 0x1}, {0x7f, 0x9, 0x1, 0x1}, {0x1, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}], [], 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x653}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r12+30000000}, 0x0) 12:53:59 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:59 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x0, @dev={[], 0x52}, 'ipvlan0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x8}, 0x0, 0x8000000002, 0x10, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, r3, 0x0, r0, 0x0) 12:53:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:59 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:59 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x8, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) dup(r5) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 12:53:59 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:59 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(0xffffffffffffffff, r2, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 12:53:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:53:59 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100}]}) dup2(r3, r0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:53:59 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:53:59 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x480, 0x0, 0x9, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000400)=""/160, &(0x7f0000000040)=0xa0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:53:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000000000)=0x400000000008, 0x16d) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x989635f3f94019b3, @perf_config_ext={0x101}, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0x0, r1, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000001200)={0x8d2, {{0xa, 0x4e23, 0x4, @remote, 0x7fffffff}}}, 0x88) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000) 12:53:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:54:00 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000480)={0x5e38, 0x1, 0x4, 0x1400000, 0xf0000000, {r1, r2/1000+10000}, {0x2, 0x9af1686f306e2e69, 0x2, 0x3, 0x7, 0x81, "83219c1d"}, 0x80000000, 0x0, @planes=&(0x7f0000000440)={0x3f, 0x7cb, @mem_offset=0x6, 0x5}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000540)={0x8, 0x10, &(0x7f0000000500)="98edcfd72ff8277c23f976c651489b47e79b337b071de9cc4313697a07084abba8b3a83f", {0x0, 0x4, 0x47524247, 0x4, 0x3e, 0x0, 0x0, 0x80000001}}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200080, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x828000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x50, 0x3, 0x1, 0xa02, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x3}, @CTA_HELP={0x10, 0x5, {0xa, 0x1, 'Q.931\x00'}}, @CTA_LABELS_MASK={0x24, 0x17, [0x8, 0x6, 0x4, 0x6, 0x2, 0x10001, 0x132, 0xfff]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = fcntl$dupfd(r4, 0x0, r0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) 12:54:00 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:54:00 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$TIOCNXCL(r2, 0x540d) sched_setscheduler(r1, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="d5e9f838cc1d0f3a3dd02f5851e84a1e8143785acb2bc6cf68aa42bef3dc59c2cc15b6066d2ff35711f81f6c5f0ab2d00b233cca84afed4ed95e53d2fcf2edd4d597e7d16fe8a8c46e6da9", @ANYRES32, @ANYRES32=r3, @ANYBLOB="8e2af1cf859c28dbcc082761cf26fa9a767b94578a78f74aa51d7828ce062c3d50d41fa7177a09e62d5d313568ecfdd4df8120fdd514a413a542351979ef0508aab90d1017d3c4821093f8c57dec9deec388e04f591a5278c571bf593baf6155050d404bbf29fd9a1732e7c68af5ac16429f834b27f8c24598ecd12b5c51e6e3f36b3797e0c0c60a47dce696576431f0858d9eecf05d25c5159cad2df6d03bf84efe67a8573c", @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r4], 0x8, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xb676, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) ioctl$SOUND_MIXER_READ_CAPS(r6, 0x80044dfc, &(0x7f0000000080)) [ 1324.571076] net_ratelimit: 22 callbacks suppressed [ 1324.571085] protocol 88fb is buggy, dev hsr_slave_0 [ 1324.582145] protocol 88fb is buggy, dev hsr_slave_1 12:54:00 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) bind$tipc(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) 12:54:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:54:00 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(0xffffffffffffffff, r2, 0x0, 0x102000004) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xffffffffffffff69) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 12:54:00 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:54:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80, 0x60c281) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x38, 0x4, 0x8, 0xb, 0x3, 0x40}) 12:54:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:54:00 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r3], 0x8, 0x1) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000100)=0x401) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3ff) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) 12:54:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$FBIOBLANK(r1, 0x4611, 0x2) modify_ldt$write(0x1, 0x0, 0x0) r2 = getpid() modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) sched_setscheduler(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r2, @ANYRES16], 0x8, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0xf7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, r2, 0x3, 0xffffffffffffffff, 0x1) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x24400) 12:54:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) 12:54:00 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:54:01 executing program 2: modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x2) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000600)) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x2e, 0x1d, &(0x7f0000000200)}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3ff) 12:54:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0xff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd49e}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x24402) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB, @ANYBLOB="b4ecfff6cd11d2d8fb3abcde7983643d82fe21455278badb2ceb543c3bcb74499bb9e08002a4d148da07d9a747ce2de102409eb54fe203c59779a0b40332072e00d5f2ccda0f2ee190348d3c469f60422217d17744304446fcde1b3aab43f432a3ffc3ed5e9ff620b8203add4ebe4c1cc75a37022b57e229339a407143828bb17c5e553d12f254d41eaaa39ba6127fd55562bf6b457d05e8b7be8da04c47181f4e157d055ff6c98b2ac1a2f3e805663759e0028ad2394e8024696d7549ed0a7ffb505119fa51fee8", @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x8, 0x1) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000200)=""/232, &(0x7f0000000000)=0xe8) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = getpgrp(r3) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1a, 0xe, @tid=r4}, &(0x7f0000000080)) 12:54:01 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60443, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:54:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0) [ 1325.691058] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.696432] protocol 88fb is buggy, dev hsr_slave_1 [ 1325.702785] ================================================================== [ 1325.702916] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 1325.702933] Read of size 17 at addr ffffffff87ed8bd0 by task syz-executor.2/2210 [ 1325.702940] [ 1325.702959] CPU: 0 PID: 2210 Comm: syz-executor.2 Not tainted 4.19.95-syzkaller #0 [ 1325.702972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.702981] Call Trace: [ 1325.703004] dump_stack+0x197/0x210 [ 1325.703035] ? fbcon_get_font+0x2b2/0x5e0 [ 1325.703059] print_address_description.cold+0x5/0x20d [ 1325.703083] ? fbcon_get_font+0x2b2/0x5e0 [ 1325.703103] kasan_report.cold+0x8c/0x2ba [ 1325.703133] check_memory_region+0x123/0x190 [ 1325.703157] memcpy+0x24/0x50 [ 1325.703180] fbcon_get_font+0x2b2/0x5e0 [ 1325.703208] ? display_to_var+0x7e0/0x7e0 [ 1325.703273] con_font_op+0x20b/0x1250 [ 1325.703315] ? con_write+0xd0/0xd0 [ 1325.703358] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1325.703379] ? _copy_from_user+0xdd/0x150 [ 1325.703405] vt_ioctl+0x1c93/0x2530 [ 1325.703427] ? complete_change_console+0x3a0/0x3a0 [ 1325.703445] ? avc_has_extended_perms+0xa78/0x10f0 [ 1325.703482] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1325.703526] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 1325.703546] ? complete_change_console+0x3a0/0x3a0 [ 1325.703605] tty_ioctl+0x7f3/0x1510 [ 1325.703635] ? tty_vhangup+0x30/0x30 [ 1325.703655] ? mark_held_locks+0x100/0x100 [ 1325.703682] ? perf_trace_lock_acquire+0x380/0x580 [ 1325.703711] ? __fget+0x340/0x540 [ 1325.703747] ? __might_sleep+0x95/0x190 [ 1325.703766] ? tty_vhangup+0x30/0x30 [ 1325.703788] do_vfs_ioctl+0xd5f/0x1380 [ 1325.703806] ? selinux_file_ioctl+0x46f/0x5e0 [ 1325.703826] ? selinux_file_ioctl+0x125/0x5e0 [ 1325.703852] ? ioctl_preallocate+0x210/0x210 [ 1325.703871] ? selinux_file_mprotect+0x620/0x620 [ 1325.703910] ? iterate_fd+0x360/0x360 [ 1325.703932] ? nsecs_to_jiffies+0x30/0x30 [ 1325.703966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1325.703985] ? security_file_ioctl+0x8d/0xc0 [ 1325.704011] ksys_ioctl+0xab/0xd0 [ 1325.704038] __x64_sys_ioctl+0x73/0xb0 [ 1325.704064] do_syscall_64+0xfd/0x620 [ 1325.704092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1325.704109] RIP: 0033:0x45af49 [ 1325.704127] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1325.704138] RSP: 002b:00007fe2205c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.704157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1325.704168] RDX: 0000000020000000 RSI: 0000000000004b6b RDI: 0000000000000004 [ 1325.704180] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1325.704191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2205c96d4 [ 1325.704201] R13: 00000000004c3d57 R14: 00000000004da5e8 R15: 00000000ffffffff [ 1325.704240] [ 1325.704248] The buggy address belongs to the variable: [ 1325.704353] fontdata_8x16+0xff0/0x1120 [ 1325.704362] [ 1325.704369] Memory state around the buggy address: [ 1325.704387] ffffffff87ed8a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1325.704403] ffffffff87ed8b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1325.704418] >ffffffff87ed8b80: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa [ 1325.704429] ^ [ 1325.704445] ffffffff87ed8c00: 06 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa [ 1325.704460] ffffffff87ed8c80: 06 fa fa fa fa fa fa fa 00 00 03 fa fa fa fa fa [ 1325.704468] ================================================================== [ 1325.704476] Disabling lock debugging due to kernel taint [ 1325.704609] Kernel panic - not syncing: panic_on_warn set ... [ 1325.704609] [ 1325.704631] CPU: 0 PID: 2210 Comm: syz-executor.2 Tainted: G B 4.19.95-syzkaller #0 [ 1325.704642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.704650] Call Trace: [ 1325.704671] dump_stack+0x197/0x210 [ 1325.704697] ? fbcon_get_font+0x2b2/0x5e0 [ 1325.704713] panic+0x26a/0x50e [ 1325.704731] ? __warn_printk+0xf3/0xf3 [ 1325.704756] ? fbcon_get_font+0x2b2/0x5e0 [ 1325.704774] ? preempt_schedule+0x4b/0x60 [ 1325.704793] ? ___preempt_schedule+0x16/0x18 [ 1325.704813] ? trace_hardirqs_on+0x5e/0x220 [ 1325.704838] ? fbcon_get_font+0x2b2/0x5e0 [ 1325.704856] kasan_end_report+0x47/0x4f [ 1325.704875] kasan_report.cold+0xa9/0x2ba [ 1325.704902] check_memory_region+0x123/0x190 [ 1325.704922] memcpy+0x24/0x50 [ 1325.704943] fbcon_get_font+0x2b2/0x5e0 [ 1325.704967] ? display_to_var+0x7e0/0x7e0 [ 1325.704983] con_font_op+0x20b/0x1250 [ 1325.705004] ? con_write+0xd0/0xd0 [ 1325.705036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1325.705054] ? _copy_from_user+0xdd/0x150 [ 1325.705074] vt_ioctl+0x1c93/0x2530 [ 1325.705095] ? complete_change_console+0x3a0/0x3a0 [ 1325.705112] ? avc_has_extended_perms+0xa78/0x10f0 [ 1325.705146] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1325.705166] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 1325.705181] ? complete_change_console+0x3a0/0x3a0 [ 1325.705201] tty_ioctl+0x7f3/0x1510 [ 1325.705225] ? tty_vhangup+0x30/0x30 [ 1325.705242] ? mark_held_locks+0x100/0x100 [ 1325.705264] ? perf_trace_lock_acquire+0x380/0x580 [ 1325.705290] ? __fget+0x340/0x540 [ 1325.705328] ? __might_sleep+0x95/0x190 [ 1325.705347] ? tty_vhangup+0x30/0x30 [ 1325.705368] do_vfs_ioctl+0xd5f/0x1380 [ 1325.705383] ? selinux_file_ioctl+0x46f/0x5e0 [ 1325.705398] ? selinux_file_ioctl+0x125/0x5e0 [ 1325.705418] ? ioctl_preallocate+0x210/0x210 [ 1325.705433] ? selinux_file_mprotect+0x620/0x620 [ 1325.705462] ? iterate_fd+0x360/0x360 [ 1325.705498] ? nsecs_to_jiffies+0x30/0x30 [ 1325.705529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1325.705550] ? security_file_ioctl+0x8d/0xc0 [ 1325.705572] ksys_ioctl+0xab/0xd0 [ 1325.705594] __x64_sys_ioctl+0x73/0xb0 [ 1325.705620] do_syscall_64+0xfd/0x620 [ 1325.705645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1325.705660] RIP: 0033:0x45af49 [ 1325.705678] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1325.705688] RSP: 002b:00007fe2205c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.705705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1325.705715] RDX: 0000000020000000 RSI: 0000000000004b6b RDI: 0000000000000004 [ 1325.705726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1325.705737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2205c96d4 [ 1325.705748] R13: 00000000004c3d57 R14: 00000000004da5e8 R15: 00000000ffffffff [ 1325.707129] Kernel Offset: disabled [ 1326.349723] Rebooting in 86400 seconds..