[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts. 2020/05/14 02:59:33 fuzzer started 2020/05/14 02:59:33 dialing manager at 10.128.0.26:44299 2020/05/14 02:59:33 syscalls: 2842 2020/05/14 02:59:33 code coverage: enabled 2020/05/14 02:59:33 comparison tracing: enabled 2020/05/14 02:59:33 extra coverage: enabled 2020/05/14 02:59:33 setuid sandbox: enabled 2020/05/14 02:59:33 namespace sandbox: enabled 2020/05/14 02:59:33 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/14 02:59:33 fault injection: enabled 2020/05/14 02:59:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/14 02:59:33 net packet injection: enabled 2020/05/14 02:59:33 net device setup: enabled 2020/05/14 02:59:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/14 02:59:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/14 02:59:33 USB emulation: /dev/raw-gadget does not exist 03:02:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x7, {0x6, 0x6, 0x5, 0x8}}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x4, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9e0906, 0x400, [], @p_u8=&(0x7f0000000080)=0x40}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000440)=0xe8) getgroups(0x7, &(0x7f0000000480)=[0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0xee00, 0xee00, 0xffffffffffffffff]) r9 = getgid() write$FUSE_DIRENTPLUS(r1, &(0x7f00000004c0)={0x1e8, 0x0, 0x7, [{{0x0, 0x1, 0x2, 0x3ff, 0xfd4, 0x2, {0x4, 0x3f, 0x1, 0x9, 0xc81, 0xeddd, 0xbc, 0x6d2, 0xe63, 0x6, 0xfffffff7, r2, r4, 0x6, 0x2b}}, {0x2, 0x5, 0x0, 0x10000}}, {{0x6, 0x2, 0xfffffffffffffeff, 0x2, 0xe8, 0x26, {0x1, 0x7, 0x3, 0x9, 0x1eb400, 0x6, 0x3, 0x1ff, 0x400, 0xff, 0x2, r6, r8, 0xd5, 0x9}}, {0x0, 0x20400000000}}, {{0x0, 0x2, 0x4, 0x3f, 0x498a, 0xff, {0x4, 0x2, 0x0, 0x1, 0x101, 0x1, 0x7, 0x80, 0x0, 0xf52, 0x200, 0xee00, r9, 0x9, 0x7}}, {0x6, 0x7, 0xd, 0x4, '/dev/video36\x00'}}]}, 0x1e8) r10 = creat(&(0x7f00000006c0)='./file0\x00', 0x31) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r10, 0xc0406619, &(0x7f0000000700)={{0x1, 0x0, @descriptor="0fd7f23922cb0cf6"}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000740)={r5, 0x1, 0x6, @multicast}, 0x10) nanosleep(&(0x7f0000000780), &(0x7f00000007c0)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r10, 0xc06c4124, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r11 = socket$l2tp(0x2, 0x2, 0x73) sendfile(0xffffffffffffffff, r11, &(0x7f0000000880)=0x4, 0xa50) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/capi/capi20ncci\x00', 0x800, 0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000ac0)={0x0, 0x0}) sendmsg$unix(r12, &(0x7f0000000d80)={&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="b5606a1ea8d8ecb7d51bf9a600dda317149f2a181bada7baf965176140670cb1b08a7506b459502d36eaf9f4a13d5038805fe6d4b43e4950f9f47bc1e0cd2399b6c2b4a94b56c5fda9f4857c", 0x4c}, {&(0x7f0000000a00)="f86738f918f422131f5ef968b64747d94692df66498e900aa7b563903418aa93ac4c203c0e36e7581351e4b5d4ebd4cd2d78070b711a64b4326732d8bb96e960c4ed7c2e5c11fdce1542916c364892834b7c434f615074995054628220be86db74b070f2240e9970f431cba7ca8d80cbc2677af1e9a1c9d895bb64b87cebf0", 0x7f}], 0x2, &(0x7f0000000d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r13]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r7}}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x80}, 0x40000) syzkaller login: [ 211.179801][ T7208] IPVS: ftp: loaded support on port[0] = 21 03:02:05 executing program 1: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="dab8cb58a4e76aa68416bc9c3d79222280c1f2f3a52714e6cbbffaf452ea43a097b69af8302feb6d68745a52c830af406de163ec7f4ce8342e9617e5651e2fe958e8f7c518ed7ef7b35ee011508f080d44b6a587bb9ceb058aadc19cd0aff8d050155beddd0e719911d4e186e72520a79acfeff4b8f14c3f94b96f1ff4797fcd", 0x80}, {&(0x7f00000000c0)="8b41a4aa1cbf93c846d27d37f4c76a43579a4b3d5c34ce3f3a78a70d97543e6ba12a1ed20f132ddda27790cf84237d493379ef6330ef21d5730efbf348d5ce33553b3313207972c9586daa5258954f5a41030ee2ec5273043a91ed85e50cc7d3911c9580eda7e1c6ad56e2ea4a214b67466400328971e6faad002aa07f7ec21663cf91e54550667244a5f339e4b04ba3c16d5e755091058b940ef008b2a736ad0c833a4afa710646df8f05732b14b209c7d9e4335ee4b0aa0d771d260fef38c25d7bc623493e65423c", 0xc9}], 0x2, &(0x7f0000000200)=[@authinfo={0x18, 0x84, 0x6, {0xe7}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x4, 0x7f, 0x100, 0x81}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0xf0, 0x5a844}, 0x40020) prctl$PR_CAPBSET_DROP(0x18, 0xa) r0 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@ipx, &(0x7f00000003c0)=0x80, 0x80800) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4080) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) capset(&(0x7f0000000540)={0x20071026, r1}, &(0x7f0000000580)={0x9, 0x8, 0x4, 0x5, 0x4a6, 0x400}) r2 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x2dcb, 0x400000) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000600)) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000640)) r3 = syz_open_dev$vbi(&(0x7f0000000680)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000006c0), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='attr/sockcreate\x00') ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000740)) io_uring_enter(0xffffffffffffffff, 0x3, 0x8000, 0x2, &(0x7f0000000780), 0x8) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)={0x45c, 0x3f4, 0x2, 0x70bd25, 0x25dfdbfe, {0x4, 0x1, 0x24, [0x6, 0x800, 0x5868, 0xfff, 0x8000, 0x8, 0x10001, 0x0, 0x1ff, 0xab99, 0x98, 0x200, 0x1ff, 0x6, 0x6b3, 0x0, 0xfffffff7, 0x400, 0x4, 0x8, 0x1f, 0xfffe0, 0x5, 0x1, 0x7ff, 0xfffffff8, 0x1, 0x6, 0x3, 0x9, 0x1a4d, 0xfd6, 0x1000, 0x2f4c, 0x0, 0x6, 0x7be1b297, 0x6, 0x0, 0x48, 0x4, 0x9, 0x8000, 0x6, 0x7f, 0x800, 0xc9000000, 0xc0d, 0x6, 0x1, 0x1f, 0x0, 0x9, 0x7fffffff, 0x4, 0x2, 0x800, 0x9, 0x80f, 0x81, 0x7, 0x0, 0x400, 0x2000000], [0x6, 0x7, 0x0, 0x0, 0xffffffe1, 0x200, 0x8, 0x0, 0xfffffff8, 0x2, 0xffff, 0xffffffff, 0x9, 0xffff, 0x1, 0x8, 0x3ff, 0x1, 0x6, 0x6, 0x1f, 0x2, 0x5, 0xff, 0xfffffffc, 0x4, 0x1ff, 0x4, 0x7, 0x80000001, 0x7ff, 0x187, 0x800, 0x800, 0x8000, 0x6023, 0x5, 0x8, 0x7, 0x9, 0xfffffffe, 0x7ff, 0x2, 0x8, 0xd136, 0x2, 0x4a6, 0x1000, 0x6, 0x4, 0x8, 0x1, 0x1, 0x4, 0x7fffffff, 0x2, 0x8, 0x1, 0x74847e90, 0x4, 0x1, 0xfffffffb, 0x19, 0x1b5f], [0x1f, 0x7, 0x7, 0x3, 0x2, 0x8000, 0x6, 0x3ff, 0x3, 0x4, 0x7, 0x9, 0x94, 0x7, 0xffe00000, 0x80000001, 0x80000001, 0x5, 0x3, 0xed0, 0x1, 0x4, 0x0, 0x4, 0x0, 0xfffffff9, 0x5, 0x46, 0x97d, 0x1, 0x6, 0xea, 0x6, 0x7, 0x5, 0x7, 0xffff23c4, 0x100, 0xe00, 0xfffffffc, 0x0, 0xfff, 0x2, 0x20, 0xb840, 0x4, 0xc08, 0x8, 0x3, 0x8001, 0xca, 0x10000, 0xfffffc00, 0x3, 0x6, 0x7fff, 0x5, 0x401, 0x9, 0xff, 0x4, 0x8000, 0x7, 0x3], [0xeb24, 0xb44, 0x7, 0x6, 0x9, 0x0, 0x1, 0xffffffc1, 0x10000, 0xfffffff8, 0x9, 0x10000, 0xffff, 0x400, 0x7f, 0xdec3, 0x200, 0xcb48, 0x3, 0x8000, 0x0, 0x8000, 0x7, 0x3, 0x3, 0xfff, 0x2, 0xd72, 0x2, 0xffffff08, 0x9, 0x9, 0x1f, 0x6, 0x4, 0x15d, 0x5, 0x18d1, 0xd1, 0x1f, 0x0, 0x9, 0x8001, 0x0, 0x9, 0x10001, 0x8000, 0xfffffffa, 0x3, 0x8, 0x2, 0x3, 0x1f, 0x7f, 0x20, 0x5, 0xfd, 0x7, 0xe15, 0x4, 0xe0, 0x6, 0x7, 0x2], 0x39, [':(wlan1\x00', 'attr/sockcreate\x00', '\x00', 'nodev$proc:\'vboxnet0\x00', '\x00', 'md5sum{-\x00', '\x00']}, ["", "", "", ""]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000d00)={0x4, 0x0, 0x4, 0x40000, 0x7, {0x0, 0xea60}, {0x5, 0x2, 0x4, 0x81, 0xb2, 0x8, "e94b6296"}, 0x3ff, 0x3, @fd, 0xd2, 0x0, r3}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x16) syz_open_dev$sndmidi(&(0x7f0000000d80)='/dev/snd/midiC#D#\x00', 0x100, 0x4a001) r6 = syz_open_dev$sg(&(0x7f0000000dc0)='/dev/sg#\x00', 0x8, 0x40000) fsetxattr$security_capability(r6, &(0x7f0000000e00)='security.capability\x00', &(0x7f0000000e40)=@v2={0x2000000, [{0x41, 0x1}, {0x5, 0x401}]}, 0x14, 0x1) [ 211.371284][ T7208] chnl_net:caif_netlink_parms(): no params data found [ 211.496959][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.512604][ T7338] IPVS: ftp: loaded support on port[0] = 21 [ 211.513104][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.545561][ T7208] device bridge_slave_0 entered promiscuous mode [ 211.568336][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.583109][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.590917][ T7208] device bridge_slave_1 entered promiscuous mode 03:02:05 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x18}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="e6c1f1bc91633545bb483a9028f9e4ffc48f5bdd3dd3338f2bd14a37df20328209c83387fcbab67ab5bd0093c295b288c2f912be24ca74a77f0aa123d6", &(0x7f0000000080)=""/111}, 0x20) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x300, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x811, 0x70bd25, 0x25dfdbfd, {0xffff}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000280)={0x16, 0xe, 0x2, 0x6, 0x0, [@mcast1, @remote, @remote, @mcast2, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @loopback}]}, 0x78) syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x3, 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x6b737b71926781d9, 0x0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000380)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x608080, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x3) r5 = accept$inet(r4, &(0x7f0000000400)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000480)={0x0, 'bond0\x00', 0x4}, 0x18) socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000004c0)={0x2, 0x4, 0x4, 0x20, 0x2, {}, {0x3, 0x4, 0x0, 0xcf, 0xf1, 0x2, "654176c8"}, 0xff, 0x2, @fd=r1, 0x8000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @sdr={0x38415262, 0x3}}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f0000000680)={0x22, 0x1ff, 0xf85}) inotify_add_watch(r6, &(0x7f0000000700)='./file0\x00', 0x0) [ 211.655392][ T7208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.680930][ T7208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.768811][ T7208] team0: Port device team_slave_0 added [ 211.853533][ T7208] team0: Port device team_slave_1 added [ 211.936007][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_0 03:02:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@remote, @remote, r2}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x40, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000140)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000200)={0x0, 0x10001, 0x200, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10905, 0x7, [], @p_u16=&(0x7f0000000180)=0xff6d}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000240)=""/178) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f0000000300)=""/242, 0x3}) r5 = dup(0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f00000005c0)=0x7ff) fcntl$addseals(r0, 0x409, 0x5) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000600), 0x8) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000640)={0x9, 0xc, 0x4, 0x8, 0x6, {0x0, 0x2710}, {0x1, 0xc, 0x7f, 0x2, 0x80, 0x20, "fbdc06d2"}, 0x7, 0x5, @userptr=0x100000001, 0x5, 0x0, 0xffffffffffffffff}) connect$l2tp(r6, &(0x7f00000006c0)={0x2, 0x0, @local, 0x4}, 0x10) set_tid_address(&(0x7f0000000700)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000780)={0x1, 0x0, [{}]}) write$uinput_user_dev(r3, &(0x7f00000007c0)={'syz0\x00', {0x1ff, 0xfff, 0x8000, 0xf800}, 0x13, [0x652, 0x5, 0x9, 0x7, 0x7, 0x20, 0x9, 0x6, 0x90, 0x4, 0x5, 0x80000001, 0x7f, 0x7, 0x7, 0x0, 0x3b, 0x80, 0xffff, 0xfffffffd, 0x80, 0x40, 0x3, 0xffff, 0x5, 0x0, 0x1, 0x7, 0xa2b2, 0x7f, 0x3, 0x8, 0x2, 0x81, 0x0, 0x4, 0x9, 0x4d042585, 0x9, 0x9, 0x0, 0x3dcd, 0xfffffffb, 0x4, 0x2, 0x200, 0x800, 0x5, 0x4c0728d, 0x10001, 0x0, 0x1f, 0xfffffffd, 0x0, 0x6, 0x3, 0x3, 0x2e5, 0x4, 0xc83, 0x8, 0x8, 0x0, 0x2], [0x7f, 0x100, 0x9, 0x30, 0x9, 0x1, 0x20dc, 0x8000, 0x0, 0x0, 0xffff, 0x9, 0x8000, 0x8001, 0x7, 0x1, 0x4, 0x1, 0x1, 0x135c, 0x4, 0x3, 0xfffffff7, 0xffffffff, 0xd5b, 0x1754, 0x5, 0xffffff01, 0x5e09, 0x6, 0x2, 0x5, 0x3, 0x5cf, 0x6, 0x1000, 0x9494, 0x6, 0x7, 0x9, 0x2, 0x295f, 0x8, 0x1, 0x2e1a, 0x10000, 0x4, 0xffffffff, 0x7, 0xfa, 0x80000001, 0x5, 0x0, 0x3, 0x8, 0x7fff, 0x2, 0x18, 0xff, 0x9, 0x8001, 0x3, 0x8, 0x6], [0x0, 0x0, 0x200, 0x7, 0x4, 0x10001, 0x3, 0x5, 0x0, 0x4, 0x4, 0x5, 0xf, 0x5, 0x3, 0x3, 0x20, 0xfffff001, 0x5, 0xffffff80, 0x2, 0xff, 0x5, 0x3f, 0x401, 0x4237, 0x1, 0x4, 0x5, 0xfe, 0x101, 0x0, 0x8, 0xfff, 0xfffffff8, 0x20, 0x782, 0x5, 0x6, 0x1, 0xfffffffe, 0x1, 0x8, 0x2, 0x3fb7, 0x7fffffff, 0x0, 0x4, 0x7, 0x101, 0x1000, 0x536, 0x5, 0x7fffffff, 0x7fff, 0x8, 0x3, 0x3, 0xbff0, 0x8, 0x5, 0x4, 0x5, 0x3f], [0x4, 0x5, 0x50, 0xfffff800, 0xffff, 0xc0000000, 0x5, 0x3, 0x8, 0x64a, 0x1, 0x96, 0x7fff, 0x2, 0xee7b, 0x8, 0xffffffe0, 0x6, 0x3403, 0x6, 0x9, 0x400, 0x80, 0x9, 0x80, 0x5, 0xe4, 0x8, 0x80000000, 0x7ff, 0x76, 0x3d, 0x8, 0x8f, 0x7, 0x0, 0x40000000, 0x5, 0xf3a, 0x4, 0x3, 0x401, 0x4, 0x800, 0x8, 0x1ff, 0x7, 0x1, 0x4, 0x2, 0x52, 0x4550, 0x80000000, 0x2, 0x872, 0x1000, 0x5, 0x9168, 0x10001, 0xf2a0, 0x2, 0x80000001, 0x28500000, 0xff]}, 0x45c) [ 211.963100][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.024608][ T7208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.060210][ T7338] chnl_net:caif_netlink_parms(): no params data found [ 212.076028][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.084247][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.122996][ T7208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.126500][ T7462] IPVS: ftp: loaded support on port[0] = 21 [ 212.256905][ T7208] device hsr_slave_0 entered promiscuous mode [ 212.282712][ T7487] IPVS: ftp: loaded support on port[0] = 21 03:02:06 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c114}, 0x4044800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'ip6gre0\x00', {0x2, 0x4e20, @multicast1}}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000180)={@none, 0xbe, 0x7, 0x1000}) socketpair(0x1d, 0xa, 0x1000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x46}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x8bd, 0xfff, 0x0, 0x2, 0x40, 0x400, 0x3, {r4, @in6={{0xa, 0x4e22, 0x3f, @empty, 0x3}}, 0x7fffffff, 0x333, 0x80, 0x1, 0x3}}, &(0x7f0000000340)=0xb0) msgget(0x3, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000380)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ocfs2_control\x00', 0x280640, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000980)={0x0, 0x1, 0x3, [0xfffe, 0x1ff, 0x5]}, &(0x7f00000009c0)=0xe) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000a00)={r6, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0x6}}, 0xea, 0x9}, &(0x7f0000000ac0)=0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000b00)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x4}, {0xa, 0x4e22, 0x1, @empty, 0x7fffffff}, 0x8, [0xffffffff, 0x0, 0x8, 0x9508, 0x7fffffff, 0x5, 0x0, 0x100]}, 0x5c) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/snapshot\x00', 0x80000, 0x0) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, 0xc, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000d00)=0x51a1, &(0x7f0000000d40)=0x4) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/autofs\x00', 0x12442, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x308) [ 212.324952][ T7208] device hsr_slave_1 entered promiscuous mode [ 212.629097][ T7554] IPVS: ftp: loaded support on port[0] = 21 [ 212.635975][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.645567][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.656472][ T7338] device bridge_slave_0 entered promiscuous mode [ 212.704091][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.711241][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.725847][ T7338] device bridge_slave_1 entered promiscuous mode [ 212.954507][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 03:02:06 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r3}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x10000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0x4) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000001c0)={0x51660000000000}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x80500, 0x0) write$input_event(r4, &(0x7f0000000240)={{}, 0x15, 0x32d, 0x5}, 0x18) socketpair(0x0, 0x2, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f00000002c0)='vmnet0user\\nodev-!-wlan1\x00', 0x19) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)={0x9, 0x5, 0x4, 0x8, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x2c, 0x9, 0x79, 0x2, "7a99522e"}, 0xffff, 0x2, @fd, 0x0, 0x0, r2}) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000380)={0x7, "90589a03270fe215b3249230b5181f0165a785d616fb8063e53e42206084390f", 0x1, 0x200, 0x3, 0x8, 0x4040030, 0x2}) readv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/106, 0x6a}], 0x2) r7 = fcntl$getown(r5, 0x9) sched_setaffinity(r7, 0x8, &(0x7f00000014c0)=0x8) [ 213.026442][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.070901][ T7462] chnl_net:caif_netlink_parms(): no params data found [ 213.118582][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 213.191421][ T7786] IPVS: ftp: loaded support on port[0] = 21 [ 213.243351][ T7338] team0: Port device team_slave_0 added [ 213.284048][ T7208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.341029][ T7338] team0: Port device team_slave_1 added [ 213.370658][ T7208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.408829][ T7208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.509851][ T7208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.600529][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.607693][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.638632][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.653495][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.660518][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.687488][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.699367][ T7554] chnl_net:caif_netlink_parms(): no params data found [ 213.720315][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.727632][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.736386][ T7487] device bridge_slave_0 entered promiscuous mode [ 213.746343][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.755851][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.765510][ T7487] device bridge_slave_1 entered promiscuous mode [ 213.794354][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.801709][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.814190][ T7462] device bridge_slave_0 entered promiscuous mode [ 213.867464][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.879091][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.886464][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.895425][ T7462] device bridge_slave_1 entered promiscuous mode [ 213.920353][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.987190][ T7338] device hsr_slave_0 entered promiscuous mode [ 214.043799][ T7338] device hsr_slave_1 entered promiscuous mode [ 214.093160][ T7338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.101083][ T7338] Cannot create hsr debugfs directory [ 214.179813][ T7462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.204766][ T7487] team0: Port device team_slave_0 added [ 214.227361][ T7462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.255130][ T7487] team0: Port device team_slave_1 added [ 214.379594][ T7462] team0: Port device team_slave_0 added [ 214.390731][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.399431][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.425765][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.437496][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.445933][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.457927][ T7554] device bridge_slave_0 entered promiscuous mode [ 214.471372][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.479440][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.488376][ T7554] device bridge_slave_1 entered promiscuous mode [ 214.525482][ T7462] team0: Port device team_slave_1 added [ 214.532220][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.542411][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.571999][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.630376][ T7554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.685814][ T7554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.767978][ T7487] device hsr_slave_0 entered promiscuous mode [ 214.823419][ T7487] device hsr_slave_1 entered promiscuous mode [ 214.863088][ T7487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.870781][ T7487] Cannot create hsr debugfs directory [ 214.919511][ T7786] chnl_net:caif_netlink_parms(): no params data found [ 214.929468][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.937478][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.965257][ T7462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.027129][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.034943][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.061210][ T7462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.082664][ T7554] team0: Port device team_slave_0 added [ 215.118476][ T7554] team0: Port device team_slave_1 added [ 215.131542][ T7208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.206150][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.213391][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.240815][ T7554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.277900][ T7338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.356361][ T7338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.419675][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.426811][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.455242][ T7554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.505727][ T7462] device hsr_slave_0 entered promiscuous mode [ 215.543459][ T7462] device hsr_slave_1 entered promiscuous mode [ 215.593009][ T7462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.600750][ T7462] Cannot create hsr debugfs directory [ 215.642649][ T7338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.766465][ T7554] device hsr_slave_0 entered promiscuous mode [ 215.803548][ T7554] device hsr_slave_1 entered promiscuous mode [ 215.853062][ T7554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.860674][ T7554] Cannot create hsr debugfs directory [ 215.887164][ T7338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.019410][ T7208] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.053624][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.062090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.104284][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.111510][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.120659][ T7786] device bridge_slave_0 entered promiscuous mode [ 216.143322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.151993][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.162480][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.169764][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.178137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.188259][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.197266][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.204435][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.233262][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.240388][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.250914][ T7786] device bridge_slave_1 entered promiscuous mode [ 216.259432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.275651][ T7487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.385364][ T7487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.435060][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.447796][ T7487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.535801][ T7487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.585288][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.599991][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.646378][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.657656][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.668517][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.724413][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.733885][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.742579][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.759512][ T7786] team0: Port device team_slave_0 added [ 216.806244][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.819335][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.829080][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.840129][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.877807][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.891819][ T7786] team0: Port device team_slave_1 added [ 216.963288][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.970307][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.999801][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.013926][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.020894][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.048786][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.085424][ T7554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.136989][ T7554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.187361][ T7554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.262034][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.293225][ T7554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.399507][ T7786] device hsr_slave_0 entered promiscuous mode [ 217.464084][ T7786] device hsr_slave_1 entered promiscuous mode [ 217.503051][ T7786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.510643][ T7786] Cannot create hsr debugfs directory [ 217.530969][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.538629][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.585414][ T7208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.636500][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.647185][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.660850][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.681353][ T7462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.775434][ T7462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.845231][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.857396][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.867750][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.874908][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.883982][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.892706][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.901837][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.909028][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.923013][ T7462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.978134][ T7462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.065958][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.119893][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.127748][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.203143][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.211923][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.221808][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.231129][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.240878][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.250698][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.282946][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.292026][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.301684][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.310866][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.320106][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.329356][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.347817][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.370335][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.379494][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.388221][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.398789][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.407731][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.416391][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.433795][ T7208] device veth0_vlan entered promiscuous mode [ 218.447790][ T7338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.485121][ T7786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.515554][ T7786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.572397][ T7786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.640748][ T7208] device veth1_vlan entered promiscuous mode [ 218.655470][ T7786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.685796][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.697821][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.707592][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.718347][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.725547][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.766887][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.778928][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.788547][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.797190][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.806410][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.815542][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.822846][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.830528][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.841291][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.849676][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.889132][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.899202][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.909885][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.919467][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.949728][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.958699][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.969427][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.978763][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.005747][ T7554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.037620][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.047044][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.058973][ T7487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.088352][ T7208] device veth0_macvtap entered promiscuous mode [ 219.101128][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.113819][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.122540][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.131703][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.163575][ T7208] device veth1_macvtap entered promiscuous mode [ 219.191587][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.200341][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.209509][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.219751][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.244946][ T7554] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.265157][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.273662][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.290130][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.321100][ T7338] device veth0_vlan entered promiscuous mode [ 219.331328][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.339844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.351349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.360466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.369679][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.376863][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.386106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.395143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.403639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.418183][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.430563][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.452547][ T7338] device veth1_vlan entered promiscuous mode [ 219.486694][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.495663][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.505739][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.515344][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.525595][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.535651][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.545432][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.552511][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.561277][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.583667][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.591902][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.612317][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.641217][ T7462] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.656043][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.666019][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.676040][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.686209][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.696307][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.706240][ T3216] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.713463][ T3216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.763429][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.773265][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.782205][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.793783][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.802455][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.811799][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.821767][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.866588][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.879315][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.888768][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.898632][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.907983][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.917112][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.926119][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.935365][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.945392][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.954127][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.961196][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.977012][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.085913][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.095782][ T7338] device veth0_macvtap entered promiscuous mode [ 220.107524][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.116182][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.138826][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.148496][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.170326][ T7338] device veth1_macvtap entered promiscuous mode [ 220.192702][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.203849][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.211687][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.225939][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.278393][ T7487] device veth0_vlan entered promiscuous mode [ 220.325776][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.364190][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.379248][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.388893][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.399581][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.414403][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 03:02:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfca) [ 220.437880][ T7554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.446436][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.460266][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.475721][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.508955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.528090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.543970][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.555466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.566326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.576943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.609967][ T7487] device veth1_vlan entered promiscuous mode [ 220.641301][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.662640][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.677375][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.700227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.711389][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.721046][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.728245][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.736223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.746077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.755777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.764600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.773383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.782118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.791218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.800542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.809171][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.816330][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.850277][ T7462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.996584][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.013790][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.030003][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.132669][ T7487] device veth0_macvtap entered promiscuous mode [ 221.149366][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.161632][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.172111][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.187859][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.196761][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.250361][ T7487] device veth1_macvtap entered promiscuous mode [ 221.267186][ T7554] device veth0_vlan entered promiscuous mode [ 221.284441][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.294156][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.302157][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.314861][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.458582][ T7554] device veth1_vlan entered promiscuous mode [ 221.481516][ T8478] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 03:02:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xb}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) [ 221.512538][ T7462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.535121][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.554168][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.561749][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.823833][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.835230][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.846693][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.857827][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.871574][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.893944][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.928893][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.937986][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.951728][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.965404][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.976029][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.986890][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.005463][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.019491][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:02:16 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x1, 0xb, [], [@calipso={0x7, 0x58, {0x2, 0x14, 0x70, 0x200, [0x9, 0x1f, 0x7, 0xa4, 0x80, 0x1, 0xc759, 0x7, 0xa55, 0x8]}}, @pad1]}, 0x68) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='nr0\x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) [ 222.030338][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.042252][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.055404][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_1 03:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f00000003c0)={[0x6]}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4048045}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 222.415319][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.426410][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.449805][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.473987][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.482271][ T8501] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 222.528072][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.547330][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.570392][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.613174][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.633836][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.674385][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 03:02:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r3, 0x0, 0xffffffffffffff19, &(0x7f0000000100)='H\x0f\xfd/\xfa9\x19\x1d\x98\xa6\xbcx3\xa7', 0xffffffffffffffff}, 0x30) wait4(r4, &(0x7f00000000c0), 0x80000000, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x1a053, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000104fffffff00000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000007200000200012800b00010067656e657665000010000280060005004e2100000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="bf3e10e58f6f27149dff544abb0f206b7c66d0b082f1a25e89d0f8f8e882c472117b5804596aa2abed137aee3072c275bd38"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) [ 222.752166][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.789302][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.864527][ C1] hrtimer: interrupt took 35911 ns [ 222.876995][ T7462] device veth0_vlan entered promiscuous mode [ 222.886645][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.900638][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.910979][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.922627][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.988441][ T7554] device veth0_macvtap entered promiscuous mode [ 223.080234][ T7554] device veth1_macvtap entered promiscuous mode [ 223.094745][ T7462] device veth1_vlan entered promiscuous mode [ 223.139884][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.159674][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 03:02:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0xfffffffffffffffd) r2 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4c011) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff15}, 0x1, 0x0, 0x0, 0xc000041}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3f}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2a2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x8) socket$nl_audit(0x10, 0x3, 0x9) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x0, 0x73, &(0x7f00000002c0)="1ff08086aa3be4556dfdc07b1a3389b83e6aebd087d55f7b8ba61b98f9e54287d07adaf23c3ffb535c8bea384809013f236171e9bc126a117de7d1c781203afe13f52a37fec0660cd36c890acceb68bc99640c3bcc939a5a9b36f1c2dbf6e83d30e79a7e6fe588d8b3008d56dc338c8cc85f98"}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001fff0008000000000077b4f0d693831b9c092ff19f9b77cf0000000000", @ANYRES32=0x0, @ANYBLOB="0bc9020000020000180012c2a05a73dbf15992d57f0d4ceeb30dc88000000100776972656775617264000013"], 0x44}}, 0x0) [ 223.190274][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.208129][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.218576][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.247461][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.335700][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.362409][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.382397][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.435918][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.462240][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 03:02:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18, 0x0, 0x3, {0xffffffff}}, 0x18) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000100)="a1", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0xfffffff8}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000d50104000000000100000000dcdf6c68a94a86be9084baa5b5db0700000078000a"], 0x2a) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x30, 0x5, 0x5}, &(0x7f0000000140)=0x18) readv(r6, &(0x7f0000000340)=[{&(0x7f0000000000)=""/62, 0x23}, {0x0, 0xa0008000}], 0x2) listen(r5, 0x7) accept(r5, 0x0, 0x0) [ 223.528118][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.550893][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.580066][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.599679][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.614668][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.648172][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 03:02:17 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x600004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) clone3(&(0x7f0000000280)={0x40000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=[0x0, r0, 0xffffffffffffffff, 0x0, r0, 0x0, r0, 0xffffffffffffffff, 0x0], 0x9}, 0x50) ftruncate(r5, 0x8) [ 223.707769][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.743218][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.766068][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.790711][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.823890][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.843255][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.867921][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.891092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.913950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.933152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.942169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.974556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.003706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.091567][ T7462] device veth0_macvtap entered promiscuous mode [ 224.140750][ T7462] device veth1_macvtap entered promiscuous mode [ 224.214791][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.226695][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.238188][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.256139][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.312455][ T7786] device veth0_vlan entered promiscuous mode [ 224.324695][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.334774][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.411497][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.424702][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.436724][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.448087][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.458864][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.470281][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.481054][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.494969][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.509143][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.523865][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.535150][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.554148][ T7786] device veth1_vlan entered promiscuous mode [ 224.602710][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.637083][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.648422][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.660471][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.671261][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.682985][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.693738][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.705537][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.719075][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.732454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.744918][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.774446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.982086][ T7786] device veth0_macvtap entered promiscuous mode [ 225.029824][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.041696][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.054616][ T7786] device veth1_macvtap entered promiscuous mode [ 225.064181][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.075459][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.117481][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.129216][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.150686][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.172864][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.172918][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.172924][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.172936][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.172942][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.172956][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.172962][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.177355][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0 03:02:19 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x18}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="e6c1f1bc91633545bb483a9028f9e4ffc48f5bdd3dd3338f2bd14a37df20328209c83387fcbab67ab5bd0093c295b288c2f912be24ca74a77f0aa123d6", &(0x7f0000000080)=""/111}, 0x20) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x300, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x811, 0x70bd25, 0x25dfdbfd, {0xffff}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000280)={0x16, 0xe, 0x2, 0x6, 0x0, [@mcast1, @remote, @remote, @mcast2, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @loopback}]}, 0x78) syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x3, 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x6b737b71926781d9, 0x0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000380)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x608080, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x3) r5 = accept$inet(r4, &(0x7f0000000400)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000480)={0x0, 'bond0\x00', 0x4}, 0x18) socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000004c0)={0x2, 0x4, 0x4, 0x20, 0x2, {}, {0x3, 0x4, 0x0, 0xcf, 0xf1, 0x2, "654176c8"}, 0xff, 0x2, @fd=r1, 0x8000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @sdr={0x38415262, 0x3}}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f0000000680)={0x22, 0x1ff, 0xf85}) inotify_add_watch(r6, &(0x7f0000000700)='./file0\x00', 0x0) 03:02:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x240007fd}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VFIO_SET_IOMMU(r5, 0x3b66, 0x7) write(r0, &(0x7f00000000c0)="1800000016009b8a14e5f407000000000a00000000000000", 0x18) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) 03:02:19 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000400)={{0x8}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400401, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10) [ 225.278065][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.289576][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.421064][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.441150][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.485226][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.530895][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.546701][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.558585][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.570573][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.582063][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.593362][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.604902][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.619745][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.651209][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.666250][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:02:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x600004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) clone3(&(0x7f0000000280)={0x40000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=[0x0, r0, 0xffffffffffffffff, 0x0, r0, 0x0, r0, 0xffffffffffffffff, 0x0], 0x9}, 0x50) ftruncate(r5, 0x8) 03:02:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x8) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) 03:02:20 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x600004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) clone3(&(0x7f0000000280)={0x40000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=[0x0, r0, 0xffffffffffffffff, 0x0, r0, 0x0, r0, 0xffffffffffffffff, 0x0], 0x9}, 0x50) ftruncate(r5, 0x8) 03:02:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014001200e00000b6a19c324dec3fab0ebbc757c7bc7f458168a5d5a12af6f4cebbba3a6b286cc70230251b0cfaec50864c69e23dabfda2e67d"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) r4 = eventfd2(0x0, 0x0) r5 = dup2(r4, r3) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) r9 = dup2(0xffffffffffffffff, r8) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000240)="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", 0x9ff, r10}) 03:02:20 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2108}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x6}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000003141000a802a41ce18026a10900020073797a310000000008004100736977001400330069705f767469300000000000000000000900020073797a31000000000800410073697700140033ca4ebe784bf217d2736c6176655f310000"], 0x60}}, 0x4000048) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000001600)=""/256, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r2}) 03:02:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000000)={{0x1, 0x5000, 0xe, 0x1, 0x1f, 0x5, 0x4, 0x5, 0x3f, 0xe0, 0x80, 0x2}, {0x10000, 0x1000, 0xb, 0x0, 0xff, 0x8, 0x4, 0xfa, 0x4, 0x8, 0x1, 0x53}, {0x2000, 0xf000, 0xb, 0x6, 0x8, 0x5, 0x1, 0x4, 0x6, 0xca, 0x6, 0x40}, {0x11000, 0x1000, 0x8, 0x7, 0x1, 0x0, 0xaf, 0x1, 0x1, 0xe7, 0x2, 0x7}, {0xf000, 0xf000, 0x3, 0x81, 0x41, 0x1, 0x40, 0x4, 0xfb, 0x2, 0x5, 0x66}, {0x3000, 0x5000, 0xe, 0x7, 0xa0, 0x81, 0x4c, 0x4, 0x4, 0x5, 0xc1, 0x5}, {0x1001, 0x2, 0xe, 0x5b, 0x7f, 0x6, 0x80, 0x7, 0x2, 0x7, 0x81, 0x6}, {0x2000, 0x2, 0xe, 0x6, 0x43, 0x1, 0xa0, 0x2, 0x0, 0xff, 0xff, 0x3}, {0x1, 0x9}, {0x10000, 0x8000}, 0x80000000, 0x0, 0x3000, 0x446520, 0xc, 0xc800, 0x10000, [0xfffffffffffffffa, 0x9, 0x101]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="5500000018007f0300fe05b2a4a280930a060001fe80000214000900390009002d0050000600000019000540029b84136ef75afb83de441100ae20ca3ab8220000060cec4fab91d471cd34938c42f030dd941e7931", 0x55}], 0x1}, 0x0) [ 226.168489][ T8597] IPv6: Can't replace route, no match found 03:02:20 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0x3, 0x2, 0x9, 0x1, 0x3f, 0xa7, 0x6, 0x0, 0x4, 0x8, 0x8, 0x0, 0x9}, {0x0, 0x8, 0x1, 0x40, 0x40, 0xff, 0x0, 0x40, 0x0, 0x81, 0xf7, 0x7, 0x743a}, {0x5, 0x3, 0xfa, 0x4, 0x8, 0x8, 0x80, 0xe7, 0x0, 0xb3, 0x0, 0x3, 0x2}], 0x6}) write(r0, &(0x7f0000000240)="66dd4e79d9", 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000000), 0x8) [ 226.221408][ T8601] netlink: 'syz-executor.4': attribute type 18 has an invalid length. [ 226.530492][ T8606] netlink: 'syz-executor.4': attribute type 18 has an invalid length. [ 226.689989][ T8601] syz-executor.4 (8601) used greatest stack depth: 22664 bytes left 03:02:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014001200e00000b6a19c324dec3fab0ebbc757c7bc7f458168a5d5a12af6f4cebbba3a6b286cc70230251b0cfaec50864c69e23dabfda2e67d"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) r4 = eventfd2(0x0, 0x0) r5 = dup2(r4, r3) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) r9 = dup2(0xffffffffffffffff, r8) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000240)="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", 0x9ff, r10}) [ 226.899223][ T8638] netlink: 'syz-executor.4': attribute type 18 has an invalid length. 03:02:20 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200000}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:02:21 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000100)}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f0000000180)=""/29, 0x1d}}, {{&(0x7f0000000240)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x2, &(0x7f00000004c0)=""/105, 0x69}, 0x8}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x6, &(0x7f00000008c0)=""/89, 0x59}, 0x8}, {{&(0x7f0000000940)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f00000009c0)=""/183, 0xb7}], 0x1}, 0x40}], 0x4, 0x40000000, 0x0) r6 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:02:21 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88", 0x12}], 0x1) splice(r0, 0x0, r2, 0x0, 0xfffffffb, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) 03:02:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_CREATE2(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f700090001000000070000000100000001f8ffffa599a5100d2180fa1e2e9c32c7c3540fc90882417c347226135d8b49f34d890cceefcda57e0bd3f34eae35a387056c20c746f39686559deb54cf6ac58d71a9c42d130b128332b7981d50d48800e830808af9c882dc11f49ca0ff172a6494b4e2917de6ee01b48c3372ca9ba932a41493150ed548e6c03ab835cc9dd1bf032c173a70eb920c8145fa9670c643b837327dd81f3f93259d57e9a556000c223dbc72f2f352e04ba6f2a0e9732e1d0a2d57992248ca5274c5a73268472f3787956102a75602d78f725607142b6aa8b9a845c2e7e4222b9580c7845d219d606454cbd7e76f118a5bf8c54196e416722c18b88bfb8a292637a005e04854aeec8119272b938d5bb0fd505909bcd23f1008505762832ae12c2facd21cc844ce18cdee4e339b10916f1d936579fc22f0e4ea567256e12553e4856a3f98ea5aca74a89576c66c7adb3e6b4b9fb5c028c36bd0ba"], 0x20f) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) rt_sigpending(&(0x7f00000000c0), 0x8) sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000100)={0x8, 0x14, &(0x7f0000000480)="845cb33834c58fc24b6ea6f29f0e859bb23a54cd92e0240c7e8855d9d13b7a12e46a3786e29d4773144d9829bbdaa299bed9f0f9ac2522ab2807c0cdcd387de2f43c56cf1169321a6ea26e220030cec8c89b8e1db58b1b6bfdce55176af2782c2c09c8c49a49a0607c773a33f24b344a231159f46b30551dca24cb0538ad09b4cb447a1ccef582f0f539ed8b5944de239efd71db18bb27a9ce3b3b591b5a93fccd2a78257698e4f055978456af75007c270d98d748f5621a90a0b6b679e3db32bd3ab5df5f70b0cbf2eb1db6005df86caa42163079ff7aa9035ce8c4335ffa4d1d5053396f105672e0", {0x7, 0x1, 0x76721406, 0x4, 0x2, 0x1, 0x0, 0x10001}}) 03:02:21 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x600004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) clone3(&(0x7f0000000280)={0x40000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=[0x0, r0, 0xffffffffffffffff, 0x0, r0, 0x0, r0, 0xffffffffffffffff, 0x0], 0x9}, 0x50) ftruncate(r5, 0x8) 03:02:21 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x600004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) clone3(&(0x7f0000000280)={0x40000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=[0x0, r0, 0xffffffffffffffff, 0x0, r0, 0x0, r0, 0xffffffffffffffff, 0x0], 0x9}, 0x50) ftruncate(r5, 0x8) 03:02:21 executing program 0: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_FP_MODE(0x2e) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000480)=""/105, 0x69}], 0x4, 0xffffffffffffffff) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) fstat(r2, &(0x7f0000000180)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000010010000280012800b000100697036746e6c000018000280140003002001000000000000000000000000000108000300", @ANYRES32=r3, @ANYBLOB="21e89bb79cb33f43a2a5040000003c05d7"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 03:02:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x3}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f00000003c0)={{0x1, 0x3, 0x7, 0x8, 'syz1\x00'}, 0x6, 0x10000000, 0x0, r5, 0x2, 0x4d7, 'syz0\x00', &(0x7f0000000040)=['.\x00', 'systemself^]vmnet0wlan1\x00'], 0x1a, [], [0xffc1, 0xc, 0x2, 0x7]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 03:02:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x20, 0x60}, 'port1\x00', 0x22, 0x100841, 0x8, 0xe140, 0x71, 0x80, 0x3, 0x0, 0x3, 0xde}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xca, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0) 03:02:23 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x87) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000000)={0x3, 0xfff, 0xfffff458, 0x7, 0x200, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f00000000c0)}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='|', 0x1}], 0x1}}], 0x2, 0x0) 03:02:23 executing program 0: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_FP_MODE(0x2e) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000480)=""/105, 0x69}], 0x4, 0xffffffffffffffff) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) fstat(r2, &(0x7f0000000180)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000010010000280012800b000100697036746e6c000018000280140003002001000000000000000000000000000108000300", @ANYRES32=r3, @ANYBLOB="21e89bb79cb33f43a2a5040000003c05d7"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 03:02:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r5], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0xb, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0x3c}}, 0x0) 03:02:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0) r5 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0xe5b106754cbccadc, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x0) 03:02:24 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000100)}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f0000000180)=""/29, 0x1d}}, {{&(0x7f0000000240)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x2, &(0x7f00000004c0)=""/105, 0x69}, 0x8}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x6, &(0x7f00000008c0)=""/89, 0x59}, 0x8}, {{&(0x7f0000000940)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f00000009c0)=""/183, 0xb7}], 0x1}, 0x40}], 0x4, 0x40000000, 0x0) r6 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:02:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0) r5 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0xe5b106754cbccadc, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x0) 03:02:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0) r5 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0xe5b106754cbccadc, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x0) 03:02:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x0, 0x2000000, 0x0, 'queue0\x00', 0xfffffffc}) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x90, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) lsetxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x147803, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x81) 03:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0) r5 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0xe5b106754cbccadc, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x0) 03:02:26 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000100)}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f0000000180)=""/29, 0x1d}}, {{&(0x7f0000000240)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x2, &(0x7f00000004c0)=""/105, 0x69}, 0x8}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x6, &(0x7f00000008c0)=""/89, 0x59}, 0x8}, {{&(0x7f0000000940)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f00000009c0)=""/183, 0xb7}], 0x1}, 0x40}], 0x4, 0x40000000, 0x0) r6 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:02:26 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x600004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) clone3(&(0x7f0000000280)={0x40000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=[0x0, r0, 0xffffffffffffffff, 0x0, r0, 0x0, r0, 0xffffffffffffffff, 0x0], 0x9}, 0x50) ftruncate(r5, 0x8) 03:02:26 executing program 1: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x4786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @remote}, 0x1b6}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='vxcan1\x00', 0x0, 0x2, 0x1f}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x28, 0x0, 0x2, 0x46a, 0x0, 0x0, 0xfffffffffffffffd, 0x2000, 0x40}) r4 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x97ba, 0xa4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001240)={0x2b, @private=0xa010100, 0x4e20, 0x4, 'none\x00', 0x14, 0x1c, 0x2005b}, 0x2c) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r5, 0xc0185502, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="0225f0b38b42dcc1ec0045b41d294d2de9456d41021ca6abef217bb5a9515befde717f15654e5219619f92ce151465aa01fefbeb05738005c7eaf4234402008000001d653f4a1300e5ce980700000000001be7868b958ddb0aaec2555f5278d77e62ef810f48ac082ad3d779319ffce948fa87ed2ce9b905b1f3", @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) 03:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0) r5 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0xe5b106754cbccadc, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x0) [ 232.528372][ T27] audit: type=1804 audit(1589425346.391:2): pid=8872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/5/file0/bus" dev="sda1" ino=15750 res=1 03:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) 03:02:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) [ 233.325904][ T27] audit: type=1800 audit(1589425347.241:3): pid=8874 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15752 res=0 [ 233.529020][ T8904] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 03:02:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x0, 0x2000000, 0x0, 'queue0\x00', 0xfffffffc}) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x90, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) lsetxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x147803, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x81) 03:02:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) 03:02:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 234.100439][ T27] audit: type=1804 audit(1589425347.991:4): pid=8913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/6/file0/bus" dev="sda1" ino=15750 res=1 03:02:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 234.504006][ T8869] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 03:02:28 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000100)}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f0000000180)=""/29, 0x1d}}, {{&(0x7f0000000240)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x2, &(0x7f00000004c0)=""/105, 0x69}, 0x8}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x6, &(0x7f00000008c0)=""/89, 0x59}, 0x8}, {{&(0x7f0000000940)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f00000009c0)=""/183, 0xb7}], 0x1}, 0x40}], 0x4, 0x40000000, 0x0) r6 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:02:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) 03:02:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:28 executing program 1: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x4786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @remote}, 0x1b6}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='vxcan1\x00', 0x0, 0x2, 0x1f}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x28, 0x0, 0x2, 0x46a, 0x0, 0x0, 0xfffffffffffffffd, 0x2000, 0x40}) r4 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x97ba, 0xa4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001240)={0x2b, @private=0xa010100, 0x4e20, 0x4, 'none\x00', 0x14, 0x1c, 0x2005b}, 0x2c) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r5, 0xc0185502, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="0225f0b38b42dcc1ec0045b41d294d2de9456d41021ca6abef217bb5a9515befde717f15654e5219619f92ce151465aa01fefbeb05738005c7eaf4234402008000001d653f4a1300e5ce980700000000001be7868b958ddb0aaec2555f5278d77e62ef810f48ac082ad3d779319ffce948fa87ed2ce9b905b1f3", @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) 03:02:28 executing program 2: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x4786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @remote}, 0x1b6}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='vxcan1\x00', 0x0, 0x2, 0x1f}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x28, 0x0, 0x2, 0x46a, 0x0, 0x0, 0xfffffffffffffffd, 0x2000, 0x40}) r4 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x97ba, 0xa4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001240)={0x2b, @private=0xa010100, 0x4e20, 0x4, 'none\x00', 0x14, 0x1c, 0x2005b}, 0x2c) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r5, 0xc0185502, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="0225f0b38b42dcc1ec0045b41d294d2de9456d41021ca6abef217bb5a9515befde717f15654e5219619f92ce151465aa01fefbeb05738005c7eaf4234402008000001d653f4a1300e5ce980700000000001be7868b958ddb0aaec2555f5278d77e62ef810f48ac082ad3d779319ffce948fa87ed2ce9b905b1f3", @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) 03:02:28 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x4786}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @remote}, 0x1b6}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='vxcan1\x00', 0x0, 0x2, 0x1f}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x28, 0x0, 0x2, 0x46a, 0x0, 0x0, 0xfffffffffffffffd, 0x2000, 0x40}) r4 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x97ba, 0xa4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001240)={0x2b, @private=0xa010100, 0x4e20, 0x4, 'none\x00', 0x14, 0x1c, 0x2005b}, 0x2c) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r5, 0xc0185502, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="0225f0b38b42dcc1ec0045b41d294d2de9456d41021ca6abef217bb5a9515befde717f15654e5219619f92ce151465aa01fefbeb05738005c7eaf4234402008000001d653f4a1300e5ce980700000000001be7868b958ddb0aaec2555f5278d77e62ef810f48ac082ad3d779319ffce948fa87ed2ce9b905b1f3", @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) 03:02:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 235.856777][ T8944] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 [ 236.085589][ T8950] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 [ 236.092471][ T8963] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 03:02:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10c2, 0x20000) perf_event_open(0x0, 0x0, 0x3, r0, 0xb) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(0xffffffffffffffff) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) getgroups(0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) socket$key(0xf, 0x3, 0x2) 03:02:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$mice(0xffffff9c, 0x0, 0xd280) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) 03:02:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003060000f12fcb2934aa5e8d8bbecb800100577f9cbf677a6abd9de2f951a1f104b219c322f9eaeb9b747704be5fa53374641911a92adfef782c100fb5"], 0x60, 0x2) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) pipe(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) sendmmsg$sock(r1, &(0x7f0000002b40)=[{{0x0, 0xa, 0x0}}], 0x62, 0x4040000) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:02:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x0, 0x2000000, 0x0, 'queue0\x00', 0xfffffffc}) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="73793de83504218774f575653012"], &(0x7f0000000140)='-].[system\x00', 0xb, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x147803, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="ebfce6991412307850b5e25177068455b010e00dd04a77a8ea221c945893128e34ac8c360172b22baeb36a0511b5887dc6e1161f0560866918c3956476e602d90a7d7e50d8c1b89f93eddc84475fdcb923d7f91fc4e3efea2c138cf5dd7adde16d211de84a3206acd5b0c2b290738ed610140f8f9c5ae18a790d511f2376940f570df9d1906c7567"], 0x815, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, 0x0, 0x80) 03:02:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r4, 0x4, 0x2}, &(0x7f0000000040)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 03:02:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 237.077806][ T27] audit: type=1804 audit(1589425350.991:5): pid=9034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/10/file0/bus" dev="sda1" ino=15754 res=1 03:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x705, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 03:02:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 237.380521][ T27] audit: type=1804 audit(1589425351.291:6): pid=9034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/10/file0/file0/bus" dev="sda1" ino=15756 res=1 03:02:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r4, 0x4, 0x2}, &(0x7f0000000040)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 237.490719][ T9057] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:02:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r4, 0x4, 0x2}, &(0x7f0000000040)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 03:02:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) sendfile(r0, r1, 0x0, 0xedc0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x20000000007, 0x4001) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa924, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000240)=0x2) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x430000) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="02080000a3ba65e78993bb07cb36c7037287ab2e67dbabce9f285b57665131b582fd441518a00debf8583c96993ac2f95f572f53ff7fd13328669a135f29d717b3557a1da3a76ae756d21876b87164e946efc1eae5513a650f315e994470", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r10}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r10, 0x8ea3da49}, &(0x7f00000001c0)=0x8) 03:02:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000140)=0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x4, 0x1, 0x0, 0x365d14cce2170965, 0x852, 0xe362}, 0x20) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x4000004}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/mcfilter6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttynull\x00', 0x40140, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) 03:02:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 238.252402][ T3913] ion_buffer_destroy: buffer still mapped in the kernel [ 238.319195][ T9080] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:02:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x7ff, 0x3c09}, 0x0, 0x6, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2ea, [0x0, 0x20000240, 0x20000434, 0x20000464], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x6558, 'macvtap0\x00', 'macvlan1\x00', 'dummy0\x00', 'dummy0\x00', @remote, [0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x0, 0x2, [{0x9, 0x0, 0x1c, 'vlan0\x00', 'caif0\x00', 'ip6gre0\x00', 'vlan0\x00', @dev={[], 0x1c}, [0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x9}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {0x3, 0x0, 0x11, 'team0\x00', 'veth1\x00', 'tunl0\x00', 'bridge0\x00', @random="c41a89a0f91c", [], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0xd6, [@connlabel={{'connlabel\x00', 0x0, 0x8}}], [], @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}]}]}, 0x362) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1}, 0x6e) 03:02:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x705, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 03:02:32 executing program 2: perf_event_open(&(0x7f0000005980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x3, 0x10}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000012c0)}, {&(0x7f0000000280)}, {&(0x7f0000001440)="7b18908bcd34b2f4ee", 0x9}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:02:32 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r2) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r4) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x4a41, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0xfe07000000000000, 0x3) socket$isdn(0x22, 0x3, 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r4) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r3, r7}, &(0x7f00000003c0)=""/245, 0xf5, &(0x7f0000000040)={&(0x7f0000000580)={'sm3-generic\x00'}}) creat(&(0x7f0000000240)='./bus\x00', 0x0) 03:02:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:32 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff35b3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) read$usbfs(r2, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) fcntl$addseals(r3, 0x409, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fdatasync(r4) [ 238.600994][ T9109] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 238.795623][ T9116] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:02:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x10811, 0x0, 0x0, 0x6, 0x0, 0x400000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x1000000, 'sh\x00'}, 0x2c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x0, 0x0, 0x80, 0x0, 0xb2bf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd, 0x0, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x3ff, 0x0, 0x7, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000640)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x20, 0x3, 0x1, 0x80000000}, 0x14) 03:02:33 executing program 3: request_key(&(0x7f0000000080)='ceph\x00', 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x1}}, 0x4884) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @broadcast}, &(0x7f0000000100)=0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 03:02:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000140)=0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x4, 0x1, 0x0, 0x365d14cce2170965, 0x852, 0xe362}, 0x20) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x4000004}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/mcfilter6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttynull\x00', 0x40140, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) 03:02:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="2add1928ae7ef804ec8f4efa8e3caf65e274420a726e2495e57382d848d0e806385b39765fa6d1cb65bb00957a12fddc29810299ceb853779ab5b762c7c2fae51e113fadec370fba3ecd924605336602bfb6050d88b08fb6b8d1472021835ce09dcfe8f8aab319d240b70a045ed13601301bece5ca3be27f6ceeed0ec7981ec35f453a3433aad3deca", 0x89) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000000000000000000000000008000000000634103f1f4557011a4f5608b1ce52d13e198d292c25f906677bde0912e02ce3efc0f046b900d94622fdba4dab84820693802d837c47a08a9f32c35ba575e3f8081a72dd1a37851250e10bb3a5587ddf16694d1554db5c834a04992946289a1d776cf43941c35fe4951d359e763e192fce7cea8f42fe7ef0f6ddc6aaebeb8d6606cbb5732f4544cd804569ea323b10dc445c22173b3c0cf248b9a", @ANYRES64, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="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"], 0x40}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80c1) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 03:02:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x10811, 0x0, 0x0, 0x6, 0x0, 0x400000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x1000000, 'sh\x00'}, 0x2c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x0, 0x0, 0x80, 0x0, 0xb2bf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd, 0x0, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x3ff, 0x0, 0x7, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000640)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x20, 0x3, 0x1, 0x80000000}, 0x14) 03:02:34 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff35b3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) read$usbfs(r2, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) fcntl$addseals(r3, 0x409, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fdatasync(r4) 03:02:34 executing program 3: r0 = dup(0xffffffffffffffff) write$ppp(r0, &(0x7f0000000240)="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", 0xfd) syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x800000080000010) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=""/4096, 0x1000, 0x10040, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @loopback, 0x800}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\xa3\xfb\x9f\x9c\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8e{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc2\xca\xbay\xdb\xe6\x19/\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\x01\x00\xfb\xab\x04\xe8\xf3\xaep\xb8\xcc\xfdGWK\xc6\t\x01\xe1\x86M\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\x12\xee72DH\x83\x14\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4f\xc0\x9c.\'\xa9R3z$\xf2\x01\xa8\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x83\x87\xb8D\xaf7\xeb\xcf\xf8\x0f\x1dH\xcdT\x15FD\xfb\xc0\xaaV\xc3\xc8l\x9d\x9f\x93\xb3K\xc3\x00\xb7\x9c\x0e\x95\x02\x10\xe7cn\"\x83i\vo\x14\v\b-P\xaa\xd6\'\xcf\x8a-\xc2t\xf5w\xcb\xbdu\x1c\xa3X\x18[\x94xko\xbf-;\xedlokRi\xcc\xd8\xee\x98\\\xb6P`k\xea\x97\xae\xe6\xe4\xb6Y\xfc\xc6\xd3\xdaR\xd4p\x19a\xbf\xc0uNM\t\xc1\xc6\x85l\xd4\'\x7f\x96\xf3*p\a`\xf8\xbe\x82\xa2\xf5\x84\xfbA\xf1J\xe2\xdb\f\xeb\b:)\'\xe8\x9b\v\xa5$y\f\xbb\xd3\xbc\vj\xfd\xdf\xd4sZ\'\x01uVk6\xa9\x066\x9d\xd5V\xdd\xaa\x8aT\xde]U\t\xaeN\xc7Xf,\x03\xfekS\x1d\xf5W\x9fi\xc63\x93C\x9f\x80W\xf8\xd9E\xecg\x03i\x82E\x8e\xaf\n\xe2\xf0\xb5\xeb\xf3\xb9\xf7\xcc\f\x82\xe2\xa5\f\xf4\xe5e\x1e\x11k\x04\xac\x8eP\xfb\xa2t\xc3\x1b\xbf\xbf]6\xa11T\xd89\xac\xba\b\xdb\x9eP\xcc\xaf04\xeb\x02>\xd7\xbau:\xf8\x8a\xad6\xb7\xbf\x8b\xa9$\x05@&\x9e\xfd\rQ\xee`\xf7b\xa7\xa4)\xff\xff\xff\x7f\x00\x00\x00\x00\x10\xa1\xb9Z48\xbf\x11W\xa3\xe4\x16\x0fu>M\t\xb3]\x9dpPH\xb6\xf92\xfe\x9b\xbb\x1b\x00h\x11\x8f?\x15\xdc\xb4\aK\xfb\x89\x1cg\xdb\xb9P!\xb6p\xb7\xb2B3\xab\x1c\xe7xo-\xa6\x92%\xf7\xd48\x97~H\xe7\xa2\xa1\xa7\xda\xf8\x90\x96-\xcb\xe5\"5\x84\xd8t\xb1\x90\xda\x87\x17\xa6{\xa5\xa9\x1b\xa3\x1a9\x92\tD\xa9\xde\xd8\x91\x8a~\xae^h\xebP\x02\xe5\xe4\xbe\x80\x9dp\x95\xe5Z\x90e\x92\x10w(X!\x9f\xda\f,\x87\x80\x97\r\x83p\xd6\xed(\'\xb8\xb49\xd2\xa1[\x1aK\xb9\xd3\x18\n\by\t\xc0\xfd;\xcb\x04\xea\xec\xae+`\xc5\x95]\x1cYC\xe4\x16t\xf4\x01,\x13\x1a\x12\x13\xfc\xd9\xb3\x89\x87\xaeI\x7f\x04\f\x17N:\xda\xd8\xe2\xdb\xec\x9cg\xa9`q\a\xe4\xc5\x8e5\x0f\x83\x1e\x89\"\xecz\x9b\xaf*\xe7\xbd4\x9b\xa6_C7e\xe6\x13\x96\xab\xe8\x82p\xb8ONt\xff\xd4\x04\xa6\x12\x01\xe4%\x10\xec]\xa7\x02\x03\x00\x00\x00\xd0\x1ch\x8e\xcd\xadV\xaeC\xec\xf3z\x9e\xb58\xfa\xa6\x11\xc3#\x8c;0\xac\x03\xbbQ\xb9\xd9\xff{e\xf4N\xf1\xee^\x8a\xb8(\x8a\xbd#\xc6M\x8f\xd6\x84^\x1b\xb6=T\xa8\xe3h\x96\x93IC\x88\xcf\x90\xe5\x06a\xc5\xe8\xd8\xf3X\x12\xea\xcd\x19\xcbM\x1e\x844\xaa\\3\xd2\x00\x00\xbf\x8b\xba\xc8\x19w\x02 \x1d\x00'/944, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24014801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 240.318717][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 03:02:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 240.419377][ T9173] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:02:34 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000100)) r3 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000082) socket$pppoe(0x18, 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r4 = syz_open_procfs(0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x20000000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000040)=0x401) sendfile(r3, r3, &(0x7f0000000080)=0x2, 0xa198) close(0xffffffffffffffff) [ 240.649695][ T9177] gretap0: refused to change device tx_queue_len 03:02:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 240.658930][ T9177] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 240.768081][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.768715][ T9183] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:02:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:35 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000200)) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CAPI_GET_ERRCODE(r7, 0x80024321, &(0x7f0000000040)) 03:02:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000140)=0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x4, 0x1, 0x0, 0x365d14cce2170965, 0x852, 0xe362}, 0x20) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x4000004}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/mcfilter6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttynull\x00', 0x40140, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) 03:02:36 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x24400, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000480)='dns_resolver\x00', &(0x7f0000000440)=@secondary='builtin_and_secondary_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) keyctl$dh_compute(0x17, &(0x7f00000002c0)={0x0, 0x0, r4}, &(0x7f0000000300)=""/52, 0x34, &(0x7f0000000400)={&(0x7f0000000340)={'sm3-ce\x00'}, &(0x7f0000000580)="b92224c1f0535fb889ec2348c68533283ef5f6ef830f05001f000000009c3fc9ae6844e93160897627d68e5a3d88c04e4f2558c1c10e7be9c0713279a926a2ff1c0b95ce0a7596821daa91f0c60f7cf951d76bbb2f54ecd2f49122d04339bcea371c5fd8ad59108422a35ceecc0ce44a64418d0e60e6ec8d78f62372cbee387db4f11db7b454950895d50ee8e42195c05eb5008e9cba526724eadaf12901c04f85891e7e010b847a02037bdbf7606e098b7bd7e5c05770656e451de803d2291fcb8488527b593cad15ddaada7e2411a485180a8cd09b72", 0xd7}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0x7f}, 0x4000, 0x4, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:02:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:36 executing program 3: r0 = dup(0xffffffffffffffff) write$ppp(r0, &(0x7f0000000240)="3021a8f5293f58a86c39daeff25ecb25a94bf72b88bef2e60a56bd6da5f4d04e0c50a4a8c71c078a23ad0405f9ba6f51ff4948f69d06b87cc51819bd293236bf47e1626bc9958a74cd80f15c35e0c9c3a3bdf534f96c1f6c7b21b94258902568bc340fe7853ab70b094349032ee497bcc31c28afaedd17e5e1bc3ada14b3b04840c862de43b6d934e6b980a32900045027053fa2619e7e469aa71f75c94c3e96eb1fb574d12d986c84bde4e4457c049465f678b9e67f1858849121c49bfdc9832ccd372b842aaa0c705bdfeeb2f8cbd36ad485a8dc38e1df5bd5706dddb98158142abe053edfb50bc0c6ae0576d60a7efaf5142935090da06f20ebbbd5", 0xfd) syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x800000080000010) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=""/4096, 0x1000, 0x10040, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @loopback, 0x800}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\xa3\xfb\x9f\x9c\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8e{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc2\xca\xbay\xdb\xe6\x19/\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\x01\x00\xfb\xab\x04\xe8\xf3\xaep\xb8\xcc\xfdGWK\xc6\t\x01\xe1\x86M\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\x12\xee72DH\x83\x14\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4f\xc0\x9c.\'\xa9R3z$\xf2\x01\xa8\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x83\x87\xb8D\xaf7\xeb\xcf\xf8\x0f\x1dH\xcdT\x15FD\xfb\xc0\xaaV\xc3\xc8l\x9d\x9f\x93\xb3K\xc3\x00\xb7\x9c\x0e\x95\x02\x10\xe7cn\"\x83i\vo\x14\v\b-P\xaa\xd6\'\xcf\x8a-\xc2t\xf5w\xcb\xbdu\x1c\xa3X\x18[\x94xko\xbf-;\xedlokRi\xcc\xd8\xee\x98\\\xb6P`k\xea\x97\xae\xe6\xe4\xb6Y\xfc\xc6\xd3\xdaR\xd4p\x19a\xbf\xc0uNM\t\xc1\xc6\x85l\xd4\'\x7f\x96\xf3*p\a`\xf8\xbe\x82\xa2\xf5\x84\xfbA\xf1J\xe2\xdb\f\xeb\b:)\'\xe8\x9b\v\xa5$y\f\xbb\xd3\xbc\vj\xfd\xdf\xd4sZ\'\x01uVk6\xa9\x066\x9d\xd5V\xdd\xaa\x8aT\xde]U\t\xaeN\xc7Xf,\x03\xfekS\x1d\xf5W\x9fi\xc63\x93C\x9f\x80W\xf8\xd9E\xecg\x03i\x82E\x8e\xaf\n\xe2\xf0\xb5\xeb\xf3\xb9\xf7\xcc\f\x82\xe2\xa5\f\xf4\xe5e\x1e\x11k\x04\xac\x8eP\xfb\xa2t\xc3\x1b\xbf\xbf]6\xa11T\xd89\xac\xba\b\xdb\x9eP\xcc\xaf04\xeb\x02>\xd7\xbau:\xf8\x8a\xad6\xb7\xbf\x8b\xa9$\x05@&\x9e\xfd\rQ\xee`\xf7b\xa7\xa4)\xff\xff\xff\x7f\x00\x00\x00\x00\x10\xa1\xb9Z48\xbf\x11W\xa3\xe4\x16\x0fu>M\t\xb3]\x9dpPH\xb6\xf92\xfe\x9b\xbb\x1b\x00h\x11\x8f?\x15\xdc\xb4\aK\xfb\x89\x1cg\xdb\xb9P!\xb6p\xb7\xb2B3\xab\x1c\xe7xo-\xa6\x92%\xf7\xd48\x97~H\xe7\xa2\xa1\xa7\xda\xf8\x90\x96-\xcb\xe5\"5\x84\xd8t\xb1\x90\xda\x87\x17\xa6{\xa5\xa9\x1b\xa3\x1a9\x92\tD\xa9\xde\xd8\x91\x8a~\xae^h\xebP\x02\xe5\xe4\xbe\x80\x9dp\x95\xe5Z\x90e\x92\x10w(X!\x9f\xda\f,\x87\x80\x97\r\x83p\xd6\xed(\'\xb8\xb49\xd2\xa1[\x1aK\xb9\xd3\x18\n\by\t\xc0\xfd;\xcb\x04\xea\xec\xae+`\xc5\x95]\x1cYC\xe4\x16t\xf4\x01,\x13\x1a\x12\x13\xfc\xd9\xb3\x89\x87\xaeI\x7f\x04\f\x17N:\xda\xd8\xe2\xdb\xec\x9cg\xa9`q\a\xe4\xc5\x8e5\x0f\x83\x1e\x89\"\xecz\x9b\xaf*\xe7\xbd4\x9b\xa6_C7e\xe6\x13\x96\xab\xe8\x82p\xb8ONt\xff\xd4\x04\xa6\x12\x01\xe4%\x10\xec]\xa7\x02\x03\x00\x00\x00\xd0\x1ch\x8e\xcd\xadV\xaeC\xec\xf3z\x9e\xb58\xfa\xa6\x11\xc3#\x8c;0\xac\x03\xbbQ\xb9\xd9\xff{e\xf4N\xf1\xee^\x8a\xb8(\x8a\xbd#\xc6M\x8f\xd6\x84^\x1b\xb6=T\xa8\xe3h\x96\x93IC\x88\xcf\x90\xe5\x06a\xc5\xe8\xd8\xf3X\x12\xea\xcd\x19\xcbM\x1e\x844\xaa\\3\xd2\x00\x00\xbf\x8b\xba\xc8\x19w\x02 \x1d\x00'/944, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24014801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 03:02:36 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x82, 0x1f, 0x9e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x7, 0x5, 0x8, 0x465a03ad, 0x1f}, 0x0, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f000001d080)=""/102400, 0x19000}, 0x10001) socket$nl_generic(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000085) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4c051}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000200989b", @ANYBLOB="10002bbd7000fcdbdf25040000000800040003000000"], 0x2}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x171181, 0x0) write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="00000800f526ff"], 0x7) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77b}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80) 03:02:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:36 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x82, 0x1f, 0x9e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x7, 0x5, 0x8, 0x465a03ad, 0x1f}, 0x0, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f000001d080)=""/102400, 0x19000}, 0x10001) socket$nl_generic(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000085) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4c051}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000200989b", @ANYBLOB="10002bbd7000fcdbdf25040000000800040003000000"], 0x2}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x171181, 0x0) write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="00000800f526ff"], 0x7) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77b}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80) [ 242.932050][ T9225] gretap0: refused to change device tx_queue_len [ 242.938246][ T9225] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 03:02:37 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000100)) r3 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000082) socket$pppoe(0x18, 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r4 = syz_open_procfs(0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x20000000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000040)=0x401) sendfile(r3, r3, &(0x7f0000000080)=0x2, 0xa198) close(0xffffffffffffffff) 03:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r0, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:37 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x82, 0x1f, 0x9e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x7, 0x5, 0x8, 0x465a03ad, 0x1f}, 0x0, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f000001d080)=""/102400, 0x19000}, 0x10001) socket$nl_generic(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000085) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4c051}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000200989b", @ANYBLOB="10002bbd7000fcdbdf25040000000800040003000000"], 0x2}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x171181, 0x0) write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="00000800f526ff"], 0x7) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77b}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80) 03:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r0, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000140)=0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x4, 0x1, 0x0, 0x365d14cce2170965, 0x852, 0xe362}, 0x20) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x4000004}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/mcfilter6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttynull\x00', 0x40140, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) 03:02:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockname$l2tp(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x121880, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x5, 0x7, 0x3, 0x2, 0x3, 0x8000, 0x8, 0xfffffffa, 0x1, 0x9, 0x8, 0xff, 0x4, 0x1000, 0x2, 0xff, 0x0, 0x7, 0xb58, 0x8, 0xfffffffe, 0x9, 0x4e8, 0x5, 0x6, 0x3, 0x2, 0x8001, 0x200, 0x4, 0x8, 0x81]}) syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) 03:02:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x110, r4, 0x180000000) read$usbmon(r3, &(0x7f0000000100)=""/52, 0x34) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 03:02:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r0, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x4080}, {r0, 0x4600}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x6]}, 0x8) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff000021000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800140007000000"], 0x3c}}, 0x0) 03:02:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockname$l2tp(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x121880, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x5, 0x7, 0x3, 0x2, 0x3, 0x8000, 0x8, 0xfffffffa, 0x1, 0x9, 0x8, 0xff, 0x4, 0x1000, 0x2, 0xff, 0x0, 0x7, 0xb58, 0x8, 0xfffffffe, 0x9, 0x4e8, 0x5, 0x6, 0x3, 0x2, 0x8001, 0x200, 0x4, 0x8, 0x81]}) syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) 03:02:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20041c0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x10000000000}}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getpid() gettid() sched_setscheduler(0x0, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0xffffffff}, 0x1c) listen(r1, 0x10001) syslog(0x0, &(0x7f0000000280)=""/62, 0x3e) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x800) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000180)=0x4) 03:02:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x2}}, 0x50) [ 245.924112][ T9429] sctp: [Deprecated]: syz-executor.0 (pid 9429) Use of int in max_burst socket option. [ 245.924112][ T9429] Use struct sctp_assoc_value instead [ 245.962047][ T9430] fuse: Unknown parameter '' [ 245.993148][ T9423] fuse: Unknown parameter '' 03:02:40 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) openat$snapshot(0xffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fedbdf250600000008000700e0000002150001002f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002f5215fbbe69f6d1a384260702989e399cfa39fbfc0b989865495357dbded47bac9052809b49d99d046466b7de3f5315f32b9969664cb80285cedc8f7da92ecb5ebcaa92100bf710e4c4a6767d7bc402c909f7fbf46a68f4cc413ec1671cce645e6a3a33721d24b8cc4d817115a"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x1a8, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x178, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x174, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1a}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x14}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3f}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2e2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}]}]}]}}]}, 0x1a8}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x10c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8014}, 0x20008801) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 03:02:40 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0x3f, 0x8) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x1fd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4000}, {r7, 0x4040}, {r8, 0x40}, {r1, 0x2}], 0x4, 0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r6, 0x6}, 0x10) 03:02:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000001c0)={{0x2, 0x0, @descriptor="496bf8ec32cf8626"}}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000100)={0x5, 0x20}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) socket$tipc(0x1e, 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="4c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe0c, 0x20c49a, 0x0, 0x27) [ 246.169159][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:02:40 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x848100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x280, 0x0, 0x158, 0x0, 0x248, 0x350, 0x350, 0x248, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x105, 0xa6}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000380)={0x1, 0x4a9}, 0x8) 03:02:40 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x804, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2, 0x1b071, 0xffffffffffffffff, 0x0) pipe(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0x8) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=ANY=[@ANYBLOB="bc00e4a171090b5debefbe0a424be00fb40884e7e9b86e7e65ca9f84e064bc936bef17255650fd942f695e9a3ed96aea614b6a89a6af611cce1b78c08ace05f560072c0e8390d40858d9e4b66efdf4f06ab14aa6ebb22bf069142da087dd9d14a4484d68ccea76d724df03c655a87a972a70b9f60000000000000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf250900000008003700000000000900070060b40000000800090005ac0f0006000a00f65b0000080037000100000009000700b943178dc200000004000b0004006e800802090005ac0f006000508008000700020000000400050011000100f53d1d2bf6e719461a878a1f3f000000080007000100000009000100954260972f0000000400060004000600040006001c0008800400020004000100040002000400010004000200040001006dd7e369a6340353318b012ffc00c92bb124da9bfe6007aa5fad5764e77496e18fb754836bc54ad19c300c78a10d168a5505461b5c9c11e4fefa7580e627734c94c4486bc79f577ab25dd2bc5f13e3a00b26c8accb8e3cb06bf59937683c6e4c6e6a6f3f2d1380a2878653bbabe3154bcb7f2b7e9057e62646f2ece4a1cbfd8f68dbdcb3b324600484e33e69b1552bb084fc03e5886f8212e8e9cda3b9b8fc8d57a0cc1fb631d8000000"], 0x3}, 0x1, 0x0, 0x0, 0x40809}, 0x0) [ 246.342501][ T9451] xt_hashlimit: size too large, truncated to 1048576 [ 246.344298][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.357388][ T9451] xt_hashlimit: overflow, try lower: 0/0 03:02:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x2438c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) r2 = socket(0x10, 0x800000000000803, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x1ff, @local, 0x2}}, 0x0, 0x0, 0x1f, 0x0, "c40379024ede3c2b934ca2acc06246fd07188fcbc8146ecf8183dc8583355fce275a2efbe4672d08dd5f60bdc6e97625f65e27bd873458b1b46791a0cb716366db16b7ad08b13b88cad52a0a3ee188e1"}, 0xd8) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x80a0) [ 246.522212][ T9466] sctp: [Deprecated]: syz-executor.0 (pid 9466) Use of int in max_burst socket option. [ 246.522212][ T9466] Use struct sctp_assoc_value instead 03:02:40 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$pokeuser(0x6, r1, 0x7ff, 0x401) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 03:02:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0xf, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, r0, 0x427, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) socket(0x0, 0x803, 0x0) 03:02:41 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) openat$snapshot(0xffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x71, 0x2}, 0x102a0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x67) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x804) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(r8, 0x10d, 0x3b, &(0x7f00000001c0)=@fragment={0x0, 0x0, 0xfe}, 0x8) r9 = dup(0xffffffffffffffff) r10 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x4000, 0x4, {}, {0x3, 0xc, 0xff, 0x3f, 0x5, 0x7f, '6[*\f'}, 0x401, 0x2, @offset=0x6, 0x4, 0x0, r6}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 03:02:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0xf, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, r0, 0x427, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) socket(0x0, 0x803, 0x0) 03:02:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x1100, 'sh\x00'}, 0x2c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x5, 0x0, 0x0, 0x80, 0x0, 0xb2bf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x40, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000640)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x20, 0x3, 0x1, 0x80000000}, 0x14) 03:02:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0xf, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, r0, 0x427, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) socket(0x0, 0x803, 0x0) 03:02:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x71, 0x2}, 0x102a0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x67) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x804) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(r8, 0x10d, 0x3b, &(0x7f00000001c0)=@fragment={0x0, 0x0, 0xfe}, 0x8) r9 = dup(0xffffffffffffffff) r10 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x4000, 0x4, {}, {0x3, 0xc, 0xff, 0x3f, 0x5, 0x7f, '6[*\f'}, 0x401, 0x2, @offset=0x6, 0x4, 0x0, r6}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 03:02:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:41 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) openat$snapshot(0xffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:42 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$pokeuser(0x6, r1, 0x7ff, 0x401) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 03:02:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x71, 0x2}, 0x102a0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x67) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x804) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(r8, 0x10d, 0x3b, &(0x7f00000001c0)=@fragment={0x0, 0x0, 0xfe}, 0x8) r9 = dup(0xffffffffffffffff) r10 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x4000, 0x4, {}, {0x3, 0xc, 0xff, 0x3f, 0x5, 0x7f, '6[*\f'}, 0x401, 0x2, @offset=0x6, 0x4, 0x0, r6}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 03:02:42 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) openat$snapshot(0xffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x404c854}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040000001000010000000000004000000000000a20000000020a0101000000000000000000b781000900010000010000000000000000000000000a00"/72], 0x48}}, 0xc001) 03:02:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000009c0)={0x0, 0xcf0e0000, &(0x7f0000000240)={&(0x7f0000000300)={0xf4, r5, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xf4}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0xc6000, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8080}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x4, @dev={0xac, 0x14, 0x14, 0x25}, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x6, 0x0) 03:02:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xff7cff40f825d397}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x4000e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'syz_tun\x00', {0xeacc}, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="1d000000050000000700000000000018be200007000000000000000002000000000000fd00000000000000010000000000000076250e94a97e9d82c4f835230687c9a006b77aefcbff5b8e19082c735bb7807af359feae6ada09ef3704c4bc1956d1bb5771815de0664d30f7dd00dc29830c9c93dc40663b0520a8ebece60f3a076a3a4511dbf512bc143809cfff8dc29017b4aab429b99c0f4029e77df4a9f15f5822992b6ea9d9657d12321858589e6f19b2ab8bc0604c7a4beff8ea2eafa84cc8d941b672fd34efd97a7bfd20e5b7785fcb4da33038165990342e51a3850779f4e7d31e7a6cce4457d5b515021caf051815b406a837cc"]}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000000)={{0x1, @name="f2c361ea3d19086211f6a4f319d3a1b7ed405b9de9483a3ee859e35cee0aed00"}, 0x8, 0x3f}) [ 248.249592][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:02:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={r1, 0x0, 0x1, "807e7c85d2e76b6342b653915c65b2419fa9cda705ac7859a228815921be60f5b081f14a9bd1849853b7ca78586ebf740d5773dbc1874a0df506d37fa541d524de5031cfd560bb25f8a33f107f1dee9bfbce397687a6f8536cb6a0acbd4404a3213e514780"}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val={@val={0x806}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast}}}}, 0x0) 03:02:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x4, 0x0, 0x4b, 0x0, 0x41c1, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext, 0x0, 0x3, 0x8, 0x0, 0x101, 0x0, 0xfffc}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6tnl0\x00', 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000100)=0x0) write$P9_RGETLOCK(r3, &(0x7f00000001c0)={0x26, 0x37, 0x7, {0x2, 0x8f80, 0x1c16c317, r5, 0x8, 'ip6tnl0\x00'}}, 0x26) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x400, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CT={0xac, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x549}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x20}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x1f, 0xfffffffb]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x5, 0x7, 0x400]}, @CTA_LABELS_MASK={0x8, 0x17, [0x412]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_EXP={0x4c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9d}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8044}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x3c}, &(0x7f0000000180)=0x8) dup3(0xffffffffffffffff, r1, 0x0) 03:02:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 248.843316][ T9568] IPVS: set_ctl: invalid protocol: 4 172.20.20.37:65533 [ 248.856982][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.876134][ T9594] IPVS: set_ctl: invalid protocol: 4 172.20.20.37:65533 03:02:42 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$pokeuser(0x6, r1, 0x7ff, 0x401) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 03:02:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)=@secondary='builtin_and_secondary_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r3 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, r2) keyctl$invalidate(0x15, r3) openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x40ca01, 0x0) sendmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x24044075) 03:02:43 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) openat$snapshot(0xffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:43 executing program 1: openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x280000, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904016400d1a50f09c56a98f31f08da2f82e70068537d4c6130", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a73b8268129e5fa4316a5d8c69"}}}}}}}, 0x0) 03:02:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000008c7f24d900f8ff1d00000000000000000200"/40], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x4004004) [ 249.337499][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.400016][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:02:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xff7cff40f825d397}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x4000e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'syz_tun\x00', {0xeacc}, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="1d000000050000000700000000000018be200007000000000000000002000000000000fd00000000000000010000000000000076250e94a97e9d82c4f835230687c9a006b77aefcbff5b8e19082c735bb7807af359feae6ada09ef3704c4bc1956d1bb5771815de0664d30f7dd00dc29830c9c93dc40663b0520a8ebece60f3a076a3a4511dbf512bc143809cfff8dc29017b4aab429b99c0f4029e77df4a9f15f5822992b6ea9d9657d12321858589e6f19b2ab8bc0604c7a4beff8ea2eafa84cc8d941b672fd34efd97a7bfd20e5b7785fcb4da33038165990342e51a3850779f4e7d31e7a6cce4457d5b515021caf051815b406a837cc"]}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000000)={{0x1, @name="f2c361ea3d19086211f6a4f319d3a1b7ed405b9de9483a3ee859e35cee0aed00"}, 0x8, 0x3f}) 03:02:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:43 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$pokeuser(0x6, r1, 0x7ff, 0x401) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 03:02:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000040)={0x4, "81aa1c7b8d3c84064ce81e6bb3c44660d7fe68349ff0ba328815c5dd80a7ba6861b1520fad3f319a826fcfbb48131f15c3388a3932a59c0fa70ed420a4668ee9", {0x6, 0xfffffffffffff728}}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa021, 0x0, 0x3d}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r6 = open(0x0, 0x10200, 0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x800002, 0x10, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 03:02:43 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb5701f7b62d7e345f7945acd5c9257b03054a77af8a32a042eafe4a0f77eca98b37b8125e11ce3733bb6f3ff273ee7b9d54606bf39c25a4d8374a33da940f84cea30900"/87], 0x57, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0xf9c2, 0x1f, 0x1, 0x2, 0xfa4e, 0x200, 0x2, 0x9e99, 0x8, 0x7, 0xffffff7f, 0x1f, 0x3, 0x22a961c0, 0x17, 0x1, {0x0, 0x8}, 0x80, 0xbf}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, 0x0) tee(r3, r1, 0x1, 0x6) 03:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:44 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x14000, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@acquire={0x12c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1}}}, [@tmpl={0x4}]}, 0x12c}}, 0x0) 03:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:44 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) dup(r1) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 03:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:44 executing program 2: io_setup(0x100, &(0x7f0000000080)=0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:02:45 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:45 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$pokeuser(0x6, r1, 0x7ff, 0x401) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) 03:02:45 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:45 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:45 executing program 2: unshare(0x40000000) mmap(&(0x7f00000f6000/0x3000)=nil, 0x3000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) waitid(0x1, r1, &(0x7f0000000100), 0x1, &(0x7f0000000180)) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x0, 0x4, 0x7, 0x100000}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000080)={0xfffffff8, 0x5, 0x400, 0x20, 0xfff}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 03:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 251.483648][ T9719] IPVS: ftp: loaded support on port[0] = 21 03:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:45 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$pokeuser(0x6, r1, 0x7ff, 0x401) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 251.892486][ T9719] IPVS: ftp: loaded support on port[0] = 21 03:02:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:46 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:46 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) getpid() ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:46 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:46 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) getpid() ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:46 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) getpid() ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:46 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="56917efc800b892f3d06f4ccb7020baf787459e7f9165c5711b74b08d076c162d82a636dad667a613c06cb8ec23096ea3ba314cd93d582f29a66ff278bd79d4ff40c2d5de7776af28bd47f33bcd42c315c96e5a88627bea5792e463879e1b7aae5a0f32106c41d000000000000000000001f010aee537bc4b9eaec3985424ba6b8f837364a0935ef47370e6436de6beab3cc04e5ac2ad4710e316a1d8cc60cae81bdd5f9e1f7fcf9ef13c682ebc078d3d05c16cd0525918ad26b56319c20d4ea8757a1daaf08", @ANYRES32=0x0], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan1\x00', 0x3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x8, &(0x7f0000000040)={@remote}, 0x14) nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100)) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000003080)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000600)=0x20000000, 0x4) sendto$inet(r2, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0) close(r1) eventfd(0x0) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[], 0xfffffecc) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) [ 252.673129][ T8784] tipc: TX() has been purged, node left! [ 252.694363][ T9799] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 3, id = 0 03:02:46 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:46 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:46 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:47 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:47 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) getpid() sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:47 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:47 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:47 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:47 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:47 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:47 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:47 executing program 0: r0 = socket$inet(0xa, 0x0, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:47 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'gretap0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x837, @link_local}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000280)="e192b8c0467d3ca82881d47324d3e6a13683671d5c4ce3925093fb275d01538593e63eff7e", 0x25) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') 03:02:47 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) 03:02:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x0, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 254.028982][ T9852] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 254.072191][ T9852] xt_NFQUEUE: number of total queues is 0 03:02:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x0, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:48 executing program 0: r0 = socket$inet(0xa, 0x0, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:48 executing program 2: getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, r0) add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x105041, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), 0x0) unshare(0x40000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x6040, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={[0x8001]}, 0x8) 03:02:48 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:48 executing program 0: r0 = socket$inet(0xa, 0x0, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x0, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 254.432296][ T9883] IPVS: ftp: loaded support on port[0] = 21 [ 254.843807][ T9883] IPVS: ftp: loaded support on port[0] = 21 03:02:49 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) getpid() ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:49 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:49 executing program 2: getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, r0) add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x105041, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), 0x0) unshare(0x40000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x6040, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={[0x8001]}, 0x8) 03:02:49 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) 03:02:49 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:49 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) 03:02:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) [ 255.320526][ T9952] IPVS: ftp: loaded support on port[0] = 21 03:02:49 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:49 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:49 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:49 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) r5 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0x0, 0x0, r5}) 03:02:49 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:49 executing program 0: socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:49 executing program 2: ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x864a, 0x8}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r3 = dup(0xffffffffffffffff) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="ea0e0000000000000000004ad1ec6f4f280a840cade67241516c78cab7329780618b3256b924acf70542ea82fe62ff6742173072897c509ee60b6baed837b812c9640960c1478ceb9097f2f22492e4568aafeddde3cd2e1146f4964845d12816f43cd5d7b57054ffd2cbe2ecd9c1d0d59d779195f8af36466808ece664342806d9c3d128519ab4cdc4821aab01972e7056cee25290643e85b58bab6f16b224085a5f569c4104c83f5d23e63a963d9a15061c83fa0c3577c3af22476d657e49d0231964c1cd29320d079f6db2f57b72"], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x80, &(0x7f0000000100)='%})%\xcf,^\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000280)=0x7ff) ioctl$KDGETMODE(r3, 0x4b3b, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) 03:02:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:49 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:49 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:49 executing program 0: socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:50 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:50 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:50 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:50 executing program 0: socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) 03:02:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:50 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 03:02:51 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:51 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:51 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0x0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:51 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 03:02:51 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:51 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:51 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 03:02:51 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0x0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:51 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:51 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:51 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)}}], 0x2, 0x0) 03:02:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0x0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 03:02:51 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:51 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:51 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}], 0x1, 0x0) 03:02:52 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) 03:02:52 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}], 0x1, 0x0) 03:02:52 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:52 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:52 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) 03:02:52 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}], 0x1, 0x0) 03:02:52 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:52 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:52 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) 03:02:53 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)}}], 0x2, 0x0) 03:02:53 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 03:02:53 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:53 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 03:02:53 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:02:53 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r1, 0x0, 0xedc0) openat$mice(0xffffff9c, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 03:02:53 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:02:53 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:02:53 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:54 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:54 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 260.483062][ T8784] tipc: TX() has been purged, node left! 03:02:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 260.633141][ T8784] tipc: TX() has been purged, node left! 03:02:54 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 260.803448][ T8784] tipc: TX() has been purged, node left! 03:02:54 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:54 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:54 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:55 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:55 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:55 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:55 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:55 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:55 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:55 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:55 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:55 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:55 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:55 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:56 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:56 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:56 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:56 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:56 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:02:56 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:02:56 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:56 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:02:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:56 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:56 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:56 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:56 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:56 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:57 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:57 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 4: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:02:57 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:57 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 4: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:02:57 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:57 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:57 executing program 4: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:57 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:57 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:02:57 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 264.123518][T10352] FAULT_INJECTION: forcing a failure. [ 264.123518][T10352] name failslab, interval 1, probability 0, space 0, times 1 [ 264.136820][T10352] CPU: 1 PID: 10352 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 264.143537][T10355] debugfs: File 'dropped' in directory 'sg0' already present! [ 264.145715][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.145748][T10352] Call Trace: [ 264.145890][T10352] dump_stack+0x188/0x20d [ 264.145956][T10352] should_fail.cold+0x5/0xa [ 264.176355][T10352] ? fault_create_debugfs_attr+0x140/0x140 [ 264.182274][T10352] ? mark_held_locks+0xe0/0xe0 [ 264.187092][T10352] ? lock_release+0x800/0x800 [ 264.191861][T10352] should_failslab+0x5/0xf [ 264.196449][T10352] kmem_cache_alloc+0x44/0x740 [ 264.197947][T10355] debugfs: File 'msg' in directory 'sg0' already present! [ 264.201232][T10352] ? lockdep_hardirqs_on+0x196/0x620 [ 264.201321][T10352] ? inet_get_local_port_range+0x24f/0x3d0 03:02:58 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:58 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 264.201411][T10352] sctp_get_port_local+0x3f7/0x14c0 [ 264.224852][T10352] ? sctp_set_owner_w+0x4c0/0x4c0 [ 264.229999][T10352] ? __ipv6_addr_type+0x20d/0x32a [ 264.235065][T10352] ? sctp_bind_addr_match+0x1d5/0x2c0 [ 264.240471][T10352] sctp_do_bind+0x208/0x5c0 [ 264.244998][T10352] ? memset+0x20/0x40 [ 264.249005][T10352] sctp_autobind+0x168/0x1e0 [ 264.251074][T10355] debugfs: File 'trace0' in directory 'sg0' already present! [ 264.253620][T10352] ? sctp_do_bind+0x5c0/0x5c0 [ 264.253638][T10352] ? lock_downgrade+0x840/0x840 [ 264.253718][T10352] ? sctp_endpoint_is_peeled_off+0xbd/0xf0 [ 264.253737][T10352] sctp_connect_new_asoc+0x436/0x580 [ 264.253779][T10352] ? security_sctp_bind_connect+0x8e/0xc0 [ 264.253798][T10352] sctp_sendmsg+0x1396/0x1f30 [ 264.253838][T10352] ? __might_fault+0x11f/0x1d0 [ 264.253864][T10352] ? __sctp_setsockopt_connectx+0x180/0x180 [ 264.253950][T10352] ? aa_af_perm+0x260/0x260 [ 264.307608][T10352] ? import_iovec+0x236/0x3d0 [ 264.312388][T10352] inet_sendmsg+0x99/0xe0 [ 264.316740][T10352] ? inet_send_prepare+0x4d0/0x4d0 03:02:58 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 264.321966][T10352] sock_sendmsg+0xcf/0x120 [ 264.326404][T10352] ____sys_sendmsg+0x308/0x7e0 [ 264.331192][T10352] ? kernel_sendmsg+0x50/0x50 [ 264.335889][T10352] ? mark_lock+0x12b/0xf10 [ 264.340342][T10352] ___sys_sendmsg+0x100/0x170 [ 264.345156][T10352] ? sendmsg_copy_msghdr+0x70/0x70 [ 264.350314][T10352] ? __fget_files+0x32f/0x500 [ 264.355010][T10352] ? ksys_dup3+0x3c0/0x3c0 [ 264.359455][T10352] ? __fget_light+0x20e/0x270 [ 264.364158][T10352] __sys_sendmmsg+0x195/0x480 [ 264.368864][T10352] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 264.373995][T10352] ? lock_downgrade+0x840/0x840 [ 264.379078][T10352] ? __mutex_unlock_slowpath+0xe2/0x660 [ 264.384651][T10352] ? wait_for_completion+0x270/0x270 [ 264.390002][T10352] ? __this_cpu_preempt_check+0x28/0x190 [ 264.395706][T10352] ? __sb_end_write+0x101/0x1d0 [ 264.400627][T10352] ? vfs_write+0x161/0x5d0 [ 264.405076][T10352] ? fput_many+0x2f/0x1a0 [ 264.409427][T10352] ? ksys_write+0x1a5/0x250 [ 264.414120][T10352] ? __ia32_sys_read+0xb0/0xb0 [ 264.418949][T10352] ? __ia32_sys_clock_settime+0x260/0x260 [ 264.424694][T10352] __x64_sys_sendmmsg+0x99/0x100 [ 264.429654][T10352] ? lockdep_hardirqs_on+0x463/0x620 [ 264.434989][T10352] do_syscall_64+0xf6/0x7d0 [ 264.440305][T10352] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 264.446221][T10352] RIP: 0033:0x45c829 [ 264.450132][T10352] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.469754][T10352] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.478195][T10352] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 264.486617][T10352] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 264.494609][T10352] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 264.502595][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 264.510587][T10352] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:02:58 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:58 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 264.631897][T10366] FAULT_INJECTION: forcing a failure. [ 264.631897][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 264.646242][T10366] CPU: 0 PID: 10366 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 264.655026][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.665098][T10366] Call Trace: [ 264.668471][T10366] dump_stack+0x188/0x20d [ 264.672829][T10366] should_fail.cold+0x5/0xa [ 264.678149][T10366] ? fault_create_debugfs_attr+0x140/0x140 [ 264.683987][T10366] ? sctp_get_port_local+0xe26/0x14c0 [ 264.689441][T10366] ? __local_bh_enable_ip+0x159/0x270 [ 264.694837][T10366] ? sctp_get_port_local+0xe3c/0x14c0 [ 264.700230][T10366] should_failslab+0x5/0xf [ 264.704772][T10366] kmem_cache_alloc_trace+0x47/0x7d0 [ 264.710173][T10366] ? sctp_set_owner_w+0x4c0/0x4c0 [ 264.715234][T10366] ? __ipv6_addr_type+0x20d/0x32a [ 264.720314][T10366] sctp_add_bind_addr+0x93/0x380 [ 264.725315][T10366] sctp_do_bind+0x2f0/0x5c0 [ 264.729861][T10366] ? memset+0x20/0x40 [ 264.733969][T10366] sctp_autobind+0x168/0x1e0 [ 264.738581][T10366] ? sctp_do_bind+0x5c0/0x5c0 [ 264.743361][T10366] ? lock_downgrade+0x840/0x840 [ 264.748272][T10366] ? sctp_endpoint_is_peeled_off+0xbd/0xf0 [ 264.754207][T10366] sctp_connect_new_asoc+0x436/0x580 [ 264.759621][T10366] ? security_sctp_bind_connect+0x8e/0xc0 [ 264.765399][T10366] sctp_sendmsg+0x1396/0x1f30 [ 264.770099][T10366] ? __might_fault+0x11f/0x1d0 [ 264.775009][T10366] ? __sctp_setsockopt_connectx+0x180/0x180 [ 264.780952][T10366] ? aa_af_perm+0x260/0x260 [ 264.785478][T10366] ? import_iovec+0x236/0x3d0 [ 264.790188][T10366] inet_sendmsg+0x99/0xe0 [ 264.794537][T10366] ? inet_send_prepare+0x4d0/0x4d0 [ 264.799680][T10366] sock_sendmsg+0xcf/0x120 [ 264.804140][T10366] ____sys_sendmsg+0x308/0x7e0 [ 264.808921][T10366] ? kernel_sendmsg+0x50/0x50 [ 264.813653][T10366] ? mark_lock+0x12b/0xf10 [ 264.818098][T10366] ___sys_sendmsg+0x100/0x170 [ 264.822814][T10366] ? sendmsg_copy_msghdr+0x70/0x70 [ 264.827970][T10366] ? __fget_files+0x32f/0x500 [ 264.832718][T10366] ? ksys_dup3+0x3c0/0x3c0 [ 264.837183][T10366] ? __fget_light+0x20e/0x270 [ 264.841887][T10366] __sys_sendmmsg+0x195/0x480 [ 264.846583][T10366] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 264.851630][T10366] ? lock_downgrade+0x840/0x840 [ 264.856510][T10366] ? __mutex_unlock_slowpath+0xe2/0x660 [ 264.862070][T10366] ? wait_for_completion+0x270/0x270 [ 264.867375][T10366] ? __this_cpu_preempt_check+0x28/0x190 [ 264.873023][T10366] ? __sb_end_write+0x101/0x1d0 [ 264.877890][T10366] ? vfs_write+0x161/0x5d0 [ 264.882320][T10366] ? fput_many+0x2f/0x1a0 [ 264.886666][T10366] ? ksys_write+0x1a5/0x250 [ 264.891268][T10366] ? __ia32_sys_read+0xb0/0xb0 [ 264.896045][T10366] ? __ia32_sys_clock_settime+0x260/0x260 [ 264.901790][T10366] __x64_sys_sendmmsg+0x99/0x100 [ 264.906747][T10366] ? lockdep_hardirqs_on+0x463/0x620 [ 264.912053][T10366] do_syscall_64+0xf6/0x7d0 [ 264.916580][T10366] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 264.922478][T10366] RIP: 0033:0x45c829 [ 264.926386][T10366] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.946004][T10366] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.954432][T10366] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 264.962440][T10366] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 264.970610][T10366] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 264.978597][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 264.986585][T10366] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:02:59 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:59 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:59 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:59 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:02:59 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:59 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 265.337892][T10384] FAULT_INJECTION: forcing a failure. [ 265.337892][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 265.385660][T10384] CPU: 1 PID: 10384 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 265.394593][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.404939][T10384] Call Trace: [ 265.408263][T10384] dump_stack+0x188/0x20d [ 265.412639][T10384] should_fail.cold+0x5/0xa [ 265.417203][T10384] ? fault_create_debugfs_attr+0x140/0x140 [ 265.423050][T10384] should_failslab+0x5/0xf [ 265.427493][T10384] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 265.432897][T10384] ? sctp_autobind+0x168/0x1e0 [ 265.437692][T10384] ? sctp_do_bind+0x5c0/0x5c0 [ 265.442388][T10384] sctp_association_new+0x8c/0x21a0 [ 265.447782][T10384] ? sctp_v4_scope+0x170/0x190 [ 265.452568][T10384] sctp_connect_new_asoc+0x14b/0x580 [ 265.457881][T10384] ? security_sctp_bind_connect+0x8e/0xc0 [ 265.463624][T10384] sctp_sendmsg+0x1396/0x1f30 [ 265.468333][T10384] ? __might_fault+0x11f/0x1d0 [ 265.473119][T10384] ? __sctp_setsockopt_connectx+0x180/0x180 [ 265.479233][T10384] ? aa_af_perm+0x260/0x260 [ 265.483760][T10384] ? import_iovec+0x236/0x3d0 [ 265.488468][T10384] inet_sendmsg+0x99/0xe0 [ 265.492812][T10384] ? inet_send_prepare+0x4d0/0x4d0 [ 265.497941][T10384] sock_sendmsg+0xcf/0x120 [ 265.502375][T10384] ____sys_sendmsg+0x308/0x7e0 [ 265.507163][T10384] ? kernel_sendmsg+0x50/0x50 [ 265.511859][T10384] ? mark_lock+0x12b/0xf10 [ 265.516305][T10384] ___sys_sendmsg+0x100/0x170 [ 265.520996][T10384] ? sendmsg_copy_msghdr+0x70/0x70 [ 265.526138][T10384] ? __fget_files+0x32f/0x500 [ 265.530867][T10384] ? ksys_dup3+0x3c0/0x3c0 [ 265.535322][T10384] ? __fget_light+0x20e/0x270 [ 265.540025][T10384] __sys_sendmmsg+0x195/0x480 [ 265.544731][T10384] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 265.549779][T10384] ? lock_downgrade+0x840/0x840 [ 265.554663][T10384] ? __mutex_unlock_slowpath+0xe2/0x660 [ 265.560240][T10384] ? wait_for_completion+0x270/0x270 [ 265.565545][T10384] ? __this_cpu_preempt_check+0x28/0x190 [ 265.571208][T10384] ? __sb_end_write+0x101/0x1d0 [ 265.576088][T10384] ? vfs_write+0x161/0x5d0 [ 265.580635][T10384] ? fput_many+0x2f/0x1a0 [ 265.584994][T10384] ? ksys_write+0x1a5/0x250 [ 265.589521][T10384] ? __ia32_sys_read+0xb0/0xb0 [ 265.594481][T10384] ? __ia32_sys_clock_settime+0x260/0x260 [ 265.600260][T10384] __x64_sys_sendmmsg+0x99/0x100 [ 265.605229][T10384] ? lockdep_hardirqs_on+0x463/0x620 [ 265.610536][T10384] do_syscall_64+0xf6/0x7d0 [ 265.615072][T10384] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 265.621100][T10384] RIP: 0033:0x45c829 [ 265.625010][T10384] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.644650][T10384] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.653083][T10384] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 265.661077][T10384] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 265.669069][T10384] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 265.677615][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 265.685612][T10384] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:02:59 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:59 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:59 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:02:59 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:02:59 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 265.918109][T10395] FAULT_INJECTION: forcing a failure. [ 265.918109][T10395] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 265.931363][T10395] CPU: 0 PID: 10395 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 265.940055][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.950130][T10395] Call Trace: [ 265.953466][T10395] dump_stack+0x188/0x20d [ 265.957859][T10395] should_fail.cold+0x5/0xa [ 265.962393][T10395] ? fault_create_debugfs_attr+0x140/0x140 [ 265.968229][T10395] ? mark_held_locks+0xe0/0xe0 [ 265.973029][T10395] ? sctp_add_bind_addr+0x93/0x380 [ 265.978197][T10395] __alloc_pages_nodemask+0x17a/0x810 [ 265.983596][T10395] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 265.990539][T10395] ? find_held_lock+0x2d/0x110 [ 265.995350][T10395] cache_grow_begin+0x8c/0xc10 [ 266.000186][T10395] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 266.005669][T10395] kmem_cache_alloc_trace+0x6ed/0x7d0 [ 266.011070][T10395] ? sctp_do_bind+0x5c0/0x5c0 [ 266.015769][T10395] sctp_association_new+0x8c/0x21a0 [ 266.020990][T10395] ? sctp_v4_scope+0x170/0x190 [ 266.025931][T10395] sctp_connect_new_asoc+0x14b/0x580 [ 266.031254][T10395] ? security_sctp_bind_connect+0x8e/0xc0 [ 266.037004][T10395] sctp_sendmsg+0x1396/0x1f30 [ 266.041697][T10395] ? __might_fault+0x11f/0x1d0 [ 266.046500][T10395] ? __sctp_setsockopt_connectx+0x180/0x180 [ 266.052517][T10395] ? aa_af_perm+0x260/0x260 [ 266.057046][T10395] ? import_iovec+0x236/0x3d0 [ 266.061755][T10395] inet_sendmsg+0x99/0xe0 [ 266.066103][T10395] ? inet_send_prepare+0x4d0/0x4d0 [ 266.071227][T10395] sock_sendmsg+0xcf/0x120 [ 266.075869][T10395] ____sys_sendmsg+0x308/0x7e0 [ 266.080656][T10395] ? kernel_sendmsg+0x50/0x50 [ 266.085380][T10395] ? mark_lock+0x12b/0xf10 [ 266.089833][T10395] ___sys_sendmsg+0x100/0x170 [ 266.094570][T10395] ? sendmsg_copy_msghdr+0x70/0x70 [ 266.099722][T10395] ? __fget_files+0x32f/0x500 [ 266.104528][T10395] ? ksys_dup3+0x3c0/0x3c0 [ 266.109074][T10395] ? __fget_light+0x20e/0x270 [ 266.113811][T10395] __sys_sendmmsg+0x195/0x480 [ 266.118609][T10395] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 266.123655][T10395] ? lock_downgrade+0x840/0x840 [ 266.128534][T10395] ? __mutex_unlock_slowpath+0xe2/0x660 [ 266.134098][T10395] ? wait_for_completion+0x270/0x270 [ 266.139393][T10395] ? __this_cpu_preempt_check+0x28/0x190 [ 266.145032][T10395] ? __sb_end_write+0x101/0x1d0 [ 266.149906][T10395] ? vfs_write+0x161/0x5d0 [ 266.154335][T10395] ? fput_many+0x2f/0x1a0 [ 266.158678][T10395] ? ksys_write+0x1a5/0x250 [ 266.163219][T10395] ? __ia32_sys_read+0xb0/0xb0 [ 266.168012][T10395] ? __ia32_sys_clock_settime+0x260/0x260 [ 266.173781][T10395] __x64_sys_sendmmsg+0x99/0x100 [ 266.178741][T10395] ? lockdep_hardirqs_on+0x463/0x620 [ 266.184072][T10395] do_syscall_64+0xf6/0x7d0 [ 266.188590][T10395] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 266.194516][T10395] RIP: 0033:0x45c829 [ 266.198443][T10395] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:03:00 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 266.218154][T10395] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.226583][T10395] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 266.234567][T10395] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 266.242558][T10395] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.250656][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 266.258654][T10395] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:00 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:00 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:00 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:00 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:00 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:00 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 266.616785][T10416] debugfs: File 'dropped' in directory 'sg0' already present! [ 266.629316][T10418] FAULT_INJECTION: forcing a failure. [ 266.629316][T10418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.638223][T10416] debugfs: File 'msg' in directory 'sg0' already present! [ 266.665177][T10416] debugfs: File 'trace0' in directory 'sg0' already present! [ 266.670264][T10418] CPU: 0 PID: 10418 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 266.681457][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.691569][T10418] Call Trace: [ 266.694890][T10418] dump_stack+0x188/0x20d [ 266.699268][T10418] should_fail.cold+0x5/0xa [ 266.703808][T10418] ? fault_create_debugfs_attr+0x140/0x140 [ 266.709820][T10418] __alloc_pages_nodemask+0x17a/0x810 [ 266.715230][T10418] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 266.722024][T10418] ? mark_held_locks+0x9f/0xe0 [ 266.726841][T10418] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 266.732689][T10418] ? lockdep_hardirqs_on+0x463/0x620 [ 266.738125][T10418] alloc_pages_current+0xff/0x200 [ 266.743192][T10418] __get_free_pages+0x8/0x40 [ 266.747805][T10418] __genradix_ptr_alloc+0x15a/0x3a0 [ 266.753031][T10418] __genradix_prealloc+0x56/0x90 [ 266.759013][T10418] sctp_stream_alloc_out.part.0+0x50/0xa0 [ 266.764792][T10418] sctp_stream_init+0x277/0x3f0 [ 266.769755][T10418] sctp_association_new+0x12f1/0x21a0 [ 266.775154][T10418] sctp_connect_new_asoc+0x14b/0x580 [ 266.780464][T10418] ? security_sctp_bind_connect+0x8e/0xc0 [ 266.786211][T10418] sctp_sendmsg+0x1396/0x1f30 [ 266.790903][T10418] ? __might_fault+0x11f/0x1d0 [ 266.795705][T10418] ? __sctp_setsockopt_connectx+0x180/0x180 [ 266.801640][T10418] ? aa_af_perm+0x260/0x260 [ 266.806159][T10418] ? import_iovec+0x236/0x3d0 [ 266.810859][T10418] inet_sendmsg+0x99/0xe0 [ 266.815229][T10418] ? inet_send_prepare+0x4d0/0x4d0 [ 266.820372][T10418] sock_sendmsg+0xcf/0x120 [ 266.824808][T10418] ____sys_sendmsg+0x308/0x7e0 [ 266.829621][T10418] ? kernel_sendmsg+0x50/0x50 [ 266.834327][T10418] ? mark_lock+0x12b/0xf10 [ 266.838789][T10418] ___sys_sendmsg+0x100/0x170 [ 266.843513][T10418] ? sendmsg_copy_msghdr+0x70/0x70 [ 266.848657][T10418] ? __fget_files+0x32f/0x500 [ 266.853379][T10418] ? ksys_dup3+0x3c0/0x3c0 [ 266.857823][T10418] ? __fget_light+0x20e/0x270 [ 266.862522][T10418] __sys_sendmmsg+0x195/0x480 [ 266.867231][T10418] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 266.872290][T10418] ? lock_downgrade+0x840/0x840 [ 266.877192][T10418] ? __mutex_unlock_slowpath+0xe2/0x660 [ 266.882780][T10418] ? wait_for_completion+0x270/0x270 [ 266.888100][T10418] ? __this_cpu_preempt_check+0x28/0x190 [ 266.893763][T10418] ? __sb_end_write+0x101/0x1d0 [ 266.898666][T10418] ? vfs_write+0x161/0x5d0 [ 266.903128][T10418] ? fput_many+0x2f/0x1a0 [ 266.907487][T10418] ? ksys_write+0x1a5/0x250 [ 266.912034][T10418] ? __ia32_sys_read+0xb0/0xb0 [ 266.916820][T10418] ? __ia32_sys_clock_settime+0x260/0x260 [ 266.922576][T10418] __x64_sys_sendmmsg+0x99/0x100 [ 266.927553][T10418] ? lockdep_hardirqs_on+0x463/0x620 [ 266.932963][T10418] do_syscall_64+0xf6/0x7d0 [ 266.937489][T10418] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 266.943567][T10418] RIP: 0033:0x45c829 [ 266.947481][T10418] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:03:00 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:00 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 266.967101][T10418] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.975561][T10418] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 266.983564][T10418] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 266.991569][T10418] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.999570][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 267.007570][T10418] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:01 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:01 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:01 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:01 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:01 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 267.278693][T10438] FAULT_INJECTION: forcing a failure. [ 267.278693][T10438] name failslab, interval 1, probability 0, space 0, times 0 [ 267.329067][T10438] CPU: 1 PID: 10438 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 267.337825][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.347994][T10438] Call Trace: [ 267.351314][T10438] dump_stack+0x188/0x20d [ 267.355706][T10438] should_fail.cold+0x5/0xa [ 267.360244][T10438] ? fault_create_debugfs_attr+0x140/0x140 [ 267.366087][T10438] ? lock_acquire+0x1f2/0x8f0 [ 267.370833][T10438] ? sctp_defaults_init+0xc90/0xc90 [ 267.376087][T10438] should_failslab+0x5/0xf [ 267.380521][T10438] kmem_cache_alloc_trace+0x47/0x7d0 [ 267.386439][T10438] ? _get_random_bytes+0x183/0x420 [ 267.391586][T10438] ? print_usage_bug+0x240/0x240 [ 267.396709][T10438] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 267.402651][T10438] sctp_add_bind_addr+0x93/0x380 [ 267.407613][T10438] sctp_copy_local_addr_list+0x385/0x530 [ 267.413277][T10438] ? sctp_defaults_init+0xc90/0xc90 [ 267.418542][T10438] ? _get_random_bytes+0x197/0x420 [ 267.423697][T10438] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 267.429615][T10438] ? sctp_copy_one_addr+0x5b/0x170 [ 267.434746][T10438] sctp_copy_one_addr+0x5b/0x170 [ 267.439702][T10438] sctp_bind_addr_copy+0xfc/0x2ca [ 267.444749][T10438] sctp_connect_new_asoc+0x16c/0x580 [ 267.450052][T10438] ? security_sctp_bind_connect+0x8e/0xc0 [ 267.455793][T10438] sctp_sendmsg+0x1396/0x1f30 [ 267.460483][T10438] ? __might_fault+0x11f/0x1d0 [ 267.465277][T10438] ? __sctp_setsockopt_connectx+0x180/0x180 [ 267.471204][T10438] ? aa_af_perm+0x260/0x260 [ 267.475731][T10438] ? import_iovec+0x236/0x3d0 [ 267.480432][T10438] inet_sendmsg+0x99/0xe0 [ 267.484780][T10438] ? inet_send_prepare+0x4d0/0x4d0 [ 267.489907][T10438] sock_sendmsg+0xcf/0x120 [ 267.494341][T10438] ____sys_sendmsg+0x308/0x7e0 [ 267.499132][T10438] ? kernel_sendmsg+0x50/0x50 [ 267.503829][T10438] ? mark_lock+0x12b/0xf10 [ 267.508308][T10438] ___sys_sendmsg+0x100/0x170 [ 267.512995][T10438] ? sendmsg_copy_msghdr+0x70/0x70 [ 267.518133][T10438] ? __fget_files+0x32f/0x500 [ 267.522824][T10438] ? ksys_dup3+0x3c0/0x3c0 [ 267.527274][T10438] ? __fget_light+0x20e/0x270 [ 267.532055][T10438] __sys_sendmmsg+0x195/0x480 [ 267.536746][T10438] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 267.541810][T10438] ? lock_downgrade+0x840/0x840 [ 267.546701][T10438] ? __mutex_unlock_slowpath+0xe2/0x660 [ 267.552272][T10438] ? wait_for_completion+0x270/0x270 [ 267.557591][T10438] ? __this_cpu_preempt_check+0x28/0x190 [ 267.563243][T10438] ? __sb_end_write+0x101/0x1d0 [ 267.568121][T10438] ? vfs_write+0x161/0x5d0 [ 267.572600][T10438] ? fput_many+0x2f/0x1a0 [ 267.576946][T10438] ? ksys_write+0x1a5/0x250 [ 267.581563][T10438] ? __ia32_sys_read+0xb0/0xb0 [ 267.586459][T10438] ? __ia32_sys_clock_settime+0x260/0x260 [ 267.592209][T10438] __x64_sys_sendmmsg+0x99/0x100 [ 267.597173][T10438] ? lockdep_hardirqs_on+0x463/0x620 [ 267.602575][T10438] do_syscall_64+0xf6/0x7d0 [ 267.607101][T10438] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 267.613004][T10438] RIP: 0033:0x45c829 [ 267.616907][T10438] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.636640][T10438] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.645080][T10438] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 267.653083][T10438] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 267.661080][T10438] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.669200][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 267.677190][T10438] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:01 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:01 executing program 0 (fault-call:1 fault-nth:6): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:01 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:01 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 268.017388][T10455] FAULT_INJECTION: forcing a failure. [ 268.017388][T10455] name failslab, interval 1, probability 0, space 0, times 0 03:03:02 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:02 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 268.109771][T10455] CPU: 1 PID: 10455 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 268.118513][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.128587][T10455] Call Trace: [ 268.131907][T10455] dump_stack+0x188/0x20d [ 268.136291][T10455] should_fail.cold+0x5/0xa [ 268.140835][T10455] ? fault_create_debugfs_attr+0x140/0x140 [ 268.146667][T10455] ? lock_acquire+0x1f2/0x8f0 [ 268.151372][T10455] ? sctp_defaults_init+0xc90/0xc90 [ 268.156716][T10455] should_failslab+0x5/0xf [ 268.161757][T10455] kmem_cache_alloc_trace+0x47/0x7d0 [ 268.167064][T10455] ? _get_random_bytes+0x183/0x420 [ 268.172232][T10455] ? print_usage_bug+0x240/0x240 [ 268.177189][T10455] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 268.183105][T10455] sctp_add_bind_addr+0x93/0x380 [ 268.188062][T10455] sctp_copy_local_addr_list+0x385/0x530 [ 268.194000][T10455] ? sctp_defaults_init+0xc90/0xc90 [ 268.199474][T10455] ? _get_random_bytes+0x197/0x420 [ 268.204606][T10455] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 268.210606][T10455] ? sctp_copy_one_addr+0x5b/0x170 [ 268.215733][T10455] sctp_copy_one_addr+0x5b/0x170 [ 268.220712][T10455] sctp_bind_addr_copy+0xfc/0x2ca [ 268.225755][T10455] sctp_connect_new_asoc+0x16c/0x580 [ 268.231060][T10455] ? security_sctp_bind_connect+0x8e/0xc0 [ 268.236811][T10455] sctp_sendmsg+0x1396/0x1f30 [ 268.241500][T10455] ? __might_fault+0x11f/0x1d0 [ 268.246416][T10455] ? __sctp_setsockopt_connectx+0x180/0x180 [ 268.252366][T10455] ? aa_af_perm+0x260/0x260 [ 268.257848][T10455] ? import_iovec+0x236/0x3d0 [ 268.262550][T10455] inet_sendmsg+0x99/0xe0 [ 268.266904][T10455] ? inet_send_prepare+0x4d0/0x4d0 [ 268.272038][T10455] sock_sendmsg+0xcf/0x120 [ 268.276485][T10455] ____sys_sendmsg+0x308/0x7e0 [ 268.281276][T10455] ? kernel_sendmsg+0x50/0x50 [ 268.285975][T10455] ? mark_lock+0x12b/0xf10 [ 268.290452][T10455] ___sys_sendmsg+0x100/0x170 [ 268.295151][T10455] ? sendmsg_copy_msghdr+0x70/0x70 [ 268.300296][T10455] ? __fget_files+0x32f/0x500 [ 268.305003][T10455] ? ksys_dup3+0x3c0/0x3c0 [ 268.309455][T10455] ? __fget_light+0x20e/0x270 [ 268.314154][T10455] __sys_sendmmsg+0x195/0x480 [ 268.318849][T10455] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 268.323893][T10455] ? lock_downgrade+0x840/0x840 [ 268.328777][T10455] ? __mutex_unlock_slowpath+0xe2/0x660 [ 268.334359][T10455] ? wait_for_completion+0x270/0x270 [ 268.339653][T10455] ? __this_cpu_preempt_check+0x28/0x190 [ 268.345306][T10455] ? __sb_end_write+0x101/0x1d0 [ 268.350177][T10455] ? vfs_write+0x161/0x5d0 [ 268.354613][T10455] ? fput_many+0x2f/0x1a0 [ 268.358957][T10455] ? ksys_write+0x1a5/0x250 [ 268.363472][T10455] ? __ia32_sys_read+0xb0/0xb0 [ 268.368348][T10455] ? __ia32_sys_clock_settime+0x260/0x260 [ 268.374111][T10455] __x64_sys_sendmmsg+0x99/0x100 [ 268.379091][T10455] ? lockdep_hardirqs_on+0x463/0x620 [ 268.384413][T10455] do_syscall_64+0xf6/0x7d0 [ 268.388940][T10455] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 268.394852][T10455] RIP: 0033:0x45c829 [ 268.398757][T10455] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.418373][T10455] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.427003][T10455] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 268.434992][T10455] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 268.443102][T10455] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 268.451119][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 268.459115][T10455] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:02 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:02 executing program 0 (fault-call:1 fault-nth:7): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:02 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:02 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:02 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 268.700620][T10469] FAULT_INJECTION: forcing a failure. [ 268.700620][T10469] name failslab, interval 1, probability 0, space 0, times 0 [ 268.765200][T10469] CPU: 0 PID: 10469 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 268.774132][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.784338][T10469] Call Trace: [ 268.787680][T10469] dump_stack+0x188/0x20d [ 268.792042][T10469] should_fail.cold+0x5/0xa [ 268.796576][T10469] ? fault_create_debugfs_attr+0x140/0x140 [ 268.802841][T10469] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 268.808427][T10469] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 268.814430][T10469] should_failslab+0x5/0xf [ 268.818868][T10469] kmem_cache_alloc_trace+0x47/0x7d0 [ 268.824175][T10469] ? _get_random_bytes+0x183/0x420 [ 268.829302][T10469] ? print_usage_bug+0x240/0x240 [ 268.834258][T10469] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 268.841572][T10469] sctp_add_bind_addr+0x93/0x380 [ 268.846542][T10469] sctp_copy_local_addr_list+0x385/0x530 [ 268.852215][T10469] ? sctp_defaults_init+0xc90/0xc90 [ 268.857427][T10469] ? _get_random_bytes+0x197/0x420 [ 268.862692][T10469] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 268.868631][T10469] ? sctp_copy_one_addr+0x5b/0x170 [ 268.873751][T10469] sctp_copy_one_addr+0x5b/0x170 [ 268.878720][T10469] sctp_bind_addr_copy+0xfc/0x2ca [ 268.883771][T10469] sctp_connect_new_asoc+0x16c/0x580 [ 268.889087][T10469] ? security_sctp_bind_connect+0x8e/0xc0 [ 268.902823][T10469] sctp_sendmsg+0x1396/0x1f30 [ 268.907542][T10469] ? __might_fault+0x11f/0x1d0 [ 268.912343][T10469] ? __sctp_setsockopt_connectx+0x180/0x180 [ 268.918275][T10469] ? aa_af_perm+0x260/0x260 [ 268.922796][T10469] ? import_iovec+0x236/0x3d0 [ 268.927498][T10469] inet_sendmsg+0x99/0xe0 [ 268.931866][T10469] ? inet_send_prepare+0x4d0/0x4d0 [ 268.936992][T10469] sock_sendmsg+0xcf/0x120 [ 268.941421][T10469] ____sys_sendmsg+0x308/0x7e0 [ 268.946208][T10469] ? kernel_sendmsg+0x50/0x50 [ 268.950905][T10469] ? mark_lock+0x12b/0xf10 [ 268.955348][T10469] ___sys_sendmsg+0x100/0x170 [ 268.961083][T10469] ? sendmsg_copy_msghdr+0x70/0x70 [ 268.966223][T10469] ? __fget_files+0x32f/0x500 [ 268.970916][T10469] ? ksys_dup3+0x3c0/0x3c0 [ 268.975379][T10469] ? __fget_light+0x20e/0x270 [ 268.980076][T10469] __sys_sendmmsg+0x195/0x480 [ 268.984775][T10469] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 268.989847][T10469] ? lock_downgrade+0x840/0x840 [ 268.994748][T10469] ? __mutex_unlock_slowpath+0xe2/0x660 [ 269.000334][T10469] ? wait_for_completion+0x270/0x270 [ 269.005645][T10469] ? __this_cpu_preempt_check+0x28/0x190 [ 269.011302][T10469] ? __sb_end_write+0x101/0x1d0 [ 269.016169][T10469] ? vfs_write+0x161/0x5d0 [ 269.020732][T10469] ? fput_many+0x2f/0x1a0 [ 269.025077][T10469] ? ksys_write+0x1a5/0x250 [ 269.029596][T10469] ? __ia32_sys_read+0xb0/0xb0 [ 269.034381][T10469] ? __ia32_sys_clock_settime+0x260/0x260 [ 269.040121][T10469] __x64_sys_sendmmsg+0x99/0x100 [ 269.045078][T10469] ? lockdep_hardirqs_on+0x463/0x620 [ 269.050382][T10469] do_syscall_64+0xf6/0x7d0 [ 269.054902][T10469] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 269.060816][T10469] RIP: 0033:0x45c829 [ 269.064734][T10469] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.084386][T10469] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.093003][T10469] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 269.100995][T10469] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 269.108996][T10469] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 03:03:03 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:03 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 269.116978][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 269.124980][T10469] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:03 executing program 0 (fault-call:1 fault-nth:8): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 269.359668][T10490] FAULT_INJECTION: forcing a failure. [ 269.359668][T10490] name failslab, interval 1, probability 0, space 0, times 0 [ 269.403859][T10490] CPU: 1 PID: 10490 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 269.412611][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.422697][T10490] Call Trace: [ 269.426027][T10490] dump_stack+0x188/0x20d [ 269.430383][T10490] should_fail.cold+0x5/0xa [ 269.434913][T10490] ? fault_create_debugfs_attr+0x140/0x140 [ 269.440754][T10490] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 269.446327][T10490] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 269.452340][T10490] should_failslab+0x5/0xf [ 269.456775][T10490] kmem_cache_alloc_trace+0x47/0x7d0 [ 269.462170][T10490] ? _get_random_bytes+0x183/0x420 [ 269.467300][T10490] ? __sctp_v6_cmp_addr+0x1d4/0x540 [ 269.472522][T10490] sctp_add_bind_addr+0x93/0x380 [ 269.477487][T10490] sctp_copy_local_addr_list+0x385/0x530 [ 269.483144][T10490] ? sctp_defaults_init+0xc90/0xc90 [ 269.488366][T10490] ? _get_random_bytes+0x197/0x420 [ 269.493499][T10490] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 269.499421][T10490] ? sctp_copy_one_addr+0x5b/0x170 [ 269.504555][T10490] sctp_copy_one_addr+0x5b/0x170 [ 269.509544][T10490] sctp_bind_addr_copy+0xfc/0x2ca [ 269.514594][T10490] sctp_connect_new_asoc+0x16c/0x580 [ 269.520007][T10490] ? security_sctp_bind_connect+0x8e/0xc0 [ 269.525810][T10490] sctp_sendmsg+0x1396/0x1f30 [ 269.530574][T10490] ? __might_fault+0x11f/0x1d0 [ 269.535364][T10490] ? __sctp_setsockopt_connectx+0x180/0x180 [ 269.541300][T10490] ? aa_af_perm+0x260/0x260 [ 269.545854][T10490] ? import_iovec+0x236/0x3d0 [ 269.550582][T10490] inet_sendmsg+0x99/0xe0 [ 269.554928][T10490] ? inet_send_prepare+0x4d0/0x4d0 [ 269.560264][T10490] sock_sendmsg+0xcf/0x120 [ 269.564710][T10490] ____sys_sendmsg+0x308/0x7e0 [ 269.569500][T10490] ? kernel_sendmsg+0x50/0x50 [ 269.574190][T10490] ? mark_lock+0x12b/0xf10 [ 269.578640][T10490] ___sys_sendmsg+0x100/0x170 [ 269.583337][T10490] ? sendmsg_copy_msghdr+0x70/0x70 [ 269.588474][T10490] ? __fget_files+0x32f/0x500 [ 269.593170][T10490] ? ksys_dup3+0x3c0/0x3c0 [ 269.597624][T10490] ? __fget_light+0x20e/0x270 [ 269.602322][T10490] __sys_sendmmsg+0x195/0x480 [ 269.607014][T10490] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 269.612052][T10490] ? lock_downgrade+0x840/0x840 [ 269.616934][T10490] ? __mutex_unlock_slowpath+0xe2/0x660 [ 269.622513][T10490] ? wait_for_completion+0x270/0x270 [ 269.627806][T10490] ? __this_cpu_preempt_check+0x28/0x190 [ 269.633453][T10490] ? __sb_end_write+0x101/0x1d0 [ 269.638317][T10490] ? vfs_write+0x161/0x5d0 [ 269.642759][T10490] ? fput_many+0x2f/0x1a0 [ 269.647111][T10490] ? ksys_write+0x1a5/0x250 [ 269.651646][T10490] ? __ia32_sys_read+0xb0/0xb0 [ 269.656421][T10490] ? __ia32_sys_clock_settime+0x260/0x260 [ 269.662188][T10490] __x64_sys_sendmmsg+0x99/0x100 [ 269.667143][T10490] ? lockdep_hardirqs_on+0x463/0x620 [ 269.672449][T10490] do_syscall_64+0xf6/0x7d0 [ 269.676971][T10490] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 269.682872][T10490] RIP: 0033:0x45c829 03:03:03 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:03 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:03 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 269.686774][T10490] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.706394][T10490] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.714826][T10490] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 269.722847][T10490] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 269.730930][T10490] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 269.738930][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 269.746924][T10490] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:03 executing program 0 (fault-call:1 fault-nth:9): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 269.979195][T10502] FAULT_INJECTION: forcing a failure. [ 269.979195][T10502] name failslab, interval 1, probability 0, space 0, times 0 [ 269.995563][T10502] CPU: 1 PID: 10502 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 270.004645][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.014723][T10502] Call Trace: [ 270.018044][T10502] dump_stack+0x188/0x20d [ 270.022410][T10502] should_fail.cold+0x5/0xa [ 270.027202][T10502] ? fault_create_debugfs_attr+0x140/0x140 [ 270.033209][T10502] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 270.038790][T10502] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 270.044804][T10502] should_failslab+0x5/0xf [ 270.049236][T10502] kmem_cache_alloc_trace+0x47/0x7d0 [ 270.054546][T10502] ? retint_kernel+0x2b/0x2b [ 270.059163][T10502] ? __sctp_v6_cmp_addr+0x1d4/0x540 [ 270.064391][T10502] sctp_add_bind_addr+0x93/0x380 [ 270.069358][T10502] sctp_copy_local_addr_list+0x385/0x530 [ 270.075016][T10502] ? sctp_defaults_init+0xc90/0xc90 [ 270.080242][T10502] ? _get_random_bytes+0x197/0x420 [ 270.085382][T10502] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 270.091306][T10502] ? sctp_copy_one_addr+0x5b/0x170 [ 270.096460][T10502] sctp_copy_one_addr+0x5b/0x170 [ 270.101448][T10502] sctp_bind_addr_copy+0xfc/0x2ca [ 270.107045][T10502] sctp_connect_new_asoc+0x16c/0x580 [ 270.112361][T10502] ? security_sctp_bind_connect+0x8e/0xc0 [ 270.118105][T10502] sctp_sendmsg+0x1396/0x1f30 [ 270.122800][T10502] ? __might_fault+0x11f/0x1d0 [ 270.127603][T10502] ? __sctp_setsockopt_connectx+0x180/0x180 [ 270.133535][T10502] ? aa_af_perm+0x260/0x260 [ 270.138098][T10502] ? import_iovec+0x236/0x3d0 [ 270.142772][T10502] inet_sendmsg+0x99/0xe0 [ 270.147119][T10502] ? inet_send_prepare+0x4d0/0x4d0 [ 270.152324][T10502] sock_sendmsg+0xcf/0x120 [ 270.156988][T10502] ____sys_sendmsg+0x308/0x7e0 [ 270.161891][T10502] ? kernel_sendmsg+0x50/0x50 [ 270.166675][T10502] ? mark_lock+0x12b/0xf10 [ 270.171577][T10502] ___sys_sendmsg+0x100/0x170 [ 270.176292][T10502] ? sendmsg_copy_msghdr+0x70/0x70 [ 270.181415][T10502] ? __fget_files+0x32f/0x500 [ 270.186281][T10502] ? ksys_dup3+0x3c0/0x3c0 [ 270.190749][T10502] ? __fget_light+0x20e/0x270 [ 270.195451][T10502] __sys_sendmmsg+0x195/0x480 [ 270.200138][T10502] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 270.209000][T10502] ? lock_downgrade+0x840/0x840 [ 270.213897][T10502] ? __mutex_unlock_slowpath+0xe2/0x660 [ 270.219484][T10502] ? wait_for_completion+0x270/0x270 [ 270.224797][T10502] ? __this_cpu_preempt_check+0x28/0x190 [ 270.231533][T10502] ? __sb_end_write+0x101/0x1d0 [ 270.236411][T10502] ? vfs_write+0x161/0x5d0 [ 270.240842][T10502] ? fput_many+0x2f/0x1a0 [ 270.245314][T10502] ? ksys_write+0x1a5/0x250 [ 270.249845][T10502] ? __ia32_sys_read+0xb0/0xb0 [ 270.254625][T10502] ? __ia32_sys_clock_settime+0x260/0x260 [ 270.260359][T10502] __x64_sys_sendmmsg+0x99/0x100 [ 270.265397][T10502] ? lockdep_hardirqs_on+0x463/0x620 [ 270.270691][T10502] do_syscall_64+0xf6/0x7d0 [ 270.275298][T10502] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 270.281462][T10502] RIP: 0033:0x45c829 [ 270.285369][T10502] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.305344][T10502] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.313787][T10502] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 270.321775][T10502] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 03:03:04 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 270.329733][T10502] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.337723][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 270.345698][T10502] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:04 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:04 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:04 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:04 executing program 0 (fault-call:1 fault-nth:10): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 270.531541][T10511] debugfs: File 'dropped' in directory 'sg0' already present! [ 270.542347][T10510] FAULT_INJECTION: forcing a failure. [ 270.542347][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 270.556434][T10511] debugfs: File 'msg' in directory 'sg0' already present! [ 270.567357][T10511] debugfs: File 'trace0' in directory 'sg0' already present! [ 270.579252][T10510] CPU: 1 PID: 10510 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 270.587957][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.598130][T10510] Call Trace: [ 270.601474][T10510] dump_stack+0x188/0x20d [ 270.605883][T10510] should_fail.cold+0x5/0xa [ 270.610445][T10510] ? fault_create_debugfs_attr+0x140/0x140 [ 270.616402][T10510] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 270.621999][T10510] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 270.628012][T10510] should_failslab+0x5/0xf [ 270.632578][T10510] kmem_cache_alloc_trace+0x47/0x7d0 [ 270.637988][T10510] ? _get_random_bytes+0x183/0x420 [ 270.643128][T10510] ? __sctp_v6_cmp_addr+0x1d4/0x540 [ 270.648366][T10510] sctp_add_bind_addr+0x93/0x380 [ 270.653344][T10510] sctp_copy_local_addr_list+0x385/0x530 [ 270.659099][T10510] ? sctp_defaults_init+0xc90/0xc90 [ 270.664345][T10510] ? _get_random_bytes+0x197/0x420 [ 270.669479][T10510] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 270.675394][T10510] ? sctp_copy_one_addr+0x5b/0x170 [ 270.680627][T10510] sctp_copy_one_addr+0x5b/0x170 [ 270.685590][T10510] sctp_bind_addr_copy+0xfc/0x2ca [ 270.690728][T10510] sctp_connect_new_asoc+0x16c/0x580 [ 270.696059][T10510] ? security_sctp_bind_connect+0x8e/0xc0 [ 270.701922][T10510] sctp_sendmsg+0x1396/0x1f30 [ 270.706612][T10510] ? __might_fault+0x11f/0x1d0 [ 270.711401][T10510] ? __sctp_setsockopt_connectx+0x180/0x180 [ 270.717344][T10510] ? aa_af_perm+0x260/0x260 [ 270.721991][T10510] ? import_iovec+0x236/0x3d0 [ 270.726697][T10510] inet_sendmsg+0x99/0xe0 [ 270.731058][T10510] ? inet_send_prepare+0x4d0/0x4d0 [ 270.736195][T10510] sock_sendmsg+0xcf/0x120 [ 270.740639][T10510] ____sys_sendmsg+0x308/0x7e0 [ 270.745430][T10510] ? kernel_sendmsg+0x50/0x50 [ 270.750146][T10510] ? mark_lock+0x12b/0xf10 [ 270.754605][T10510] ___sys_sendmsg+0x100/0x170 [ 270.759306][T10510] ? sendmsg_copy_msghdr+0x70/0x70 [ 270.764533][T10510] ? __fget_files+0x32f/0x500 [ 270.769243][T10510] ? ksys_dup3+0x3c0/0x3c0 [ 270.773684][T10510] ? __fget_light+0x20e/0x270 [ 270.778393][T10510] __sys_sendmmsg+0x195/0x480 [ 270.783104][T10510] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 270.788254][T10510] ? lock_downgrade+0x840/0x840 [ 270.793260][T10510] ? __mutex_unlock_slowpath+0xe2/0x660 [ 270.798850][T10510] ? wait_for_completion+0x270/0x270 [ 270.804175][T10510] ? __this_cpu_preempt_check+0x28/0x190 [ 270.809834][T10510] ? __sb_end_write+0x101/0x1d0 [ 270.814711][T10510] ? vfs_write+0x161/0x5d0 [ 270.819159][T10510] ? fput_many+0x2f/0x1a0 [ 270.823529][T10510] ? ksys_write+0x1a5/0x250 [ 270.828061][T10510] ? __ia32_sys_read+0xb0/0xb0 [ 270.832854][T10510] ? __ia32_sys_clock_settime+0x260/0x260 [ 270.838604][T10510] __x64_sys_sendmmsg+0x99/0x100 [ 270.843570][T10510] ? lockdep_hardirqs_on+0x463/0x620 [ 270.848875][T10510] do_syscall_64+0xf6/0x7d0 [ 270.853412][T10510] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 270.859496][T10510] RIP: 0033:0x45c829 [ 270.863399][T10510] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.883045][T10510] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.891480][T10510] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 270.899464][T10510] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 270.907446][T10510] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.915431][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 270.923416][T10510] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:04 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 271.024449][T10521] debugfs: File 'dropped' in directory 'sg0' already present! [ 271.032240][T10521] debugfs: File 'msg' in directory 'sg0' already present! [ 271.042517][T10521] debugfs: File 'trace0' in directory 'sg0' already present! 03:03:05 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:05 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:05 executing program 0 (fault-call:1 fault-nth:11): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 271.210118][T10526] FAULT_INJECTION: forcing a failure. [ 271.210118][T10526] name failslab, interval 1, probability 0, space 0, times 0 [ 271.242722][T10526] CPU: 0 PID: 10526 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 271.251461][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.261537][T10526] Call Trace: [ 271.264871][T10526] dump_stack+0x188/0x20d [ 271.269235][T10526] should_fail.cold+0x5/0xa [ 271.273775][T10526] ? fault_create_debugfs_attr+0x140/0x140 [ 271.279616][T10526] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 271.285194][T10526] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 271.291202][T10526] should_failslab+0x5/0xf [ 271.295653][T10526] kmem_cache_alloc_trace+0x47/0x7d0 [ 271.300964][T10526] ? _get_random_bytes+0x183/0x420 [ 271.306099][T10526] ? __sctp_v6_cmp_addr+0x1d4/0x540 [ 271.311325][T10526] sctp_add_bind_addr+0x93/0x380 [ 271.316376][T10526] sctp_copy_local_addr_list+0x385/0x530 [ 271.322037][T10526] ? sctp_defaults_init+0xc90/0xc90 [ 271.327255][T10526] ? _get_random_bytes+0x197/0x420 [ 271.332398][T10526] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 271.338408][T10526] ? sctp_copy_one_addr+0x5b/0x170 [ 271.343529][T10526] sctp_copy_one_addr+0x5b/0x170 [ 271.348637][T10526] sctp_bind_addr_copy+0xfc/0x2ca [ 271.353686][T10526] sctp_connect_new_asoc+0x16c/0x580 [ 271.358999][T10526] ? security_sctp_bind_connect+0x8e/0xc0 [ 271.364744][T10526] sctp_sendmsg+0x1396/0x1f30 [ 271.369440][T10526] ? __might_fault+0x11f/0x1d0 [ 271.374240][T10526] ? __sctp_setsockopt_connectx+0x180/0x180 [ 271.380198][T10526] ? aa_af_perm+0x260/0x260 [ 271.384727][T10526] ? import_iovec+0x236/0x3d0 [ 271.389438][T10526] inet_sendmsg+0x99/0xe0 [ 271.393789][T10526] ? inet_send_prepare+0x4d0/0x4d0 [ 271.398914][T10526] sock_sendmsg+0xcf/0x120 [ 271.403355][T10526] ____sys_sendmsg+0x308/0x7e0 [ 271.408144][T10526] ? kernel_sendmsg+0x50/0x50 [ 271.412834][T10526] ? mark_lock+0x12b/0xf10 [ 271.417637][T10526] ___sys_sendmsg+0x100/0x170 [ 271.422339][T10526] ? sendmsg_copy_msghdr+0x70/0x70 [ 271.427483][T10526] ? __fget_files+0x32f/0x500 [ 271.432195][T10526] ? ksys_dup3+0x3c0/0x3c0 [ 271.436653][T10526] ? __fget_light+0x20e/0x270 [ 271.441365][T10526] __sys_sendmmsg+0x195/0x480 [ 271.446065][T10526] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 271.451138][T10526] ? lock_downgrade+0x840/0x840 [ 271.456050][T10526] ? __mutex_unlock_slowpath+0xe2/0x660 [ 271.461621][T10526] ? wait_for_completion+0x270/0x270 [ 271.467384][T10526] ? __this_cpu_preempt_check+0x28/0x190 [ 271.473050][T10526] ? __sb_end_write+0x101/0x1d0 [ 271.477940][T10526] ? vfs_write+0x161/0x5d0 [ 271.482365][T10526] ? fput_many+0x2f/0x1a0 [ 271.486697][T10526] ? ksys_write+0x1a5/0x250 [ 271.499131][T10526] ? __ia32_sys_read+0xb0/0xb0 [ 271.503917][T10526] ? __ia32_sys_clock_settime+0x260/0x260 [ 271.509678][T10526] __x64_sys_sendmmsg+0x99/0x100 [ 271.514631][T10526] ? lockdep_hardirqs_on+0x463/0x620 [ 271.519920][T10526] do_syscall_64+0xf6/0x7d0 [ 271.524441][T10526] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 271.530342][T10526] RIP: 0033:0x45c829 [ 271.534242][T10526] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.554033][T10526] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.562782][T10526] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 271.570770][T10526] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 271.578765][T10526] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 271.586749][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 271.594740][T10526] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:05 executing program 0 (fault-call:1 fault-nth:12): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 271.727120][T10535] FAULT_INJECTION: forcing a failure. [ 271.727120][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 271.755667][T10535] CPU: 1 PID: 10535 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 271.764401][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.774501][T10535] Call Trace: [ 271.777826][T10535] dump_stack+0x188/0x20d [ 271.782203][T10535] should_fail.cold+0x5/0xa [ 271.786780][T10535] ? fault_create_debugfs_attr+0x140/0x140 [ 271.792637][T10535] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 271.798213][T10535] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 271.804224][T10535] should_failslab+0x5/0xf [ 271.808668][T10535] kmem_cache_alloc_trace+0x47/0x7d0 [ 271.813986][T10535] ? _get_random_bytes+0x183/0x420 [ 271.819117][T10535] ? __sctp_v6_cmp_addr+0x1d4/0x540 [ 271.824330][T10535] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 271.830242][T10535] sctp_add_bind_addr+0x93/0x380 [ 271.835195][T10535] sctp_copy_local_addr_list+0x385/0x530 [ 271.840843][T10535] ? sctp_defaults_init+0xc90/0xc90 [ 271.846062][T10535] ? _get_random_bytes+0x197/0x420 [ 271.851205][T10535] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 271.857131][T10535] ? sctp_copy_one_addr+0x5b/0x170 [ 271.862264][T10535] sctp_copy_one_addr+0x5b/0x170 [ 271.867290][T10535] sctp_bind_addr_copy+0xfc/0x2ca [ 271.875203][T10535] sctp_connect_new_asoc+0x16c/0x580 [ 271.880504][T10535] ? security_sctp_bind_connect+0x8e/0xc0 [ 271.886339][T10535] sctp_sendmsg+0x1396/0x1f30 [ 271.891027][T10535] ? __might_fault+0x11f/0x1d0 [ 271.896011][T10535] ? __sctp_setsockopt_connectx+0x180/0x180 [ 271.901942][T10535] ? aa_af_perm+0x260/0x260 [ 271.906461][T10535] ? import_iovec+0x236/0x3d0 [ 271.911175][T10535] inet_sendmsg+0x99/0xe0 [ 271.915532][T10535] ? inet_send_prepare+0x4d0/0x4d0 [ 271.920681][T10535] sock_sendmsg+0xcf/0x120 [ 271.925123][T10535] ____sys_sendmsg+0x308/0x7e0 [ 271.929892][T10535] ? kernel_sendmsg+0x50/0x50 [ 271.934572][T10535] ? mark_lock+0x12b/0xf10 [ 271.939107][T10535] ___sys_sendmsg+0x100/0x170 [ 271.943815][T10535] ? sendmsg_copy_msghdr+0x70/0x70 [ 271.948963][T10535] ? __fget_files+0x32f/0x500 [ 271.953713][T10535] ? ksys_dup3+0x3c0/0x3c0 [ 271.958161][T10535] ? __fget_light+0x20e/0x270 [ 271.962856][T10535] __sys_sendmmsg+0x195/0x480 [ 271.967543][T10535] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 271.972569][T10535] ? lock_downgrade+0x840/0x840 [ 271.977448][T10535] ? __mutex_unlock_slowpath+0xe2/0x660 [ 271.983008][T10535] ? wait_for_completion+0x270/0x270 [ 271.988305][T10535] ? __this_cpu_preempt_check+0x28/0x190 [ 271.993944][T10535] ? __sb_end_write+0x101/0x1d0 [ 271.998808][T10535] ? vfs_write+0x161/0x5d0 [ 272.003308][T10535] ? fput_many+0x2f/0x1a0 [ 272.007648][T10535] ? ksys_write+0x1a5/0x250 [ 272.012173][T10535] ? __ia32_sys_read+0xb0/0xb0 [ 272.016987][T10535] ? __ia32_sys_clock_settime+0x260/0x260 [ 272.022713][T10535] __x64_sys_sendmmsg+0x99/0x100 [ 272.027678][T10535] ? lockdep_hardirqs_on+0x463/0x620 [ 272.032976][T10535] do_syscall_64+0xf6/0x7d0 [ 272.037613][T10535] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 272.043534][T10535] RIP: 0033:0x45c829 [ 272.047474][T10535] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.067134][T10535] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.075584][T10535] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 272.083573][T10535] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 272.091554][T10535] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 272.099532][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 272.107520][T10535] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:06 executing program 0 (fault-call:1 fault-nth:13): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 272.184932][T10538] FAULT_INJECTION: forcing a failure. [ 272.184932][T10538] name failslab, interval 1, probability 0, space 0, times 0 [ 272.226344][T10538] CPU: 0 PID: 10538 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 272.235073][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.245579][T10538] Call Trace: [ 272.248908][T10538] dump_stack+0x188/0x20d [ 272.253265][T10538] should_fail.cold+0x5/0xa [ 272.257811][T10538] ? fault_create_debugfs_attr+0x140/0x140 [ 272.263654][T10538] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 272.269270][T10538] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 272.275369][T10538] should_failslab+0x5/0xf [ 272.279808][T10538] kmem_cache_alloc_trace+0x47/0x7d0 [ 272.285111][T10538] ? _get_random_bytes+0x183/0x420 [ 272.290242][T10538] ? __sctp_v6_cmp_addr+0x1d4/0x540 [ 272.295462][T10538] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 272.301405][T10538] sctp_add_bind_addr+0x93/0x380 [ 272.306374][T10538] sctp_copy_local_addr_list+0x385/0x530 [ 272.312035][T10538] ? sctp_defaults_init+0xc90/0xc90 [ 272.317235][T10538] ? _get_random_bytes+0x197/0x420 03:03:06 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 272.322369][T10538] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 272.328284][T10538] ? sctp_copy_one_addr+0x5b/0x170 [ 272.333418][T10538] sctp_copy_one_addr+0x5b/0x170 [ 272.338375][T10538] sctp_bind_addr_copy+0xfc/0x2ca [ 272.343418][T10538] sctp_connect_new_asoc+0x16c/0x580 [ 272.348729][T10538] ? security_sctp_bind_connect+0x8e/0xc0 [ 272.354480][T10538] sctp_sendmsg+0x1396/0x1f30 [ 272.359177][T10538] ? __might_fault+0x11f/0x1d0 [ 272.364058][T10538] ? __sctp_setsockopt_connectx+0x180/0x180 [ 272.369989][T10538] ? aa_af_perm+0x260/0x260 [ 272.374517][T10538] ? import_iovec+0x236/0x3d0 [ 272.379224][T10538] inet_sendmsg+0x99/0xe0 [ 272.383592][T10538] ? inet_send_prepare+0x4d0/0x4d0 [ 272.388734][T10538] sock_sendmsg+0xcf/0x120 [ 272.393194][T10538] ____sys_sendmsg+0x308/0x7e0 [ 272.398162][T10538] ? kernel_sendmsg+0x50/0x50 [ 272.402880][T10538] ? mark_lock+0x12b/0xf10 [ 272.407416][T10538] ___sys_sendmsg+0x100/0x170 [ 272.412214][T10538] ? sendmsg_copy_msghdr+0x70/0x70 [ 272.417356][T10538] ? __fget_files+0x32f/0x500 [ 272.422051][T10538] ? ksys_dup3+0x3c0/0x3c0 [ 272.426531][T10538] ? __fget_light+0x20e/0x270 [ 272.431239][T10538] __sys_sendmmsg+0x195/0x480 [ 272.435940][T10538] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 272.440984][T10538] ? lock_downgrade+0x840/0x840 [ 272.445865][T10538] ? __mutex_unlock_slowpath+0xe2/0x660 [ 272.451434][T10538] ? wait_for_completion+0x270/0x270 [ 272.456758][T10538] ? __this_cpu_preempt_check+0x28/0x190 [ 272.462498][T10538] ? __sb_end_write+0x101/0x1d0 [ 272.467370][T10538] ? vfs_write+0x161/0x5d0 [ 272.471824][T10538] ? fput_many+0x2f/0x1a0 [ 272.476187][T10538] ? ksys_write+0x1a5/0x250 [ 272.480702][T10538] ? __ia32_sys_read+0xb0/0xb0 [ 272.485488][T10538] ? __ia32_sys_clock_settime+0x260/0x260 [ 272.491230][T10538] __x64_sys_sendmmsg+0x99/0x100 [ 272.496184][T10538] ? lockdep_hardirqs_on+0x463/0x620 [ 272.501487][T10538] do_syscall_64+0xf6/0x7d0 [ 272.506012][T10538] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 272.511922][T10538] RIP: 0033:0x45c829 [ 272.515839][T10538] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.535460][T10538] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.543911][T10538] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 272.551907][T10538] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 272.559904][T10538] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 272.568133][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 272.576130][T10538] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:06 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:06 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:06 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:06 executing program 0 (fault-call:1 fault-nth:14): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:06 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:06 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 272.957530][T10558] FAULT_INJECTION: forcing a failure. [ 272.957530][T10558] name failslab, interval 1, probability 0, space 0, times 0 03:03:06 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 273.000911][T10558] CPU: 0 PID: 10558 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 273.009739][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.019916][T10558] Call Trace: [ 273.023243][T10558] dump_stack+0x188/0x20d [ 273.027609][T10558] should_fail.cold+0x5/0xa [ 273.032233][T10558] ? fault_create_debugfs_attr+0x140/0x140 [ 273.038083][T10558] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 273.043654][T10558] ? rcu_read_lock_any_held.part.0+0x50/0x50 03:03:06 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 273.049663][T10558] should_failslab+0x5/0xf [ 273.054099][T10558] kmem_cache_alloc_trace+0x47/0x7d0 [ 273.059411][T10558] ? _get_random_bytes+0x183/0x420 [ 273.064551][T10558] ? __sctp_v6_cmp_addr+0x1d4/0x540 [ 273.069825][T10558] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 273.075756][T10558] sctp_add_bind_addr+0x93/0x380 [ 273.080845][T10558] sctp_copy_local_addr_list+0x385/0x530 [ 273.086503][T10558] ? sctp_defaults_init+0xc90/0xc90 [ 273.091826][T10558] ? _get_random_bytes+0x197/0x420 [ 273.096955][T10558] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 273.102896][T10558] ? sctp_copy_one_addr+0x5b/0x170 [ 273.108045][T10558] sctp_copy_one_addr+0x5b/0x170 [ 273.113031][T10558] sctp_bind_addr_copy+0xfc/0x2ca [ 273.118103][T10558] sctp_connect_new_asoc+0x16c/0x580 [ 273.123422][T10558] ? security_sctp_bind_connect+0x8e/0xc0 [ 273.129311][T10558] sctp_sendmsg+0x1396/0x1f30 [ 273.134117][T10558] ? __might_fault+0x11f/0x1d0 [ 273.138915][T10558] ? __sctp_setsockopt_connectx+0x180/0x180 [ 273.144832][T10558] ? aa_af_perm+0x260/0x260 [ 273.149335][T10558] ? import_iovec+0x236/0x3d0 [ 273.154029][T10558] inet_sendmsg+0x99/0xe0 [ 273.158366][T10558] ? inet_send_prepare+0x4d0/0x4d0 [ 273.163573][T10558] sock_sendmsg+0xcf/0x120 [ 273.168035][T10558] ____sys_sendmsg+0x308/0x7e0 [ 273.172841][T10558] ? kernel_sendmsg+0x50/0x50 [ 273.177572][T10558] ? mark_lock+0x12b/0xf10 [ 273.182067][T10558] ___sys_sendmsg+0x100/0x170 [ 273.186818][T10558] ? sendmsg_copy_msghdr+0x70/0x70 [ 273.191962][T10558] ? __fget_files+0x32f/0x500 [ 273.196686][T10558] ? ksys_dup3+0x3c0/0x3c0 [ 273.201148][T10558] ? __fget_light+0x20e/0x270 [ 273.205950][T10558] __sys_sendmmsg+0x195/0x480 [ 273.210660][T10558] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 273.217212][T10558] ? lock_downgrade+0x840/0x840 [ 273.222096][T10558] ? __mutex_unlock_slowpath+0xe2/0x660 [ 273.227689][T10558] ? wait_for_completion+0x270/0x270 [ 273.232994][T10558] ? __this_cpu_preempt_check+0x28/0x190 [ 273.238641][T10558] ? __sb_end_write+0x101/0x1d0 [ 273.243657][T10558] ? vfs_write+0x161/0x5d0 [ 273.248127][T10558] ? fput_many+0x2f/0x1a0 [ 273.252928][T10558] ? ksys_write+0x1a5/0x250 [ 273.257447][T10558] ? __ia32_sys_read+0xb0/0xb0 [ 273.262223][T10558] ? __ia32_sys_clock_settime+0x260/0x260 [ 273.267985][T10558] __x64_sys_sendmmsg+0x99/0x100 [ 273.272970][T10558] ? lockdep_hardirqs_on+0x463/0x620 [ 273.278278][T10558] do_syscall_64+0xf6/0x7d0 [ 273.282789][T10558] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 273.288785][T10558] RIP: 0033:0x45c829 [ 273.292714][T10558] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.312336][T10558] RSP: 002b:00007f680925ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.320972][T10558] RAX: ffffffffffffffda RBX: 00000000004fc3a0 RCX: 000000000045c829 [ 273.328945][T10558] RDX: 0000000000000002 RSI: 0000000020002340 RDI: 0000000000000003 [ 273.336949][T10558] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 273.344927][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 273.352914][T10558] R13: 00000000000008df R14: 00000000004cb835 R15: 00007f680925b6d4 03:03:07 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:07 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:07 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:07 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x8, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:08 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:08 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:08 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:08 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0xb, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:08 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:08 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x10, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:08 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:08 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x14, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:08 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:08 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:09 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:09 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:09 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 03:03:09 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:09 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:09 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 03:03:10 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:10 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:10 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 03:03:10 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:10 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:10 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:10 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x6}) 03:03:10 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xf, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:10 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x6}) 03:03:10 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 4 (fault-call:7 fault-nth:0): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:10 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae0", 0x12}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 277.054325][T10707] FAULT_INJECTION: forcing a failure. [ 277.054325][T10707] name failslab, interval 1, probability 0, space 0, times 0 [ 277.099441][T10707] CPU: 0 PID: 10707 Comm: syz-executor.4 Not tainted 5.7.0-rc5-syzkaller #0 [ 277.108176][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.118254][T10707] Call Trace: [ 277.121569][T10707] dump_stack+0x188/0x20d [ 277.125923][T10707] should_fail.cold+0x5/0xa [ 277.130446][T10707] ? fault_create_debugfs_attr+0x140/0x140 [ 277.136290][T10707] should_failslab+0x5/0xf [ 277.140723][T10707] __kmalloc+0x2d9/0x7a0 [ 277.144980][T10707] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 277.151030][T10707] ? tomoyo_realpath_from_path+0xc2/0x620 [ 277.156777][T10707] ? lock_release+0x800/0x800 [ 277.161643][T10707] ? __lock_acquire+0xcbb/0x4c50 [ 277.166611][T10707] tomoyo_realpath_from_path+0xc2/0x620 [ 277.172187][T10707] ? tomoyo_profile+0x42/0x50 [ 277.176908][T10707] tomoyo_path_number_perm+0x1c2/0x4d0 [ 277.182402][T10707] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 277.188411][T10707] ? tomoyo_execute_permission+0x470/0x470 [ 277.194258][T10707] ? __fget_files+0x30d/0x500 [ 277.198972][T10707] ? __fget_files+0x32f/0x500 [ 277.203673][T10707] ? ksys_dup3+0x3c0/0x3c0 [ 277.208116][T10707] ? __sb_end_write+0x101/0x1d0 [ 277.212994][T10707] ? vfs_write+0x161/0x5d0 [ 277.217438][T10707] security_file_ioctl+0x6c/0xb0 [ 277.222472][T10707] ksys_ioctl+0x50/0x180 [ 277.226762][T10707] __x64_sys_ioctl+0x6f/0xb0 [ 277.231377][T10707] ? lockdep_hardirqs_on+0x463/0x620 [ 277.236686][T10707] do_syscall_64+0xf6/0x7d0 [ 277.241217][T10707] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 277.247232][T10707] RIP: 0033:0x45c829 [ 277.251136][T10707] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.272755][T10707] RSP: 002b:00007f7cbc714c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.281242][T10707] RAX: ffffffffffffffda RBX: 00000000004e1720 RCX: 000000000045c829 [ 277.289238][T10707] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 03:03:11 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x6}) [ 277.297228][T10707] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 277.305211][T10707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 277.313306][T10707] R13: 000000000000022d R14: 00000000004c4541 R15: 00007f7cbc7156d4 [ 277.362442][T10707] ERROR: Out of memory at tomoyo_realpath_from_path. 03:03:11 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xfc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:11 executing program 4 (fault-call:7 fault-nth:1): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:11 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae0", 0x12}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:11 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3}) 03:03:11 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 277.767668][T10729] FAULT_INJECTION: forcing a failure. [ 277.767668][T10729] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.780930][T10729] CPU: 1 PID: 10729 Comm: syz-executor.4 Not tainted 5.7.0-rc5-syzkaller #0 [ 277.789715][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.799808][T10729] Call Trace: [ 277.803126][T10729] dump_stack+0x188/0x20d [ 277.807477][T10729] should_fail.cold+0x5/0xa [ 277.812010][T10729] ? fault_create_debugfs_attr+0x140/0x140 03:03:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x12c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 277.817845][T10729] ? print_usage_bug+0x240/0x240 [ 277.822822][T10729] __alloc_pages_nodemask+0x17a/0x810 [ 277.828226][T10729] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 277.835045][T10729] ? mark_held_locks+0xe0/0xe0 [ 277.839939][T10729] ? print_usage_bug+0x240/0x240 [ 277.844903][T10729] cache_grow_begin+0x8c/0xc10 [ 277.849710][T10729] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 277.855204][T10729] __kmalloc+0x6dc/0x7a0 [ 277.859476][T10729] ? tomoyo_realpath_from_path+0xc2/0x620 [ 277.865218][T10729] ? lock_release+0x800/0x800 [ 277.869906][T10729] ? __lock_acquire+0xcbb/0x4c50 [ 277.874866][T10729] tomoyo_realpath_from_path+0xc2/0x620 [ 277.880430][T10729] ? tomoyo_profile+0x42/0x50 [ 277.885132][T10729] tomoyo_path_number_perm+0x1c2/0x4d0 [ 277.890615][T10729] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 277.896267][T10729] ? tomoyo_execute_permission+0x470/0x470 [ 277.902137][T10729] ? __fget_files+0x30d/0x500 [ 277.906863][T10729] ? __fget_files+0x32f/0x500 [ 277.911566][T10729] ? ksys_dup3+0x3c0/0x3c0 03:03:11 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3}) [ 277.915998][T10729] ? __sb_end_write+0x101/0x1d0 [ 277.920859][T10729] ? vfs_write+0x161/0x5d0 [ 277.925326][T10729] security_file_ioctl+0x6c/0xb0 [ 277.930290][T10729] ksys_ioctl+0x50/0x180 [ 277.934552][T10729] __x64_sys_ioctl+0x6f/0xb0 [ 277.939154][T10729] ? lockdep_hardirqs_on+0x463/0x620 [ 277.944467][T10729] do_syscall_64+0xf6/0x7d0 [ 277.948994][T10729] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 277.955019][T10729] RIP: 0033:0x45c829 [ 277.958946][T10729] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.979086][T10729] RSP: 002b:00007f7cbc714c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.987520][T10729] RAX: ffffffffffffffda RBX: 00000000004e1720 RCX: 000000000045c829 [ 277.995510][T10729] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 [ 278.003521][T10729] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.011518][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a 03:03:11 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3}) 03:03:11 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae0", 0x12}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 278.019511][T10729] R13: 000000000000022d R14: 00000000004c4541 R15: 00007f7cbc7156d4 03:03:12 executing program 1 (fault-call:6 fault-nth:0): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:12 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x5dc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 278.271397][T10744] FAULT_INJECTION: forcing a failure. [ 278.271397][T10744] name failslab, interval 1, probability 0, space 0, times 0 [ 278.316027][T10744] CPU: 1 PID: 10744 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 278.324785][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.334866][T10744] Call Trace: [ 278.338189][T10744] dump_stack+0x188/0x20d [ 278.342566][T10744] should_fail.cold+0x5/0xa [ 278.347129][T10744] ? fault_create_debugfs_attr+0x140/0x140 [ 278.352969][T10744] should_failslab+0x5/0xf [ 278.357408][T10744] __kmalloc+0x2d9/0x7a0 [ 278.361675][T10744] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 278.367682][T10744] ? tomoyo_realpath_from_path+0xc2/0x620 [ 278.373431][T10744] ? lock_release+0x800/0x800 [ 278.378119][T10744] ? __lock_acquire+0xcbb/0x4c50 [ 278.383084][T10744] tomoyo_realpath_from_path+0xc2/0x620 [ 278.388661][T10744] ? tomoyo_profile+0x42/0x50 [ 278.393363][T10744] tomoyo_path_number_perm+0x1c2/0x4d0 [ 278.398851][T10744] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 278.404523][T10744] ? tomoyo_execute_permission+0x470/0x470 [ 278.410388][T10744] ? __fget_files+0x30d/0x500 03:03:12 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:12 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008", 0x1b}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 278.415125][T10744] ? __fget_files+0x32f/0x500 [ 278.419839][T10744] ? ksys_dup3+0x3c0/0x3c0 [ 278.424280][T10744] ? __sb_end_write+0x101/0x1d0 [ 278.429151][T10744] ? vfs_write+0x161/0x5d0 [ 278.433604][T10744] security_file_ioctl+0x6c/0xb0 [ 278.438577][T10744] ksys_ioctl+0x50/0x180 [ 278.442858][T10744] __x64_sys_ioctl+0x6f/0xb0 [ 278.447471][T10744] ? lockdep_hardirqs_on+0x463/0x620 [ 278.452809][T10744] do_syscall_64+0xf6/0x7d0 [ 278.457365][T10744] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 278.463279][T10744] RIP: 0033:0x45c829 [ 278.467225][T10744] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.486865][T10744] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.495301][T10744] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 278.503288][T10744] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 278.511282][T10744] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.519274][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 278.527277][T10744] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:12 executing program 4 (fault-call:7 fault-nth:2): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:12 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x600, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:12 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:12 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:12 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008", 0x1b}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:12 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xa00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:12 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:12 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008", 0x1b}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 278.922940][T10744] ERROR: Out of memory at tomoyo_realpath_from_path. 03:03:12 executing program 1 (fault-call:6 fault-nth:1): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:12 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:12 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b050200080008001600", 0x20}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:12 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2, 0x0) 03:03:12 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 279.083818][T10777] FAULT_INJECTION: forcing a failure. [ 279.083818][T10777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.097076][T10777] CPU: 0 PID: 10777 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 279.105785][T10777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.115893][T10777] Call Trace: [ 279.119218][T10777] dump_stack+0x188/0x20d [ 279.123629][T10777] should_fail.cold+0x5/0xa [ 279.128173][T10777] ? fault_create_debugfs_attr+0x140/0x140 [ 279.134015][T10777] ? print_usage_bug+0x240/0x240 [ 279.138997][T10777] __alloc_pages_nodemask+0x17a/0x810 [ 279.144427][T10777] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 279.151219][T10777] ? mark_held_locks+0xe0/0xe0 [ 279.156016][T10777] ? print_usage_bug+0x240/0x240 [ 279.161062][T10777] cache_grow_begin+0x8c/0xc10 [ 279.165864][T10777] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 279.171349][T10777] __kmalloc+0x6dc/0x7a0 [ 279.175612][T10777] ? tomoyo_realpath_from_path+0xc2/0x620 [ 279.181356][T10777] ? lock_release+0x800/0x800 [ 279.186055][T10777] ? __lock_acquire+0xcbb/0x4c50 [ 279.191029][T10777] tomoyo_realpath_from_path+0xc2/0x620 [ 279.196599][T10777] ? tomoyo_profile+0x42/0x50 [ 279.201317][T10777] tomoyo_path_number_perm+0x1c2/0x4d0 [ 279.206804][T10777] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 279.212468][T10777] ? tomoyo_execute_permission+0x470/0x470 [ 279.218336][T10777] ? __fget_files+0x30d/0x500 [ 279.223056][T10777] ? __fget_files+0x32f/0x500 [ 279.227754][T10777] ? ksys_dup3+0x3c0/0x3c0 [ 279.232182][T10777] ? __sb_end_write+0x101/0x1d0 [ 279.237949][T10777] ? vfs_write+0x161/0x5d0 [ 279.242398][T10777] security_file_ioctl+0x6c/0xb0 [ 279.247400][T10777] ksys_ioctl+0x50/0x180 [ 279.251673][T10777] __x64_sys_ioctl+0x6f/0xb0 [ 279.256304][T10777] ? lockdep_hardirqs_on+0x463/0x620 [ 279.261615][T10777] do_syscall_64+0xf6/0x7d0 [ 279.266140][T10777] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 279.272045][T10777] RIP: 0033:0x45c829 [ 279.275955][T10777] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.295583][T10777] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.304101][T10777] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 279.312094][T10777] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 279.320125][T10777] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 03:03:13 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x1100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:13 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x10, 0x0) [ 279.328116][T10777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 279.336103][T10777] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 [ 279.622961][ T8784] tipc: TX() has been purged, node left! 03:03:13 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:13 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x125c, 0x0) 03:03:13 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x2c01, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:13 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b050200080008001600", 0x20}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:13 executing program 1 (fault-call:6 fault-nth:2): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:13 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:13 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1267, 0x0) 03:03:13 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x80fe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 279.866290][T10798] FAULT_INJECTION: forcing a failure. [ 279.866290][T10798] name failslab, interval 1, probability 0, space 0, times 0 [ 279.884112][T10798] CPU: 1 PID: 10798 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 279.892816][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.902898][T10798] Call Trace: [ 279.906220][T10798] dump_stack+0x188/0x20d [ 279.910614][T10798] should_fail.cold+0x5/0xa 03:03:13 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800", 0x1c}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 279.915157][T10798] ? fault_create_debugfs_attr+0x140/0x140 [ 279.920996][T10798] should_failslab+0x5/0xf [ 279.925441][T10798] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 279.930935][T10798] do_blk_trace_setup+0x167/0xb30 [ 279.935980][T10798] ? _copy_from_user+0x13c/0x1a0 [ 279.940943][T10798] __blk_trace_setup+0xca/0x180 [ 279.945840][T10798] ? do_blk_trace_setup+0xb30/0xb30 [ 279.951107][T10798] blk_trace_setup+0x43/0x60 [ 279.955801][T10798] sg_ioctl_common+0x2f8/0x2720 [ 279.960672][T10798] ? do_vfs_ioctl+0x50c/0x1360 [ 279.965459][T10798] ? sg_new_write.isra.0+0x880/0x880 [ 279.970781][T10798] ? ioctl_file_clone+0x180/0x180 [ 279.975839][T10798] ? __fget_files+0x32f/0x500 [ 279.980535][T10798] ? ksys_dup3+0x3c0/0x3c0 [ 279.984966][T10798] ? __sb_end_write+0x101/0x1d0 [ 279.990010][T10798] ? vfs_write+0x161/0x5d0 [ 279.994446][T10798] sg_ioctl+0x8f/0x120 [ 279.998521][T10798] ? sg_compat_ioctl+0x120/0x120 [ 280.003479][T10798] ksys_ioctl+0x11a/0x180 [ 280.007846][T10798] __x64_sys_ioctl+0x6f/0xb0 03:03:13 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xc0fe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 280.012455][T10798] ? lockdep_hardirqs_on+0x463/0x620 [ 280.017785][T10798] do_syscall_64+0xf6/0x7d0 [ 280.022309][T10798] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 280.028319][T10798] RIP: 0033:0x45c829 [ 280.032232][T10798] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.051857][T10798] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.060287][T10798] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 280.068284][T10798] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 280.076271][T10798] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.084282][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 280.092292][T10798] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:14 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1274, 0x0) 03:03:14 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xdc05, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:14 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:14 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xfc00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:14 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1275, 0x0) 03:03:14 executing program 1 (fault-call:6 fault-nth:3): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:14 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800", 0x1c}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:14 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:14 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2201, 0x0) 03:03:14 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800", 0x1c}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:14 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xfe80, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 280.613262][T10828] FAULT_INJECTION: forcing a failure. [ 280.613262][T10828] name failslab, interval 1, probability 0, space 0, times 0 [ 280.663096][T10828] CPU: 0 PID: 10828 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 280.671820][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.681888][T10828] Call Trace: [ 280.685205][T10828] dump_stack+0x188/0x20d [ 280.689566][T10828] should_fail.cold+0x5/0xa [ 280.694105][T10828] ? fault_create_debugfs_attr+0x140/0x140 [ 280.699945][T10828] should_failslab+0x5/0xf [ 280.704398][T10828] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 280.709800][T10828] do_blk_trace_setup+0x167/0xb30 [ 280.714848][T10828] ? _copy_from_user+0x13c/0x1a0 [ 280.719809][T10828] __blk_trace_setup+0xca/0x180 [ 280.724678][T10828] ? do_blk_trace_setup+0xb30/0xb30 [ 280.729924][T10828] blk_trace_setup+0x43/0x60 [ 280.734522][T10828] sg_ioctl_common+0x2f8/0x2720 [ 280.739365][T10828] ? do_vfs_ioctl+0x50c/0x1360 [ 280.744130][T10828] ? sg_new_write.isra.0+0x880/0x880 [ 280.750829][T10828] ? ioctl_file_clone+0x180/0x180 [ 280.755894][T10828] ? __fget_files+0x32f/0x500 [ 280.760605][T10828] ? ksys_dup3+0x3c0/0x3c0 [ 280.765063][T10828] ? __sb_end_write+0x101/0x1d0 [ 280.769938][T10828] ? vfs_write+0x161/0x5d0 [ 280.774384][T10828] sg_ioctl+0x8f/0x120 [ 280.778556][T10828] ? sg_compat_ioctl+0x120/0x120 [ 280.783521][T10828] ksys_ioctl+0x11a/0x180 [ 280.787869][T10828] __x64_sys_ioctl+0x6f/0xb0 [ 280.792475][T10828] ? lockdep_hardirqs_on+0x463/0x620 [ 280.797799][T10828] do_syscall_64+0xf6/0x7d0 [ 280.802318][T10828] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 280.808425][T10828] RIP: 0033:0x45c829 [ 280.812340][T10828] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.832064][T10828] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.840493][T10828] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 280.848491][T10828] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 03:03:14 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:14 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xfec0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:14 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2202, 0x0) [ 280.856738][T10828] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.864724][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 280.872698][T10828] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:15 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:15 executing program 1 (fault-call:6 fault-nth:4): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:15 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:15 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0xff00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:15 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2203, 0x0) 03:03:15 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xa, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:15 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 281.182767][T10851] FAULT_INJECTION: forcing a failure. [ 281.182767][T10851] name failslab, interval 1, probability 0, space 0, times 0 03:03:15 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2205, 0x0) [ 281.245568][T10851] CPU: 0 PID: 10851 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 281.254288][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.264392][T10851] Call Trace: [ 281.267710][T10851] dump_stack+0x188/0x20d [ 281.272076][T10851] should_fail.cold+0x5/0xa [ 281.276629][T10851] ? fault_create_debugfs_attr+0x140/0x140 [ 281.282465][T10851] should_failslab+0x5/0xf [ 281.286917][T10851] kmem_cache_alloc+0x29b/0x740 [ 281.291802][T10851] ? mark_lock+0x12b/0xf10 [ 281.296231][T10851] ? __lock_acquire+0x2184/0x4c50 [ 281.301271][T10851] __d_alloc+0x2b/0x8e0 [ 281.305466][T10851] d_alloc+0x4a/0x240 [ 281.309479][T10851] d_alloc_parallel+0xe8/0x1b10 [ 281.314365][T10851] ? mark_held_locks+0xe0/0xe0 [ 281.319165][T10851] ? __d_lookup_rcu+0x6c0/0x6c0 [ 281.324135][T10851] ? lockdep_init_map_waits+0x26a/0x890 [ 281.329699][T10851] ? lockdep_init_map_waits+0x26a/0x890 [ 281.335256][T10851] ? __raw_spin_lock_init+0x34/0x100 [ 281.340566][T10851] __lookup_slow+0x193/0x490 [ 281.345197][T10851] ? vfs_rmdir+0x500/0x500 [ 281.349638][T10851] ? d_lookup+0x18f/0x250 [ 281.353990][T10851] lookup_one_len_unlocked+0x120/0x140 [ 281.359575][T10851] ? lookup_one_len+0x190/0x190 [ 281.364453][T10851] ? pcpu_alloc+0x128/0x13b0 [ 281.369061][T10851] lookup_positive_unlocked+0x22/0xc0 [ 281.374517][T10851] debugfs_lookup+0x4b/0xc0 [ 281.379042][T10851] do_blk_trace_setup+0x226/0xb30 [ 281.384082][T10851] ? _copy_from_user+0x13c/0x1a0 [ 281.389730][T10851] __blk_trace_setup+0xca/0x180 [ 281.394606][T10851] ? do_blk_trace_setup+0xb30/0xb30 [ 281.399841][T10851] blk_trace_setup+0x43/0x60 [ 281.404452][T10851] sg_ioctl_common+0x2f8/0x2720 [ 281.409321][T10851] ? do_vfs_ioctl+0x50c/0x1360 [ 281.414110][T10851] ? sg_new_write.isra.0+0x880/0x880 [ 281.419598][T10851] ? ioctl_file_clone+0x180/0x180 [ 281.424661][T10851] ? __fget_files+0x32f/0x500 [ 281.429357][T10851] ? ksys_dup3+0x3c0/0x3c0 [ 281.433785][T10851] ? __sb_end_write+0x101/0x1d0 [ 281.438654][T10851] ? vfs_write+0x161/0x5d0 [ 281.443099][T10851] sg_ioctl+0x8f/0x120 [ 281.447186][T10851] ? sg_compat_ioctl+0x120/0x120 [ 281.452142][T10851] ksys_ioctl+0x11a/0x180 [ 281.456610][T10851] __x64_sys_ioctl+0x6f/0xb0 [ 281.461221][T10851] ? lockdep_hardirqs_on+0x463/0x620 [ 281.466525][T10851] do_syscall_64+0xf6/0x7d0 [ 281.471047][T10851] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 281.476951][T10851] RIP: 0033:0x45c829 [ 281.480854][T10851] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.500476][T10851] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.508908][T10851] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 281.516895][T10851] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 281.524886][T10851] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 281.532871][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 281.540948][T10851] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:15 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:15 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:15 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2270, 0x0) 03:03:15 executing program 1 (fault-call:6 fault-nth:5): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 282.000718][T10871] FAULT_INJECTION: forcing a failure. [ 282.000718][T10871] name failslab, interval 1, probability 0, space 0, times 0 [ 282.014315][T10871] CPU: 1 PID: 10871 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 282.023019][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.033200][T10871] Call Trace: [ 282.036509][T10871] dump_stack+0x188/0x20d [ 282.040863][T10871] should_fail.cold+0x5/0xa [ 282.045397][T10871] ? fault_create_debugfs_attr+0x140/0x140 [ 282.051236][T10871] should_failslab+0x5/0xf [ 282.055667][T10871] kmem_cache_alloc+0x29b/0x740 [ 282.060535][T10871] ? print_usage_bug+0x240/0x240 [ 282.065499][T10871] __d_alloc+0x2b/0x8e0 [ 282.069675][T10871] d_alloc+0x4a/0x240 [ 282.073680][T10871] d_alloc_parallel+0xe8/0x1b10 [ 282.078565][T10871] ? __lock_acquire+0x2184/0x4c50 [ 282.083626][T10871] ? __d_lookup_rcu+0x6c0/0x6c0 [ 282.088515][T10871] ? lockdep_init_map_waits+0x26a/0x890 [ 282.094084][T10871] ? lockdep_init_map_waits+0x26a/0x890 [ 282.099643][T10871] ? __raw_spin_lock_init+0x34/0x100 [ 282.104957][T10871] __lookup_slow+0x193/0x490 [ 282.110786][T10871] ? vfs_rmdir+0x500/0x500 [ 282.115212][T10871] ? print_usage_bug+0x240/0x240 [ 282.120199][T10871] ? d_lookup+0x18f/0x250 [ 282.124565][T10871] lookup_one_len+0x163/0x190 [ 282.129262][T10871] ? __lookup_slow+0x490/0x490 [ 282.134046][T10871] ? __down_timeout+0x2d0/0x2d0 [ 282.138903][T10871] ? do_raw_spin_unlock+0x171/0x260 [ 282.144117][T10871] ? mntput+0xc/0x90 [ 282.148036][T10871] start_creating+0x12b/0x250 [ 282.152736][T10871] debugfs_create_dir+0x1d/0x390 [ 282.157692][T10871] do_blk_trace_setup+0x88f/0xb30 [ 282.162733][T10871] ? _copy_from_user+0x13c/0x1a0 [ 282.167689][T10871] __blk_trace_setup+0xca/0x180 [ 282.173073][T10871] ? do_blk_trace_setup+0xb30/0xb30 [ 282.178309][T10871] blk_trace_setup+0x43/0x60 [ 282.182922][T10871] sg_ioctl_common+0x2f8/0x2720 [ 282.187987][T10871] ? do_vfs_ioctl+0x50c/0x1360 [ 282.192767][T10871] ? sg_new_write.isra.0+0x880/0x880 [ 282.198068][T10871] ? ioctl_file_clone+0x180/0x180 [ 282.203106][T10871] ? __fget_files+0x32f/0x500 [ 282.207798][T10871] ? ksys_dup3+0x3c0/0x3c0 [ 282.212233][T10871] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 282.218279][T10871] ? __sched_text_start+0x8/0x8 [ 282.223192][T10871] sg_ioctl+0x8f/0x120 [ 282.227303][T10871] ? sg_compat_ioctl+0x120/0x120 [ 282.232267][T10871] ksys_ioctl+0x11a/0x180 [ 282.236616][T10871] __x64_sys_ioctl+0x6f/0xb0 [ 282.241222][T10871] ? lockdep_hardirqs_on+0x463/0x620 [ 282.246522][T10871] do_syscall_64+0xf6/0x7d0 [ 282.251045][T10871] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 282.256946][T10871] RIP: 0033:0x45c829 [ 282.260848][T10871] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.280465][T10871] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.288893][T10871] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 282.296872][T10871] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 282.304853][T10871] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.312830][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 282.320914][T10871] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:16 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:16 executing program 1 (fault-call:6 fault-nth:6): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:16 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2271, 0x0) 03:03:16 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:16 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2272, 0x0) 03:03:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:16 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 282.517863][T10884] FAULT_INJECTION: forcing a failure. [ 282.517863][T10884] name failslab, interval 1, probability 0, space 0, times 0 [ 282.572997][T10884] CPU: 0 PID: 10884 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 282.581746][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.601745][T10884] Call Trace: [ 282.605065][T10884] dump_stack+0x188/0x20d [ 282.609432][T10884] should_fail.cold+0x5/0xa [ 282.613957][T10884] ? fault_create_debugfs_attr+0x140/0x140 [ 282.619816][T10884] should_failslab+0x5/0xf [ 282.624247][T10884] kmem_cache_alloc+0x29b/0x740 [ 282.629384][T10884] ? print_usage_bug+0x240/0x240 [ 282.634372][T10884] ? mark_lock+0x12b/0xf10 [ 282.638802][T10884] __d_alloc+0x2b/0x8e0 [ 282.642970][T10884] d_alloc+0x4a/0x240 [ 282.646955][T10884] d_alloc_parallel+0xe8/0x1b10 [ 282.651808][T10884] ? __d_lookup_rcu+0x6c0/0x6c0 [ 282.657710][T10884] ? lockdep_init_map_waits+0x26a/0x890 [ 282.663273][T10884] ? lockdep_init_map_waits+0x26a/0x890 [ 282.668841][T10884] ? __raw_spin_lock_init+0x34/0x100 [ 282.674151][T10884] __lookup_slow+0x193/0x490 [ 282.678760][T10884] ? vfs_rmdir+0x500/0x500 [ 282.683205][T10884] ? print_usage_bug+0x240/0x240 [ 282.688182][T10884] ? d_lookup+0x18f/0x250 [ 282.692543][T10884] lookup_one_len+0x163/0x190 [ 282.697238][T10884] ? __lookup_slow+0x490/0x490 [ 282.702014][T10884] ? __down_timeout+0x2d0/0x2d0 [ 282.706986][T10884] ? do_raw_spin_unlock+0x171/0x260 [ 282.712196][T10884] ? mntput+0xc/0x90 [ 282.716106][T10884] start_creating+0x12b/0x250 [ 282.720808][T10884] __debugfs_create_file+0x62/0x400 [ 282.726036][T10884] do_blk_trace_setup+0x310/0xb30 [ 282.731201][T10884] ? _copy_from_user+0x13c/0x1a0 [ 282.736170][T10884] __blk_trace_setup+0xca/0x180 [ 282.741043][T10884] ? do_blk_trace_setup+0xb30/0xb30 [ 282.746310][T10884] blk_trace_setup+0x43/0x60 [ 282.750928][T10884] sg_ioctl_common+0x2f8/0x2720 [ 282.755885][T10884] ? do_vfs_ioctl+0x50c/0x1360 [ 282.760716][T10884] ? sg_new_write.isra.0+0x880/0x880 [ 282.766060][T10884] ? ioctl_file_clone+0x180/0x180 [ 282.771541][T10884] ? __fget_files+0x32f/0x500 [ 282.776272][T10884] ? ksys_dup3+0x3c0/0x3c0 [ 282.780836][T10884] ? __sb_end_write+0x101/0x1d0 [ 282.785745][T10884] ? vfs_write+0x161/0x5d0 [ 282.790157][T10884] sg_ioctl+0x8f/0x120 [ 282.794232][T10884] ? sg_compat_ioctl+0x120/0x120 [ 282.799259][T10884] ksys_ioctl+0x11a/0x180 [ 282.803594][T10884] __x64_sys_ioctl+0x6f/0xb0 [ 282.810096][T10884] ? lockdep_hardirqs_on+0x463/0x620 [ 282.815421][T10884] do_syscall_64+0xf6/0x7d0 [ 282.819919][T10884] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 282.825806][T10884] RIP: 0033:0x45c829 [ 282.829695][T10884] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.849429][T10884] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.857937][T10884] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 282.865943][T10884] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 03:03:16 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:16 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:16 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2275, 0x0) [ 282.873918][T10884] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.881892][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 282.890063][T10884] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:16 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2276, 0x0) 03:03:16 executing program 1 (fault-call:6 fault-nth:7): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:17 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0xa, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:17 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2279, 0x0) 03:03:17 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 283.177959][T10906] FAULT_INJECTION: forcing a failure. [ 283.177959][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 283.251175][T10906] CPU: 0 PID: 10906 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 283.259902][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.269973][T10906] Call Trace: [ 283.273287][T10906] dump_stack+0x188/0x20d [ 283.277665][T10906] should_fail.cold+0x5/0xa [ 283.282391][T10906] ? fault_create_debugfs_attr+0x140/0x140 [ 283.288244][T10906] should_failslab+0x5/0xf [ 283.292676][T10906] kmem_cache_alloc+0x29b/0x740 [ 283.297551][T10906] ? print_usage_bug+0x240/0x240 [ 283.302602][T10906] ? mark_lock+0x12b/0xf10 [ 283.307034][T10906] __d_alloc+0x2b/0x8e0 [ 283.311378][T10906] d_alloc+0x4a/0x240 [ 283.315377][T10906] d_alloc_parallel+0xe8/0x1b10 [ 283.320258][T10906] ? __d_lookup_rcu+0x6c0/0x6c0 [ 283.325124][T10906] ? lockdep_init_map_waits+0x26a/0x890 [ 283.330686][T10906] ? lockdep_init_map_waits+0x26a/0x890 [ 283.336345][T10906] ? __raw_spin_lock_init+0x34/0x100 [ 283.341782][T10906] __lookup_slow+0x193/0x490 [ 283.346392][T10906] ? vfs_rmdir+0x500/0x500 [ 283.350824][T10906] ? print_usage_bug+0x240/0x240 [ 283.355814][T10906] ? d_lookup+0x18f/0x250 [ 283.360344][T10906] lookup_one_len+0x163/0x190 [ 283.365042][T10906] ? __lookup_slow+0x490/0x490 [ 283.369817][T10906] ? __down_timeout+0x2d0/0x2d0 [ 283.374686][T10906] ? do_raw_spin_unlock+0x171/0x260 [ 283.379893][T10906] ? mntput+0xc/0x90 [ 283.383814][T10906] start_creating+0x12b/0x250 [ 283.388518][T10906] __debugfs_create_file+0x62/0x400 [ 283.393734][T10906] do_blk_trace_setup+0x310/0xb30 03:03:17 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0xf, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:17 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x227a, 0x0) 03:03:17 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x227b, 0x0) [ 283.398773][T10906] ? _copy_from_user+0x13c/0x1a0 [ 283.403729][T10906] __blk_trace_setup+0xca/0x180 [ 283.408601][T10906] ? do_blk_trace_setup+0xb30/0xb30 [ 283.413833][T10906] blk_trace_setup+0x43/0x60 [ 283.418524][T10906] sg_ioctl_common+0x2f8/0x2720 [ 283.423390][T10906] ? do_vfs_ioctl+0x50c/0x1360 [ 283.428172][T10906] ? sg_new_write.isra.0+0x880/0x880 [ 283.433464][T10906] ? ioctl_file_clone+0x180/0x180 [ 283.438504][T10906] ? __fget_files+0x32f/0x500 [ 283.443200][T10906] ? ksys_dup3+0x3c0/0x3c0 [ 283.447624][T10906] ? __sb_end_write+0x101/0x1d0 [ 283.452487][T10906] ? vfs_write+0x161/0x5d0 [ 283.456935][T10906] sg_ioctl+0x8f/0x120 [ 283.461014][T10906] ? sg_compat_ioctl+0x120/0x120 [ 283.465968][T10906] ksys_ioctl+0x11a/0x180 [ 283.470302][T10906] __x64_sys_ioctl+0x6f/0xb0 [ 283.474895][T10906] ? lockdep_hardirqs_on+0x463/0x620 [ 283.480199][T10906] do_syscall_64+0xf6/0x7d0 [ 283.484717][T10906] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 283.490622][T10906] RIP: 0033:0x45c829 [ 283.494534][T10906] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.514150][T10906] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.522603][T10906] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 283.530591][T10906] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 283.538573][T10906] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 03:03:17 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:17 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:17 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x227c, 0x0) 03:03:17 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 283.546560][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 283.554543][T10906] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:17 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:17 executing program 1 (fault-call:6 fault-nth:8): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:17 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x227d, 0x0) 03:03:17 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 283.814129][T10934] FAULT_INJECTION: forcing a failure. [ 283.814129][T10934] name failslab, interval 1, probability 0, space 0, times 0 03:03:17 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:17 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x227e, 0x0) [ 283.864760][T10934] CPU: 0 PID: 10934 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 283.873510][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.883609][T10934] Call Trace: [ 283.886942][T10934] dump_stack+0x188/0x20d [ 283.891309][T10934] should_fail.cold+0x5/0xa [ 283.895843][T10934] ? fault_create_debugfs_attr+0x140/0x140 [ 283.901723][T10934] should_failslab+0x5/0xf [ 283.906169][T10934] kmem_cache_alloc+0x29b/0x740 [ 283.911153][T10934] ? is_bpf_text_address+0xcb/0x160 [ 283.916371][T10934] ? print_usage_bug+0x240/0x240 [ 283.921336][T10934] __d_alloc+0x2b/0x8e0 [ 283.925507][T10934] d_alloc+0x4a/0x240 [ 283.929526][T10934] d_alloc_parallel+0xe8/0x1b10 [ 283.934401][T10934] ? __lock_acquire+0x2184/0x4c50 [ 283.939470][T10934] ? __d_lookup_rcu+0x6c0/0x6c0 [ 283.944346][T10934] ? lockdep_init_map_waits+0x26a/0x890 [ 283.949912][T10934] ? lockdep_init_map_waits+0x26a/0x890 [ 283.955587][T10934] ? __raw_spin_lock_init+0x34/0x100 [ 283.960916][T10934] __lookup_slow+0x193/0x490 [ 283.965528][T10934] ? vfs_rmdir+0x500/0x500 [ 283.969969][T10934] ? print_usage_bug+0x240/0x240 [ 283.974942][T10934] ? d_lookup+0x18f/0x250 [ 283.979296][T10934] lookup_one_len+0x163/0x190 [ 283.983994][T10934] ? __lookup_slow+0x490/0x490 [ 283.988794][T10934] ? __down_timeout+0x2d0/0x2d0 [ 283.993675][T10934] ? do_raw_spin_unlock+0x171/0x260 [ 283.998900][T10934] ? mntput+0xc/0x90 [ 284.002813][T10934] start_creating+0x12b/0x250 [ 284.007508][T10934] __debugfs_create_file+0x62/0x400 03:03:17 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x14, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:17 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x227f, 0x0) [ 284.012730][T10934] do_blk_trace_setup+0x351/0xb30 [ 284.017822][T10934] ? _copy_from_user+0x13c/0x1a0 [ 284.022778][T10934] __blk_trace_setup+0xca/0x180 [ 284.027653][T10934] ? do_blk_trace_setup+0xb30/0xb30 [ 284.032882][T10934] blk_trace_setup+0x43/0x60 [ 284.037489][T10934] sg_ioctl_common+0x2f8/0x2720 [ 284.042365][T10934] ? do_vfs_ioctl+0x50c/0x1360 [ 284.047160][T10934] ? sg_new_write.isra.0+0x880/0x880 [ 284.055816][T10934] ? ioctl_file_clone+0x180/0x180 [ 284.060868][T10934] ? __fget_files+0x32f/0x500 [ 284.065564][T10934] ? ksys_dup3+0x3c0/0x3c0 [ 284.069997][T10934] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 284.075997][T10934] ? __sched_text_start+0x8/0x8 [ 284.080873][T10934] sg_ioctl+0x8f/0x120 [ 284.084952][T10934] ? sg_compat_ioctl+0x120/0x120 [ 284.089911][T10934] ksys_ioctl+0x11a/0x180 [ 284.094362][T10934] __x64_sys_ioctl+0x6f/0xb0 [ 284.098980][T10934] ? lockdep_hardirqs_on+0x463/0x620 [ 284.104285][T10934] do_syscall_64+0xf6/0x7d0 [ 284.108812][T10934] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 284.114722][T10934] RIP: 0033:0x45c829 [ 284.118629][T10934] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.138257][T10934] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.146692][T10934] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 284.154680][T10934] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 284.162800][T10934] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 284.171138][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 284.179121][T10934] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:18 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:18 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:18 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:18 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2282, 0x0) 03:03:18 executing program 1 (fault-call:6 fault-nth:9): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:18 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:18 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 284.734408][T10962] FAULT_INJECTION: forcing a failure. [ 284.734408][T10962] name failslab, interval 1, probability 0, space 0, times 0 03:03:18 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc0, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:18 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2283, 0x0) [ 284.798490][T10962] CPU: 0 PID: 10962 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 284.807407][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.817585][T10962] Call Trace: [ 284.820911][T10962] dump_stack+0x188/0x20d [ 284.825322][T10962] should_fail.cold+0x5/0xa [ 284.829868][T10962] ? fault_create_debugfs_attr+0x140/0x140 [ 284.835727][T10962] should_failslab+0x5/0xf [ 284.840279][T10962] kmem_cache_alloc+0x29b/0x740 [ 284.845169][T10962] ? find_held_lock+0x2d/0x110 [ 284.850933][T10962] ? print_usage_bug+0x240/0x240 [ 284.855924][T10962] ? psi_task_switch+0x183/0x410 [ 284.860914][T10962] __d_alloc+0x2b/0x8e0 [ 284.865102][T10962] d_alloc+0x4a/0x240 [ 284.869122][T10962] d_alloc_parallel+0xe8/0x1b10 [ 284.874019][T10962] ? mark_lock+0x12b/0xf10 [ 284.878498][T10962] ? __d_lookup_rcu+0x6c0/0x6c0 [ 284.883374][T10962] ? lockdep_init_map_waits+0x26a/0x890 [ 284.888942][T10962] ? lockdep_init_map_waits+0x26a/0x890 [ 284.894511][T10962] ? __raw_spin_lock_init+0x34/0x100 [ 284.899857][T10962] __lookup_slow+0x193/0x490 [ 284.904475][T10962] ? vfs_rmdir+0x500/0x500 [ 284.908924][T10962] ? print_usage_bug+0x240/0x240 [ 284.913903][T10962] ? d_lookup+0x18f/0x250 [ 284.918267][T10962] lookup_one_len+0x163/0x190 [ 284.923426][T10962] ? __lookup_slow+0x490/0x490 [ 284.928214][T10962] ? __down_timeout+0x2d0/0x2d0 [ 284.933230][T10962] ? do_raw_spin_unlock+0x171/0x260 [ 284.938448][T10962] ? mntput+0xc/0x90 [ 284.942364][T10962] start_creating+0x12b/0x250 [ 284.947070][T10962] __debugfs_create_file+0x62/0x400 [ 284.952297][T10962] do_blk_trace_setup+0x351/0xb30 [ 284.957364][T10962] ? _copy_from_user+0x13c/0x1a0 [ 284.962325][T10962] __blk_trace_setup+0xca/0x180 [ 284.967217][T10962] ? do_blk_trace_setup+0xb30/0xb30 [ 284.972452][T10962] blk_trace_setup+0x43/0x60 [ 284.977066][T10962] sg_ioctl_common+0x2f8/0x2720 [ 284.981967][T10962] ? do_vfs_ioctl+0x50c/0x1360 [ 284.986749][T10962] ? sg_new_write.isra.0+0x880/0x880 [ 284.992064][T10962] ? ioctl_file_clone+0x180/0x180 [ 284.997115][T10962] ? __fget_files+0x32f/0x500 [ 285.001820][T10962] ? ksys_dup3+0x3c0/0x3c0 [ 285.006260][T10962] ? __sb_end_write+0x101/0x1d0 [ 285.011132][T10962] ? vfs_write+0x161/0x5d0 [ 285.015585][T10962] sg_ioctl+0x8f/0x120 [ 285.019783][T10962] ? sg_compat_ioctl+0x120/0x120 [ 285.024757][T10962] ksys_ioctl+0x11a/0x180 [ 285.029121][T10962] __x64_sys_ioctl+0x6f/0xb0 [ 285.033732][T10962] ? lockdep_hardirqs_on+0x463/0x620 [ 285.039151][T10962] do_syscall_64+0xf6/0x7d0 [ 285.043691][T10962] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 285.049616][T10962] RIP: 0033:0x45c829 [ 285.053538][T10962] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.073166][T10962] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.081604][T10962] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 285.089739][T10962] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 285.097747][T10962] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 285.105737][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 285.113733][T10962] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:19 executing program 1 (fault-call:6 fault-nth:10): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:19 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x801, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2284, 0x0) 03:03:19 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 285.384523][T10976] FAULT_INJECTION: forcing a failure. [ 285.384523][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 285.423790][T10976] CPU: 0 PID: 10976 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 285.432518][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.442603][T10976] Call Trace: [ 285.445923][T10976] dump_stack+0x188/0x20d [ 285.450281][T10976] should_fail.cold+0x5/0xa [ 285.454804][T10976] ? fault_create_debugfs_attr+0x140/0x140 [ 285.460652][T10976] should_failslab+0x5/0xf [ 285.465272][T10976] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 285.470671][T10976] relay_open+0xb3/0x9f0 [ 285.474930][T10976] ? __debugfs_create_file+0x31f/0x400 [ 285.480407][T10976] do_blk_trace_setup+0x3de/0xb30 [ 285.485466][T10976] ? _copy_from_user+0x13c/0x1a0 [ 285.490425][T10976] __blk_trace_setup+0xca/0x180 [ 285.495297][T10976] ? do_blk_trace_setup+0xb30/0xb30 [ 285.500621][T10976] blk_trace_setup+0x43/0x60 [ 285.505233][T10976] sg_ioctl_common+0x2f8/0x2720 [ 285.510111][T10976] ? do_vfs_ioctl+0x50c/0x1360 [ 285.515009][T10976] ? sg_new_write.isra.0+0x880/0x880 [ 285.520333][T10976] ? ioctl_file_clone+0x180/0x180 [ 285.525377][T10976] ? __fget_files+0x32f/0x500 [ 285.530077][T10976] ? ksys_dup3+0x3c0/0x3c0 [ 285.534500][T10976] ? __sb_end_write+0x101/0x1d0 [ 285.539365][T10976] ? vfs_write+0x161/0x5d0 [ 285.543803][T10976] sg_ioctl+0x8f/0x120 [ 285.547888][T10976] ? sg_compat_ioctl+0x120/0x120 [ 285.552838][T10976] ksys_ioctl+0x11a/0x180 [ 285.557204][T10976] __x64_sys_ioctl+0x6f/0xb0 [ 285.561811][T10976] ? lockdep_hardirqs_on+0x463/0x620 [ 285.567114][T10976] do_syscall_64+0xf6/0x7d0 [ 285.571739][T10976] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 285.577644][T10976] RIP: 0033:0x45c829 [ 285.581550][T10976] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.601394][T10976] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.609831][T10976] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 285.617818][T10976] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 285.625808][T10976] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 285.634162][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 285.642149][T10976] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:19 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2285, 0x0) 03:03:19 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20000110, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:19 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:19 executing program 1 (fault-call:6 fault-nth:11): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:19 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2286, 0x0) [ 285.894599][T10994] FAULT_INJECTION: forcing a failure. [ 285.894599][T10994] name failslab, interval 1, probability 0, space 0, times 0 [ 285.956406][T10994] CPU: 0 PID: 10994 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 285.965134][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.975299][T10994] Call Trace: [ 285.978629][T10994] dump_stack+0x188/0x20d [ 285.982983][T10994] should_fail.cold+0x5/0xa [ 285.987515][T10994] ? fault_create_debugfs_attr+0x140/0x140 [ 285.993366][T10994] should_failslab+0x5/0xf [ 285.997796][T10994] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 286.003187][T10994] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 286.009194][T10994] relay_open_buf.part.0+0x91/0xbe0 [ 286.014435][T10994] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 286.020351][T10994] relay_open+0x529/0x9f0 [ 286.024730][T10994] do_blk_trace_setup+0x3de/0xb30 [ 286.029770][T10994] ? _copy_from_user+0x13c/0x1a0 [ 286.034730][T10994] __blk_trace_setup+0xca/0x180 [ 286.039593][T10994] ? do_blk_trace_setup+0xb30/0xb30 [ 286.044855][T10994] blk_trace_setup+0x43/0x60 [ 286.049550][T10994] sg_ioctl_common+0x2f8/0x2720 03:03:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2287, 0x0) [ 286.054416][T10994] ? do_vfs_ioctl+0x50c/0x1360 [ 286.059200][T10994] ? sg_new_write.isra.0+0x880/0x880 [ 286.064527][T10994] ? ioctl_file_clone+0x180/0x180 [ 286.069574][T10994] ? __fget_files+0x32f/0x500 [ 286.074272][T10994] ? ksys_dup3+0x3c0/0x3c0 [ 286.078704][T10994] ? __sb_end_write+0x101/0x1d0 [ 286.083577][T10994] ? vfs_write+0x161/0x5d0 [ 286.088013][T10994] sg_ioctl+0x8f/0x120 [ 286.092099][T10994] ? sg_compat_ioctl+0x120/0x120 [ 286.097086][T10994] ksys_ioctl+0x11a/0x180 [ 286.101457][T10994] __x64_sys_ioctl+0x6f/0xb0 [ 286.106089][T10994] ? lockdep_hardirqs_on+0x463/0x620 [ 286.111405][T10994] do_syscall_64+0xf6/0x7d0 [ 286.115927][T10994] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 286.121929][T10994] RIP: 0033:0x45c829 [ 286.125921][T10994] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.145543][T10994] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:03:20 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2288, 0x0) 03:03:20 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20000550, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 286.153978][T10994] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 286.161968][T10994] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 286.169955][T10994] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 286.177952][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 286.185943][T10994] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:20 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x2289, 0x0) 03:03:20 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="10", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:20 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:20 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:20 executing program 1 (fault-call:6 fault-nth:12): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:20 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x4b34, 0x0) 03:03:20 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="b9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:20 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 286.644899][T11015] FAULT_INJECTION: forcing a failure. [ 286.644899][T11015] name failslab, interval 1, probability 0, space 0, times 0 [ 286.700775][T11015] CPU: 1 PID: 11015 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 286.709508][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.719596][T11015] Call Trace: [ 286.722915][T11015] dump_stack+0x188/0x20d [ 286.727275][T11015] should_fail.cold+0x5/0xa [ 286.731805][T11015] ? fault_create_debugfs_attr+0x140/0x140 [ 286.737638][T11015] should_failslab+0x5/0xf [ 286.744192][T11015] __kmalloc+0x2d9/0x7a0 [ 286.748460][T11015] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 286.754017][T11015] ? relay_open_buf.part.0+0xfc/0xbe0 [ 286.759404][T11015] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 286.765412][T11015] relay_open_buf.part.0+0xfc/0xbe0 [ 286.770632][T11015] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 286.776552][T11015] relay_open+0x529/0x9f0 [ 286.780913][T11015] do_blk_trace_setup+0x3de/0xb30 [ 286.785971][T11015] ? _copy_from_user+0x13c/0x1a0 [ 286.790918][T11015] __blk_trace_setup+0xca/0x180 [ 286.795774][T11015] ? do_blk_trace_setup+0xb30/0xb30 [ 286.800992][T11015] blk_trace_setup+0x43/0x60 [ 286.805587][T11015] sg_ioctl_common+0x2f8/0x2720 [ 286.810454][T11015] ? do_vfs_ioctl+0x50c/0x1360 [ 286.815227][T11015] ? sg_new_write.isra.0+0x880/0x880 [ 286.820540][T11015] ? ioctl_file_clone+0x180/0x180 [ 286.825577][T11015] ? __fget_files+0x32f/0x500 [ 286.830277][T11015] ? ksys_dup3+0x3c0/0x3c0 [ 286.834692][T11015] ? __sb_end_write+0x101/0x1d0 [ 286.839549][T11015] ? vfs_write+0x161/0x5d0 [ 286.843985][T11015] sg_ioctl+0x8f/0x120 [ 286.848059][T11015] ? sg_compat_ioctl+0x120/0x120 [ 286.853114][T11015] ksys_ioctl+0x11a/0x180 [ 286.857455][T11015] __x64_sys_ioctl+0x6f/0xb0 [ 286.862050][T11015] ? lockdep_hardirqs_on+0x463/0x620 [ 286.867360][T11015] do_syscall_64+0xf6/0x7d0 [ 286.871874][T11015] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 286.877769][T11015] RIP: 0033:0x45c829 [ 286.881664][T11015] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:03:20 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 286.901299][T11015] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.909740][T11015] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 286.917739][T11015] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 286.925743][T11015] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 286.933748][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 286.941758][T11015] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:20 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x4c01, 0x0) 03:03:20 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:21 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5382, 0x0) 03:03:21 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:21 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:21 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:21 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x0) 03:03:21 executing program 1 (fault-call:6 fault-nth:13): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:21 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:21 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:21 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:21 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5386, 0x0) 03:03:21 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:21 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x7}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:21 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x541b, 0x0) [ 287.684210][T11054] FAULT_INJECTION: forcing a failure. [ 287.684210][T11054] name failslab, interval 1, probability 0, space 0, times 0 [ 287.739704][T11054] CPU: 1 PID: 11054 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 287.748455][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.758530][T11054] Call Trace: [ 287.761852][T11054] dump_stack+0x188/0x20d [ 287.766231][T11054] should_fail.cold+0x5/0xa [ 287.770763][T11054] ? fault_create_debugfs_attr+0x140/0x140 [ 287.776615][T11054] should_failslab+0x5/0xf [ 287.781046][T11054] __kmalloc+0x2d9/0x7a0 [ 287.785302][T11054] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 287.790865][T11054] ? relay_open_buf.part.0+0xfc/0xbe0 [ 287.796254][T11054] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 287.803400][T11054] relay_open_buf.part.0+0xfc/0xbe0 [ 287.808624][T11054] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 287.814544][T11054] relay_open+0x529/0x9f0 [ 287.818892][T11054] do_blk_trace_setup+0x3de/0xb30 [ 287.823930][T11054] ? _copy_from_user+0x13c/0x1a0 [ 287.828881][T11054] __blk_trace_setup+0xca/0x180 [ 287.833747][T11054] ? do_blk_trace_setup+0xb30/0xb30 [ 287.838977][T11054] blk_trace_setup+0x43/0x60 [ 287.844543][T11054] sg_ioctl_common+0x2f8/0x2720 [ 287.849421][T11054] ? do_vfs_ioctl+0x50c/0x1360 [ 287.854203][T11054] ? sg_new_write.isra.0+0x880/0x880 [ 287.859504][T11054] ? ioctl_file_clone+0x180/0x180 [ 287.864575][T11054] ? __fget_files+0x32f/0x500 [ 287.869284][T11054] ? ksys_dup3+0x3c0/0x3c0 [ 287.873718][T11054] ? __sb_end_write+0x101/0x1d0 [ 287.878594][T11054] ? vfs_write+0x161/0x5d0 [ 287.883079][T11054] sg_ioctl+0x8f/0x120 [ 287.887187][T11054] ? sg_compat_ioctl+0x120/0x120 [ 287.892198][T11054] ksys_ioctl+0x11a/0x180 [ 287.896596][T11054] __x64_sys_ioctl+0x6f/0xb0 [ 287.901210][T11054] ? lockdep_hardirqs_on+0x463/0x620 [ 287.906517][T11054] do_syscall_64+0xf6/0x7d0 [ 287.911051][T11054] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.916958][T11054] RIP: 0033:0x45c829 [ 287.920862][T11054] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:03:21 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 287.940589][T11054] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.949019][T11054] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 287.957012][T11054] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 287.965008][T11054] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 287.973008][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 287.981011][T11054] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:21 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x9}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:22 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:22 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5421, 0x0) 03:03:22 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0xa}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:22 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:22 executing program 1 (fault-call:6 fault-nth:14): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:22 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016000400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 288.625435][T11079] FAULT_INJECTION: forcing a failure. [ 288.625435][T11079] name failslab, interval 1, probability 0, space 0, times 0 [ 288.679115][T11079] CPU: 1 PID: 11079 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 288.687851][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.697932][T11079] Call Trace: [ 288.701262][T11079] dump_stack+0x188/0x20d [ 288.705724][T11079] should_fail.cold+0x5/0xa [ 288.710269][T11079] ? fault_create_debugfs_attr+0x140/0x140 [ 288.716122][T11079] should_failslab+0x5/0xf [ 288.720568][T11079] __kmalloc+0x2d9/0x7a0 [ 288.724872][T11079] ? relay_open_buf.part.0+0x1b3/0xbe0 [ 288.730362][T11079] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 288.736381][T11079] relay_open_buf.part.0+0x1b3/0xbe0 [ 288.741718][T11079] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 288.747650][T11079] relay_open+0x529/0x9f0 [ 288.752038][T11079] do_blk_trace_setup+0x3de/0xb30 [ 288.757215][T11079] ? _copy_from_user+0x13c/0x1a0 [ 288.762188][T11079] __blk_trace_setup+0xca/0x180 [ 288.767093][T11079] ? do_blk_trace_setup+0xb30/0xb30 [ 288.772461][T11079] blk_trace_setup+0x43/0x60 [ 288.777176][T11079] sg_ioctl_common+0x2f8/0x2720 [ 288.782052][T11079] ? do_vfs_ioctl+0x50c/0x1360 [ 288.786854][T11079] ? sg_new_write.isra.0+0x880/0x880 [ 288.792160][T11079] ? ioctl_file_clone+0x180/0x180 [ 288.797217][T11079] ? __fget_files+0x32f/0x500 [ 288.801923][T11079] ? ksys_dup3+0x3c0/0x3c0 [ 288.806353][T11079] ? __sb_end_write+0x101/0x1d0 [ 288.811928][T11079] ? vfs_write+0x161/0x5d0 [ 288.816396][T11079] sg_ioctl+0x8f/0x120 [ 288.820488][T11079] ? sg_compat_ioctl+0x120/0x120 [ 288.825462][T11079] ksys_ioctl+0x11a/0x180 [ 288.829836][T11079] __x64_sys_ioctl+0x6f/0xb0 [ 288.834464][T11079] ? lockdep_hardirqs_on+0x463/0x620 [ 288.839774][T11079] do_syscall_64+0xf6/0x7d0 [ 288.844303][T11079] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 288.850220][T11079] RIP: 0033:0x45c829 [ 288.854132][T11079] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:03:22 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5450, 0x0) 03:03:22 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:22 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:22 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0xb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 288.873931][T11079] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.882372][T11079] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 288.890364][T11079] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 288.898540][T11079] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.906538][T11079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 288.914528][T11079] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:22 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5451, 0x0) 03:03:23 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0xc}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:23 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:23 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5452, 0x0) 03:03:23 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0xd}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:23 executing program 1 (fault-call:6 fault-nth:15): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:23 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:23 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x5460, 0x0) [ 289.385984][T11112] FAULT_INJECTION: forcing a failure. [ 289.385984][T11112] name failslab, interval 1, probability 0, space 0, times 0 03:03:23 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 289.438332][T11112] CPU: 0 PID: 11112 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 289.447067][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.457151][T11112] Call Trace: [ 289.460604][T11112] dump_stack+0x188/0x20d [ 289.464975][T11112] should_fail.cold+0x5/0xa [ 289.469522][T11112] ? fault_create_debugfs_attr+0x140/0x140 [ 289.475378][T11112] should_failslab+0x5/0xf [ 289.481506][T11112] kmem_cache_alloc_node_trace+0x27c/0x790 [ 289.487368][T11112] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 289.494208][T11112] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 289.500237][T11112] __get_vm_area_node+0x126/0x3b0 [ 289.505300][T11112] vmap+0xb2/0x170 [ 289.509045][T11112] ? relay_open_buf.part.0+0x4b1/0xbe0 [ 289.514542][T11112] relay_open_buf.part.0+0x4b1/0xbe0 [ 289.519862][T11112] relay_open+0x529/0x9f0 [ 289.524223][T11112] do_blk_trace_setup+0x3de/0xb30 [ 289.529273][T11112] ? _copy_from_user+0x13c/0x1a0 [ 289.534254][T11112] __blk_trace_setup+0xca/0x180 [ 289.539140][T11112] ? do_blk_trace_setup+0xb30/0xb30 [ 289.544495][T11112] blk_trace_setup+0x43/0x60 [ 289.549398][T11112] sg_ioctl_common+0x2f8/0x2720 [ 289.554273][T11112] ? do_vfs_ioctl+0x50c/0x1360 [ 289.559065][T11112] ? sg_new_write.isra.0+0x880/0x880 [ 289.564371][T11112] ? ioctl_file_clone+0x180/0x180 [ 289.569442][T11112] ? __fget_files+0x32f/0x500 [ 289.574154][T11112] ? ksys_dup3+0x3c0/0x3c0 [ 289.578593][T11112] ? __sb_end_write+0x101/0x1d0 [ 289.583493][T11112] ? vfs_write+0x161/0x5d0 [ 289.587970][T11112] sg_ioctl+0x8f/0x120 [ 289.592070][T11112] ? sg_compat_ioctl+0x120/0x120 [ 289.597224][T11112] ksys_ioctl+0x11a/0x180 [ 289.601632][T11112] __x64_sys_ioctl+0x6f/0xb0 [ 289.606266][T11112] ? lockdep_hardirqs_on+0x463/0x620 [ 289.611705][T11112] do_syscall_64+0xf6/0x7d0 [ 289.616259][T11112] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 289.622181][T11112] RIP: 0033:0x45c829 [ 289.626100][T11112] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.646854][T11112] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.655387][T11112] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 289.664358][T11112] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 289.672451][T11112] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 289.680554][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 03:03:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:23 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:23 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x6364, 0x0) [ 289.688552][T11112] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:23 executing program 1 (fault-call:6 fault-nth:16): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:23 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 289.914115][T11132] FAULT_INJECTION: forcing a failure. [ 289.914115][T11132] name failslab, interval 1, probability 0, space 0, times 0 [ 289.942260][T11132] CPU: 0 PID: 11132 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 289.951260][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.961342][T11132] Call Trace: [ 289.964681][T11132] dump_stack+0x188/0x20d [ 289.969077][T11132] should_fail.cold+0x5/0xa [ 289.973649][T11132] ? fault_create_debugfs_attr+0x140/0x140 [ 289.979512][T11132] should_failslab+0x5/0xf [ 289.983966][T11132] kmem_cache_alloc_node_trace+0x27c/0x790 [ 289.989807][T11132] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 289.996599][T11132] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 290.002614][T11132] __get_vm_area_node+0x126/0x3b0 [ 290.007660][T11132] vmap+0xb2/0x170 [ 290.011398][T11132] ? relay_open_buf.part.0+0x4b1/0xbe0 [ 290.016912][T11132] relay_open_buf.part.0+0x4b1/0xbe0 [ 290.022231][T11132] relay_open+0x529/0x9f0 [ 290.026594][T11132] do_blk_trace_setup+0x3de/0xb30 [ 290.031657][T11132] ? _copy_from_user+0x13c/0x1a0 [ 290.036674][T11132] __blk_trace_setup+0xca/0x180 [ 290.041558][T11132] ? do_blk_trace_setup+0xb30/0xb30 [ 290.046811][T11132] blk_trace_setup+0x43/0x60 [ 290.051436][T11132] sg_ioctl_common+0x2f8/0x2720 [ 290.056336][T11132] ? do_vfs_ioctl+0x50c/0x1360 [ 290.061126][T11132] ? sg_new_write.isra.0+0x880/0x880 [ 290.066459][T11132] ? ioctl_file_clone+0x180/0x180 [ 290.071548][T11132] ? __fget_files+0x32f/0x500 [ 290.076250][T11132] ? ksys_dup3+0x3c0/0x3c0 [ 290.080718][T11132] ? __sb_end_write+0x101/0x1d0 [ 290.085600][T11132] ? vfs_write+0x161/0x5d0 [ 290.090207][T11132] sg_ioctl+0x8f/0x120 [ 290.094820][T11132] ? sg_compat_ioctl+0x120/0x120 [ 290.099815][T11132] ksys_ioctl+0x11a/0x180 [ 290.104174][T11132] __x64_sys_ioctl+0x6f/0xb0 [ 290.108793][T11132] ? lockdep_hardirqs_on+0x463/0x620 [ 290.114108][T11132] do_syscall_64+0xf6/0x7d0 [ 290.118664][T11132] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 290.125159][T11132] RIP: 0033:0x45c829 [ 290.129074][T11132] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.149022][T11132] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.158441][T11132] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 290.166433][T11132] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 290.174477][T11132] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 290.182474][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 290.190513][T11132] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:24 executing program 1 (fault-call:6 fault-nth:17): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:24 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0xf}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:24 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:24 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x890b, 0x0) 03:03:24 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:24 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:24 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x8912, 0x0) 03:03:24 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x10}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 290.455451][T11151] FAULT_INJECTION: forcing a failure. [ 290.455451][T11151] name failslab, interval 1, probability 0, space 0, times 0 [ 290.506777][T11151] CPU: 0 PID: 11151 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 290.515533][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.525772][T11151] Call Trace: [ 290.529111][T11151] dump_stack+0x188/0x20d [ 290.533480][T11151] should_fail.cold+0x5/0xa [ 290.538026][T11151] ? fault_create_debugfs_attr+0x140/0x140 [ 290.543877][T11151] should_failslab+0x5/0xf [ 290.548326][T11151] kmem_cache_alloc_node+0x25c/0x760 03:03:24 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x11}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 290.553744][T11151] ? mark_lock+0x12b/0xf10 [ 290.558199][T11151] alloc_vmap_area+0xb72/0x1e20 [ 290.563345][T11151] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 290.569181][T11151] ? purge_vmap_area_lazy+0x40/0x40 [ 290.574406][T11151] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 290.581198][T11151] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 290.587224][T11151] __get_vm_area_node+0x178/0x3b0 [ 290.592302][T11151] vmap+0xb2/0x170 [ 290.596047][T11151] ? relay_open_buf.part.0+0x4b1/0xbe0 [ 290.601530][T11151] relay_open_buf.part.0+0x4b1/0xbe0 [ 290.606854][T11151] relay_open+0x529/0x9f0 [ 290.611737][T11151] do_blk_trace_setup+0x3de/0xb30 [ 290.616789][T11151] ? _copy_from_user+0x13c/0x1a0 [ 290.621789][T11151] __blk_trace_setup+0xca/0x180 [ 290.626668][T11151] ? do_blk_trace_setup+0xb30/0xb30 [ 290.631914][T11151] blk_trace_setup+0x43/0x60 [ 290.636543][T11151] sg_ioctl_common+0x2f8/0x2720 [ 290.641690][T11151] ? do_vfs_ioctl+0x50c/0x1360 [ 290.647037][T11151] ? sg_new_write.isra.0+0x880/0x880 [ 290.652365][T11151] ? ioctl_file_clone+0x180/0x180 [ 290.657439][T11151] ? __fget_files+0x32f/0x500 [ 290.662145][T11151] ? ksys_dup3+0x3c0/0x3c0 [ 290.666584][T11151] ? __sb_end_write+0x101/0x1d0 [ 290.671642][T11151] ? vfs_write+0x161/0x5d0 [ 290.676087][T11151] sg_ioctl+0x8f/0x120 [ 290.680176][T11151] ? sg_compat_ioctl+0x120/0x120 [ 290.685569][T11151] ksys_ioctl+0x11a/0x180 [ 290.689940][T11151] __x64_sys_ioctl+0x6f/0xb0 [ 290.694556][T11151] ? lockdep_hardirqs_on+0x463/0x620 [ 290.699960][T11151] do_syscall_64+0xf6/0x7d0 03:03:24 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x12}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 290.704492][T11151] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 290.710423][T11151] RIP: 0033:0x45c829 [ 290.714436][T11151] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.734135][T11151] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.742595][T11151] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 290.750632][T11151] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 290.758629][T11151] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 290.766640][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 290.774643][T11151] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:24 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:24 executing program 1 (fault-call:6 fault-nth:18): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:24 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x8919, 0x0) [ 291.199622][T11170] FAULT_INJECTION: forcing a failure. [ 291.199622][T11170] name failslab, interval 1, probability 0, space 0, times 0 [ 291.212934][T11170] CPU: 1 PID: 11170 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 291.221637][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.231953][T11170] Call Trace: [ 291.235285][T11170] dump_stack+0x188/0x20d [ 291.239638][T11170] should_fail.cold+0x5/0xa [ 291.245310][T11170] ? fault_create_debugfs_attr+0x140/0x140 [ 291.251168][T11170] should_failslab+0x5/0xf [ 291.255645][T11170] kmem_cache_alloc+0x29b/0x740 [ 291.260711][T11170] ? print_usage_bug+0x240/0x240 [ 291.265722][T11170] __d_alloc+0x2b/0x8e0 [ 291.269928][T11170] d_alloc+0x4a/0x240 [ 291.273935][T11170] d_alloc_parallel+0xe8/0x1b10 [ 291.278910][T11170] ? __lock_acquire+0x2184/0x4c50 [ 291.283956][T11170] ? __d_lookup_rcu+0x6c0/0x6c0 [ 291.288854][T11170] ? lockdep_init_map_waits+0x26a/0x890 [ 291.294423][T11170] ? lockdep_init_map_waits+0x26a/0x890 [ 291.300070][T11170] ? __raw_spin_lock_init+0x34/0x100 [ 291.305385][T11170] __lookup_slow+0x193/0x490 [ 291.309999][T11170] ? vfs_rmdir+0x500/0x500 [ 291.314440][T11170] ? print_usage_bug+0x240/0x240 [ 291.319504][T11170] ? d_lookup+0x18f/0x250 [ 291.323855][T11170] lookup_one_len+0x163/0x190 [ 291.328555][T11170] ? __lookup_slow+0x490/0x490 [ 291.333345][T11170] ? __down_timeout+0x2d0/0x2d0 [ 291.338325][T11170] ? do_raw_spin_unlock+0x171/0x260 [ 291.343548][T11170] ? mntput+0xc/0x90 [ 291.347471][T11170] start_creating+0x12b/0x250 [ 291.352196][T11170] __debugfs_create_file+0x62/0x400 [ 291.357415][T11170] ? blk_trace_remove+0x40/0x40 [ 291.362295][T11170] relay_create_buf_file+0xf0/0x170 [ 291.367518][T11170] relay_open_buf.part.0+0x7ba/0xbe0 [ 291.372823][T11170] relay_open+0x529/0x9f0 [ 291.377179][T11170] do_blk_trace_setup+0x3de/0xb30 [ 291.382221][T11170] ? _copy_from_user+0x13c/0x1a0 [ 291.387195][T11170] __blk_trace_setup+0xca/0x180 [ 291.392080][T11170] ? do_blk_trace_setup+0xb30/0xb30 [ 291.397325][T11170] blk_trace_setup+0x43/0x60 [ 291.401949][T11170] sg_ioctl_common+0x2f8/0x2720 [ 291.406830][T11170] ? do_vfs_ioctl+0x50c/0x1360 [ 291.412253][T11170] ? sg_new_write.isra.0+0x880/0x880 [ 291.417558][T11170] ? ioctl_file_clone+0x180/0x180 [ 291.422644][T11170] ? __fget_files+0x32f/0x500 [ 291.427345][T11170] ? ksys_dup3+0x3c0/0x3c0 [ 291.431901][T11170] ? vfs_write+0x161/0x5d0 [ 291.436362][T11170] sg_ioctl+0x8f/0x120 [ 291.440685][T11170] ? sg_compat_ioctl+0x120/0x120 [ 291.445671][T11170] ksys_ioctl+0x11a/0x180 [ 291.450560][T11170] __x64_sys_ioctl+0x6f/0xb0 [ 291.455165][T11170] ? lockdep_hardirqs_on+0x463/0x620 [ 291.460467][T11170] do_syscall_64+0xf6/0x7d0 [ 291.465002][T11170] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.470905][T11170] RIP: 0033:0x45c829 [ 291.474807][T11170] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:03:25 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:25 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x14}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:25 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x8933, 0x0) 03:03:25 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:25 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 291.494431][T11170] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.502863][T11170] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 291.510848][T11170] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 291.518924][T11170] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 291.526955][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 291.535125][T11170] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:25 executing program 1 (fault-call:6 fault-nth:19): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:25 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x15}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:25 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:25 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x8946, 0x0) [ 291.701134][T11187] FAULT_INJECTION: forcing a failure. [ 291.701134][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 291.736983][T11187] CPU: 1 PID: 11187 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 291.745733][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.755897][T11187] Call Trace: [ 291.759217][T11187] dump_stack+0x188/0x20d [ 291.763579][T11187] should_fail.cold+0x5/0xa [ 291.768130][T11187] ? fault_create_debugfs_attr+0x140/0x140 [ 291.774005][T11187] should_failslab+0x5/0xf [ 291.778438][T11187] kmem_cache_alloc+0x29b/0x740 [ 291.783312][T11187] ? lookup_one_len+0x102/0x190 [ 291.788197][T11187] ? __lookup_slow+0x490/0x490 [ 291.792976][T11187] ? __down_timeout+0x2d0/0x2d0 [ 291.797872][T11187] alloc_inode+0x164/0x1e0 [ 291.802339][T11187] new_inode_pseudo+0x14/0xe0 [ 291.807037][T11187] new_inode+0x1b/0x40 [ 291.811131][T11187] debugfs_get_inode+0x1a/0x130 [ 291.815999][T11187] __debugfs_create_file+0xb6/0x400 [ 291.821213][T11187] ? blk_trace_remove+0x40/0x40 [ 291.826106][T11187] relay_create_buf_file+0xf0/0x170 [ 291.831329][T11187] relay_open_buf.part.0+0x7ba/0xbe0 [ 291.836645][T11187] relay_open+0x529/0x9f0 [ 291.841019][T11187] do_blk_trace_setup+0x3de/0xb30 [ 291.846098][T11187] ? _copy_from_user+0x13c/0x1a0 [ 291.851501][T11187] __blk_trace_setup+0xca/0x180 [ 291.856384][T11187] ? do_blk_trace_setup+0xb30/0xb30 [ 291.861756][T11187] blk_trace_setup+0x43/0x60 [ 291.866376][T11187] sg_ioctl_common+0x2f8/0x2720 [ 291.871795][T11187] ? do_vfs_ioctl+0x50c/0x1360 [ 291.876609][T11187] ? sg_new_write.isra.0+0x880/0x880 [ 291.881935][T11187] ? ioctl_file_clone+0x180/0x180 [ 291.886981][T11187] ? __fget_files+0x32f/0x500 [ 291.891695][T11187] ? ksys_dup3+0x3c0/0x3c0 [ 291.896143][T11187] ? vfs_write+0x161/0x5d0 [ 291.900744][T11187] sg_ioctl+0x8f/0x120 [ 291.904922][T11187] ? sg_compat_ioctl+0x120/0x120 [ 291.909901][T11187] ksys_ioctl+0x11a/0x180 [ 291.914256][T11187] __x64_sys_ioctl+0x6f/0xb0 [ 291.918865][T11187] ? lockdep_hardirqs_on+0x463/0x620 [ 291.924201][T11187] do_syscall_64+0xf6/0x7d0 [ 291.928734][T11187] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.934647][T11187] RIP: 0033:0x45c829 [ 291.938669][T11187] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.958306][T11187] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.966765][T11187] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 291.974759][T11187] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 291.982755][T11187] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 291.990758][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 03:03:25 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x16}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 291.998832][T11187] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:26 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x8982, 0x0) [ 292.073518][T11187] debugfs: out of free dentries, can not create file 'trace0' 03:03:26 executing program 1 (fault-call:6 fault-nth:20): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 292.226808][T11205] FAULT_INJECTION: forcing a failure. [ 292.226808][T11205] name failslab, interval 1, probability 0, space 0, times 0 [ 292.240916][T11205] CPU: 1 PID: 11205 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 292.249626][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.259732][T11205] Call Trace: [ 292.263152][T11205] dump_stack+0x188/0x20d [ 292.267518][T11205] should_fail.cold+0x5/0xa [ 292.272239][T11205] ? fault_create_debugfs_attr+0x140/0x140 [ 292.278085][T11205] should_failslab+0x5/0xf [ 292.282543][T11205] kmem_cache_alloc+0x29b/0x740 [ 292.287453][T11205] ? print_usage_bug+0x240/0x240 [ 292.292453][T11205] __d_alloc+0x2b/0x8e0 [ 292.296648][T11205] d_alloc+0x4a/0x240 [ 292.300650][T11205] d_alloc_parallel+0xe8/0x1b10 [ 292.305535][T11205] ? __lock_acquire+0x2184/0x4c50 [ 292.310585][T11205] ? __d_lookup_rcu+0x6c0/0x6c0 [ 292.315460][T11205] ? lockdep_init_map_waits+0x26a/0x890 [ 292.321026][T11205] ? lockdep_init_map_waits+0x26a/0x890 [ 292.326596][T11205] ? __raw_spin_lock_init+0x34/0x100 [ 292.331928][T11205] __lookup_slow+0x193/0x490 [ 292.336560][T11205] ? vfs_rmdir+0x500/0x500 [ 292.341009][T11205] ? print_usage_bug+0x240/0x240 [ 292.345984][T11205] ? d_lookup+0x18f/0x250 [ 292.350340][T11205] lookup_one_len+0x163/0x190 [ 292.355054][T11205] ? __lookup_slow+0x490/0x490 [ 292.359845][T11205] ? __down_timeout+0x2d0/0x2d0 [ 292.364759][T11205] ? do_raw_spin_unlock+0x171/0x260 [ 292.369995][T11205] ? mntput+0xc/0x90 [ 292.373951][T11205] start_creating+0x12b/0x250 [ 292.378848][T11205] __debugfs_create_file+0x62/0x400 [ 292.384082][T11205] ? blk_trace_remove+0x40/0x40 [ 292.388960][T11205] relay_create_buf_file+0xf0/0x170 [ 292.394197][T11205] relay_open_buf.part.0+0x7ba/0xbe0 [ 292.399513][T11205] relay_open+0x529/0x9f0 [ 292.403877][T11205] do_blk_trace_setup+0x3de/0xb30 [ 292.408921][T11205] ? _copy_from_user+0x13c/0x1a0 [ 292.413894][T11205] __blk_trace_setup+0xca/0x180 [ 292.418777][T11205] ? do_blk_trace_setup+0xb30/0xb30 [ 292.424708][T11205] blk_trace_setup+0x43/0x60 [ 292.429341][T11205] sg_ioctl_common+0x2f8/0x2720 [ 292.434237][T11205] ? do_vfs_ioctl+0x50c/0x1360 [ 292.439025][T11205] ? sg_new_write.isra.0+0x880/0x880 [ 292.444369][T11205] ? ioctl_file_clone+0x180/0x180 [ 292.449422][T11205] ? __fget_files+0x32f/0x500 [ 292.454132][T11205] ? ksys_dup3+0x3c0/0x3c0 [ 292.458581][T11205] ? __sb_end_write+0x101/0x1d0 [ 292.463449][T11205] ? vfs_write+0x161/0x5d0 [ 292.467895][T11205] sg_ioctl+0x8f/0x120 [ 292.471991][T11205] ? sg_compat_ioctl+0x120/0x120 [ 292.476948][T11205] ksys_ioctl+0x11a/0x180 [ 292.481327][T11205] __x64_sys_ioctl+0x6f/0xb0 [ 292.485972][T11205] ? lockdep_hardirqs_on+0x463/0x620 [ 292.491311][T11205] do_syscall_64+0xf6/0x7d0 [ 292.495851][T11205] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 292.501765][T11205] RIP: 0033:0x45c829 [ 292.505703][T11205] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.525337][T11205] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.533795][T11205] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 292.541808][T11205] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 292.549822][T11205] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 292.557829][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 292.565935][T11205] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:26 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:26 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x17}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:26 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:26 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:26 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x89e0, 0x0) 03:03:26 executing program 1 (fault-call:6 fault-nth:21): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:26 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:26 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x18}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:26 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 292.925022][T11227] FAULT_INJECTION: forcing a failure. [ 292.925022][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 292.958568][T11227] CPU: 1 PID: 11227 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 292.968065][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.978142][T11227] Call Trace: [ 292.982159][T11227] dump_stack+0x188/0x20d [ 292.986610][T11227] should_fail.cold+0x5/0xa [ 292.991140][T11227] ? fault_create_debugfs_attr+0x140/0x140 [ 292.997001][T11227] should_failslab+0x5/0xf [ 293.001438][T11227] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 293.008300][T11227] ? __init_waitqueue_head+0x97/0x110 [ 293.013697][T11227] ? __relay_reset+0x318/0x440 [ 293.018492][T11227] ? relay_buf_full+0x91/0xc0 [ 293.023218][T11227] relay_open_buf.part.0+0x91/0xbe0 [ 293.028444][T11227] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 293.034368][T11227] relay_open+0x529/0x9f0 [ 293.038775][T11227] do_blk_trace_setup+0x3de/0xb30 [ 293.043820][T11227] ? _copy_from_user+0x13c/0x1a0 [ 293.048775][T11227] __blk_trace_setup+0xca/0x180 [ 293.053647][T11227] ? do_blk_trace_setup+0xb30/0xb30 [ 293.058888][T11227] blk_trace_setup+0x43/0x60 [ 293.063529][T11227] sg_ioctl_common+0x2f8/0x2720 [ 293.068395][T11227] ? do_vfs_ioctl+0x50c/0x1360 [ 293.073172][T11227] ? sg_new_write.isra.0+0x880/0x880 [ 293.078473][T11227] ? ioctl_file_clone+0x180/0x180 [ 293.083515][T11227] ? __fget_files+0x32f/0x500 [ 293.088216][T11227] ? ksys_dup3+0x3c0/0x3c0 [ 293.092641][T11227] ? __sb_end_write+0x101/0x1d0 [ 293.097511][T11227] ? vfs_write+0x161/0x5d0 [ 293.101952][T11227] sg_ioctl+0x8f/0x120 [ 293.106033][T11227] ? sg_compat_ioctl+0x120/0x120 [ 293.110985][T11227] ksys_ioctl+0x11a/0x180 [ 293.115331][T11227] __x64_sys_ioctl+0x6f/0xb0 [ 293.120021][T11227] ? lockdep_hardirqs_on+0x463/0x620 [ 293.125330][T11227] do_syscall_64+0xf6/0x7d0 [ 293.129853][T11227] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 293.136196][T11227] RIP: 0033:0x45c829 [ 293.140138][T11227] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.159845][T11227] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.168276][T11227] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x19}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:27 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xae01, 0x0) 03:03:27 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 293.176267][T11227] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 293.184367][T11227] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.192398][T11227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 293.200516][T11227] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1a}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:27 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xae41, 0x0) 03:03:27 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:27 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:27 executing program 1 (fault-call:6 fault-nth:22): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:27 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:27 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xae80, 0x0) 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:27 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 293.659622][T11250] FAULT_INJECTION: forcing a failure. [ 293.659622][T11250] name failslab, interval 1, probability 0, space 0, times 0 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 293.731012][T11250] CPU: 0 PID: 11250 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 293.739825][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.751959][T11250] Call Trace: [ 293.755287][T11250] dump_stack+0x188/0x20d [ 293.759671][T11250] should_fail.cold+0x5/0xa [ 293.764223][T11250] ? fault_create_debugfs_attr+0x140/0x140 [ 293.770058][T11250] should_failslab+0x5/0xf [ 293.774542][T11250] kmem_cache_alloc_trace+0x2d0/0x7d0 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1d}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 293.780079][T11250] ? __init_waitqueue_head+0x97/0x110 [ 293.785468][T11250] ? __relay_reset+0x318/0x440 [ 293.790244][T11250] ? relay_buf_full+0x91/0xc0 [ 293.794944][T11250] relay_open_buf.part.0+0x91/0xbe0 [ 293.800162][T11250] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 293.806079][T11250] relay_open+0x529/0x9f0 [ 293.810707][T11250] do_blk_trace_setup+0x3de/0xb30 [ 293.815788][T11250] ? _copy_from_user+0x13c/0x1a0 [ 293.820769][T11250] __blk_trace_setup+0xca/0x180 [ 293.825664][T11250] ? do_blk_trace_setup+0xb30/0xb30 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 293.830929][T11250] blk_trace_setup+0x43/0x60 [ 293.835543][T11250] sg_ioctl_common+0x2f8/0x2720 [ 293.840428][T11250] ? do_vfs_ioctl+0x50c/0x1360 [ 293.845218][T11250] ? sg_new_write.isra.0+0x880/0x880 [ 293.851575][T11250] ? ioctl_file_clone+0x180/0x180 [ 293.856822][T11250] ? __fget_files+0x32f/0x500 [ 293.861534][T11250] ? ksys_dup3+0x3c0/0x3c0 [ 293.866096][T11250] ? __sb_end_write+0x101/0x1d0 [ 293.870972][T11250] ? vfs_write+0x161/0x5d0 [ 293.875430][T11250] sg_ioctl+0x8f/0x120 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x21}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 293.879532][T11250] ? sg_compat_ioctl+0x120/0x120 [ 293.884496][T11250] ksys_ioctl+0x11a/0x180 [ 293.888883][T11250] __x64_sys_ioctl+0x6f/0xb0 [ 293.893598][T11250] ? lockdep_hardirqs_on+0x463/0x620 [ 293.898912][T11250] do_syscall_64+0xf6/0x7d0 [ 293.903475][T11250] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 293.909410][T11250] RIP: 0033:0x45c829 03:03:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x22}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 293.913356][T11250] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.933342][T11250] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.941801][T11250] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 293.949796][T11250] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 293.957784][T11250] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.965786][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 293.973788][T11250] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:27 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x400454ca, 0x0) 03:03:28 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:28 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x23}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:28 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:28 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x400454d4, 0x0) 03:03:28 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:28 executing program 1 (fault-call:6 fault-nth:23): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:28 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:28 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x24}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 294.632127][T11293] FAULT_INJECTION: forcing a failure. [ 294.632127][T11293] name failslab, interval 1, probability 0, space 0, times 0 03:03:28 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 294.696955][T11293] CPU: 1 PID: 11293 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 294.705700][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.715894][T11293] Call Trace: [ 294.719219][T11293] dump_stack+0x188/0x20d [ 294.723600][T11293] should_fail.cold+0x5/0xa [ 294.728167][T11293] ? fault_create_debugfs_attr+0x140/0x140 [ 294.734283][T11293] should_failslab+0x5/0xf [ 294.738985][T11293] __kmalloc+0x2d9/0x7a0 [ 294.743239][T11293] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 294.748802][T11293] ? relay_open_buf.part.0+0xfc/0xbe0 [ 294.754383][T11293] ? __init_waitqueue_head+0x97/0x110 [ 294.759779][T11293] ? __relay_reset+0x318/0x440 [ 294.764588][T11293] ? relay_buf_full+0x91/0xc0 [ 294.769290][T11293] relay_open_buf.part.0+0xfc/0xbe0 [ 294.774509][T11293] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 294.780534][T11293] relay_open+0x529/0x9f0 [ 294.784892][T11293] do_blk_trace_setup+0x3de/0xb30 [ 294.789936][T11293] ? _copy_from_user+0x13c/0x1a0 [ 294.794917][T11293] __blk_trace_setup+0xca/0x180 [ 294.799802][T11293] ? do_blk_trace_setup+0xb30/0xb30 [ 294.805587][T11293] blk_trace_setup+0x43/0x60 [ 294.810204][T11293] sg_ioctl_common+0x2f8/0x2720 [ 294.815088][T11293] ? do_vfs_ioctl+0x50c/0x1360 [ 294.820315][T11293] ? sg_new_write.isra.0+0x880/0x880 [ 294.825626][T11293] ? ioctl_file_clone+0x180/0x180 [ 294.830670][T11293] ? __fget_files+0x32f/0x500 [ 294.835803][T11293] ? ksys_dup3+0x3c0/0x3c0 [ 294.840758][T11293] ? __sb_end_write+0x101/0x1d0 [ 294.845649][T11293] ? vfs_write+0x161/0x5d0 [ 294.850090][T11293] sg_ioctl+0x8f/0x120 [ 294.854177][T11293] ? sg_compat_ioctl+0x120/0x120 [ 294.859139][T11293] ksys_ioctl+0x11a/0x180 [ 294.863517][T11293] __x64_sys_ioctl+0x6f/0xb0 [ 294.868151][T11293] ? lockdep_hardirqs_on+0x463/0x620 [ 294.873465][T11293] do_syscall_64+0xf6/0x7d0 [ 294.878000][T11293] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 294.883919][T11293] RIP: 0033:0x45c829 [ 294.887839][T11293] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.907553][T11293] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.915984][T11293] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 294.923976][T11293] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 294.931964][T11293] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 294.940048][T11293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 03:03:28 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x400454d9, 0x0) 03:03:28 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x25}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 294.948066][T11293] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:28 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x26}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:29 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:29 executing program 1 (fault-call:6 fault-nth:24): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 295.214663][T11310] FAULT_INJECTION: forcing a failure. [ 295.214663][T11310] name failslab, interval 1, probability 0, space 0, times 0 [ 295.271310][T11310] CPU: 0 PID: 11310 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 295.280117][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.290234][T11310] Call Trace: [ 295.293568][T11310] dump_stack+0x188/0x20d [ 295.298039][T11310] should_fail.cold+0x5/0xa [ 295.302567][T11310] ? fault_create_debugfs_attr+0x140/0x140 [ 295.308518][T11310] should_failslab+0x5/0xf [ 295.312961][T11310] __kmalloc+0x2d9/0x7a0 03:03:29 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:29 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x40049409, 0x0) 03:03:29 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x27}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:29 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:29 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 295.317228][T11310] ? relay_open_buf.part.0+0x1b3/0xbe0 [ 295.322712][T11310] ? __init_waitqueue_head+0x97/0x110 [ 295.328112][T11310] ? __relay_reset+0x318/0x440 [ 295.332910][T11310] ? relay_buf_full+0x91/0xc0 [ 295.337637][T11310] relay_open_buf.part.0+0x1b3/0xbe0 [ 295.343054][T11310] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 295.349324][T11310] relay_open+0x529/0x9f0 [ 295.353862][T11310] do_blk_trace_setup+0x3de/0xb30 [ 295.358903][T11310] ? _copy_from_user+0x13c/0x1a0 [ 295.363867][T11310] __blk_trace_setup+0xca/0x180 [ 295.368750][T11310] ? do_blk_trace_setup+0xb30/0xb30 [ 295.374428][T11310] blk_trace_setup+0x43/0x60 [ 295.379047][T11310] sg_ioctl_common+0x2f8/0x2720 [ 295.383920][T11310] ? do_vfs_ioctl+0x50c/0x1360 [ 295.388718][T11310] ? sg_new_write.isra.0+0x880/0x880 [ 295.394024][T11310] ? ioctl_file_clone+0x180/0x180 [ 295.399066][T11310] ? __fget_files+0x32f/0x500 [ 295.403779][T11310] ? ksys_dup3+0x3c0/0x3c0 [ 295.408207][T11310] ? __sb_end_write+0x101/0x1d0 [ 295.413070][T11310] ? vfs_write+0x161/0x5d0 [ 295.417506][T11310] sg_ioctl+0x8f/0x120 03:03:29 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x40085112, 0x0) 03:03:29 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x28}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 295.421596][T11310] ? sg_compat_ioctl+0x120/0x120 [ 295.426559][T11310] ksys_ioctl+0x11a/0x180 [ 295.430916][T11310] __x64_sys_ioctl+0x6f/0xb0 [ 295.435561][T11310] ? lockdep_hardirqs_on+0x463/0x620 [ 295.440876][T11310] do_syscall_64+0xf6/0x7d0 [ 295.445414][T11310] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 295.451413][T11310] RIP: 0033:0x45c829 [ 295.455352][T11310] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.474972][T11310] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.483401][T11310] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 295.491413][T11310] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 295.499398][T11310] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 295.507387][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 03:03:29 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x40186366, 0x0) [ 295.515475][T11310] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:29 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:29 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:29 executing program 1 (fault-call:6 fault-nth:25): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) [ 295.683627][T11332] FAULT_INJECTION: forcing a failure. [ 295.683627][T11332] name failslab, interval 1, probability 0, space 0, times 0 [ 295.704711][T11332] CPU: 0 PID: 11332 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 295.713621][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.723703][T11332] Call Trace: [ 295.727028][T11332] dump_stack+0x188/0x20d [ 295.731398][T11332] should_fail.cold+0x5/0xa [ 295.736027][T11332] ? fault_create_debugfs_attr+0x140/0x140 [ 295.741876][T11332] should_failslab+0x5/0xf [ 295.746316][T11332] kmem_cache_alloc_node_trace+0x27c/0x790 [ 295.752160][T11332] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 295.758947][T11332] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 295.764957][T11332] __get_vm_area_node+0x126/0x3b0 [ 295.770014][T11332] vmap+0xb2/0x170 [ 295.773768][T11332] ? relay_open_buf.part.0+0x4b1/0xbe0 [ 295.779260][T11332] relay_open_buf.part.0+0x4b1/0xbe0 [ 295.784628][T11332] relay_open+0x529/0x9f0 [ 295.789021][T11332] do_blk_trace_setup+0x3de/0xb30 [ 295.794084][T11332] ? _copy_from_user+0x13c/0x1a0 [ 295.799063][T11332] __blk_trace_setup+0xca/0x180 [ 295.804084][T11332] ? do_blk_trace_setup+0xb30/0xb30 [ 295.809321][T11332] blk_trace_setup+0x43/0x60 [ 295.813947][T11332] sg_ioctl_common+0x2f8/0x2720 [ 295.818848][T11332] ? do_vfs_ioctl+0x50c/0x1360 [ 295.823644][T11332] ? sg_new_write.isra.0+0x880/0x880 [ 295.828961][T11332] ? ioctl_file_clone+0x180/0x180 [ 295.834109][T11332] ? __fget_files+0x32f/0x500 [ 295.838933][T11332] ? ksys_dup3+0x3c0/0x3c0 [ 295.843370][T11332] ? __sb_end_write+0x101/0x1d0 [ 295.848249][T11332] ? vfs_write+0x161/0x5d0 [ 295.852703][T11332] sg_ioctl+0x8f/0x120 [ 295.856798][T11332] ? sg_compat_ioctl+0x120/0x120 [ 295.861763][T11332] ksys_ioctl+0x11a/0x180 [ 295.866129][T11332] __x64_sys_ioctl+0x6f/0xb0 [ 295.870749][T11332] ? lockdep_hardirqs_on+0x463/0x620 [ 295.876108][T11332] do_syscall_64+0xf6/0x7d0 [ 295.880654][T11332] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 295.886593][T11332] RIP: 0033:0x45c829 [ 295.890594][T11332] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.910395][T11332] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.918930][T11332] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 03:03:29 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x2a}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 295.927010][T11332] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 295.934997][T11332] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 295.942991][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 295.950983][T11332] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:30 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:30 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x4018aebd, 0x0) 03:03:30 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x2b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:30 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:30 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:30 executing program 1 (fault-call:6 fault-nth:26): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:30 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:30 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x4020940d, 0x0) 03:03:30 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x2c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 296.407582][T11360] FAULT_INJECTION: forcing a failure. [ 296.407582][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 296.446941][T11360] CPU: 0 PID: 11360 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 03:03:30 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x4020ae46, 0x0) 03:03:30 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x2d}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 296.455664][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.466067][T11360] Call Trace: [ 296.469386][T11360] dump_stack+0x188/0x20d [ 296.473748][T11360] should_fail.cold+0x5/0xa [ 296.478293][T11360] ? fault_create_debugfs_attr+0x140/0x140 [ 296.484136][T11360] should_failslab+0x5/0xf [ 296.488579][T11360] kmem_cache_alloc_node_trace+0x27c/0x790 [ 296.494402][T11360] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 296.501191][T11360] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 296.507320][T11360] __get_vm_area_node+0x126/0x3b0 [ 296.512459][T11360] vmap+0xb2/0x170 [ 296.516290][T11360] ? relay_open_buf.part.0+0x4b1/0xbe0 [ 296.521776][T11360] relay_open_buf.part.0+0x4b1/0xbe0 [ 296.527088][T11360] relay_open+0x529/0x9f0 [ 296.531455][T11360] do_blk_trace_setup+0x3de/0xb30 [ 296.536580][T11360] ? _copy_from_user+0x13c/0x1a0 [ 296.541536][T11360] __blk_trace_setup+0xca/0x180 [ 296.546407][T11360] ? do_blk_trace_setup+0xb30/0xb30 [ 296.551652][T11360] blk_trace_setup+0x43/0x60 [ 296.556271][T11360] sg_ioctl_common+0x2f8/0x2720 [ 296.562539][T11360] ? do_vfs_ioctl+0x50c/0x1360 [ 296.567421][T11360] ? sg_new_write.isra.0+0x880/0x880 [ 296.572760][T11360] ? ioctl_file_clone+0x180/0x180 [ 296.577825][T11360] ? __fget_files+0x32f/0x500 [ 296.582567][T11360] ? ksys_dup3+0x3c0/0x3c0 [ 296.587013][T11360] ? __sb_end_write+0x101/0x1d0 [ 296.592505][T11360] ? vfs_write+0x161/0x5d0 [ 296.596954][T11360] sg_ioctl+0x8f/0x120 [ 296.601046][T11360] ? sg_compat_ioctl+0x120/0x120 [ 296.606001][T11360] ksys_ioctl+0x11a/0x180 [ 296.610351][T11360] __x64_sys_ioctl+0x6f/0xb0 [ 296.614957][T11360] ? lockdep_hardirqs_on+0x463/0x620 [ 296.620282][T11360] do_syscall_64+0xf6/0x7d0 [ 296.624814][T11360] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 296.630721][T11360] RIP: 0033:0x45c829 [ 296.634642][T11360] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:03:30 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:03:30 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 296.654278][T11360] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.662829][T11360] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 296.670818][T11360] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 296.678807][T11360] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 296.687580][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 296.695662][T11360] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:30 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x40305829, 0x0) 03:03:30 executing program 1 (fault-call:6 fault-nth:27): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:30 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x2e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 296.956486][T11378] FAULT_INJECTION: forcing a failure. [ 296.956486][T11378] name failslab, interval 1, probability 0, space 0, times 0 [ 297.005868][T11378] CPU: 1 PID: 11378 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 297.014619][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.024699][T11378] Call Trace: [ 297.028040][T11378] dump_stack+0x188/0x20d [ 297.032403][T11378] should_fail.cold+0x5/0xa [ 297.036936][T11378] ? fault_create_debugfs_attr+0x140/0x140 [ 297.042792][T11378] should_failslab+0x5/0xf [ 297.047223][T11378] kmem_cache_alloc_node+0x25c/0x760 [ 297.052518][T11378] ? mark_lock+0x12b/0xf10 [ 297.056953][T11378] alloc_vmap_area+0x13e/0x1e20 [ 297.061857][T11378] ? __get_vm_area_node+0x126/0x3b0 [ 297.067077][T11378] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 297.072647][T11378] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 297.078665][T11378] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 297.084505][T11378] ? purge_vmap_area_lazy+0x40/0x40 [ 297.089729][T11378] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 297.096518][T11378] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 297.102530][T11378] __get_vm_area_node+0x178/0x3b0 [ 297.107599][T11378] vmap+0xb2/0x170 [ 297.111338][T11378] ? relay_open_buf.part.0+0x4b1/0xbe0 [ 297.116833][T11378] relay_open_buf.part.0+0x4b1/0xbe0 [ 297.122164][T11378] relay_open+0x529/0x9f0 [ 297.126525][T11378] do_blk_trace_setup+0x3de/0xb30 [ 297.131597][T11378] ? _copy_from_user+0x13c/0x1a0 [ 297.137094][T11378] __blk_trace_setup+0xca/0x180 [ 297.141966][T11378] ? do_blk_trace_setup+0xb30/0xb30 [ 297.147196][T11378] blk_trace_setup+0x43/0x60 [ 297.151805][T11378] sg_ioctl_common+0x2f8/0x2720 [ 297.156674][T11378] ? do_vfs_ioctl+0x50c/0x1360 [ 297.161452][T11378] ? sg_new_write.isra.0+0x880/0x880 [ 297.166748][T11378] ? ioctl_file_clone+0x180/0x180 [ 297.171805][T11378] ? __fget_files+0x32f/0x500 [ 297.176524][T11378] ? ksys_dup3+0x3c0/0x3c0 [ 297.180952][T11378] ? __sb_end_write+0x101/0x1d0 [ 297.185825][T11378] ? vfs_write+0x161/0x5d0 [ 297.190261][T11378] sg_ioctl+0x8f/0x120 [ 297.194341][T11378] ? sg_compat_ioctl+0x120/0x120 [ 297.199286][T11378] ksys_ioctl+0x11a/0x180 [ 297.203630][T11378] __x64_sys_ioctl+0x6f/0xb0 [ 297.208231][T11378] ? lockdep_hardirqs_on+0x463/0x620 [ 297.213536][T11378] do_syscall_64+0xf6/0x7d0 [ 297.218063][T11378] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 297.223991][T11378] RIP: 0033:0x45c829 [ 297.227905][T11378] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.247610][T11378] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.256128][T11378] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 297.264126][T11378] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 297.272115][T11378] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 297.280096][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 297.288078][T11378] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:31 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:31 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x80086301, 0x0) 03:03:31 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:31 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x2f}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:31 executing program 1 (fault-call:6 fault-nth:28): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:31 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 297.526720][T11391] FAULT_INJECTION: forcing a failure. [ 297.526720][T11391] name failslab, interval 1, probability 0, space 0, times 0 03:03:31 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xc0045878, 0x0) [ 297.580435][T11391] CPU: 0 PID: 11391 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 297.589171][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.599254][T11391] Call Trace: [ 297.602584][T11391] dump_stack+0x188/0x20d [ 297.606964][T11391] should_fail.cold+0x5/0xa [ 297.611502][T11391] ? fault_create_debugfs_attr+0x140/0x140 [ 297.617367][T11391] should_failslab+0x5/0xf [ 297.621808][T11391] kmem_cache_alloc+0x29b/0x740 [ 297.626681][T11391] ? print_usage_bug+0x240/0x240 [ 297.631730][T11391] __d_alloc+0x2b/0x8e0 [ 297.635912][T11391] d_alloc+0x4a/0x240 [ 297.639916][T11391] d_alloc_parallel+0xe8/0x1b10 [ 297.645068][T11391] ? __lock_acquire+0x2184/0x4c50 [ 297.650121][T11391] ? __d_lookup_rcu+0x6c0/0x6c0 [ 297.655008][T11391] ? lockdep_init_map_waits+0x26a/0x890 [ 297.660628][T11391] ? lockdep_init_map_waits+0x26a/0x890 [ 297.666195][T11391] ? __raw_spin_lock_init+0x34/0x100 [ 297.671796][T11391] __lookup_slow+0x193/0x490 [ 297.676417][T11391] ? vfs_rmdir+0x500/0x500 03:03:31 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xc0045878, 0x0) [ 297.680856][T11391] ? print_usage_bug+0x240/0x240 [ 297.685834][T11391] ? d_lookup+0x18f/0x250 [ 297.690202][T11391] lookup_one_len+0x163/0x190 [ 297.694905][T11391] ? __lookup_slow+0x490/0x490 [ 297.699770][T11391] ? __down_timeout+0x2d0/0x2d0 [ 297.704643][T11391] ? do_raw_spin_unlock+0x171/0x260 [ 297.709862][T11391] ? mntput+0xc/0x90 [ 297.713815][T11391] start_creating+0x12b/0x250 [ 297.718538][T11391] __debugfs_create_file+0x62/0x400 [ 297.723762][T11391] ? blk_trace_remove+0x40/0x40 [ 297.729338][T11391] relay_create_buf_file+0xf0/0x170 [ 297.734564][T11391] relay_open_buf.part.0+0x7ba/0xbe0 [ 297.739896][T11391] relay_open+0x529/0x9f0 [ 297.744284][T11391] do_blk_trace_setup+0x3de/0xb30 [ 297.749430][T11391] ? _copy_from_user+0x13c/0x1a0 [ 297.754402][T11391] __blk_trace_setup+0xca/0x180 [ 297.759455][T11391] ? do_blk_trace_setup+0xb30/0xb30 [ 297.764686][T11391] blk_trace_setup+0x43/0x60 [ 297.769342][T11391] sg_ioctl_common+0x2f8/0x2720 [ 297.774759][T11391] ? do_vfs_ioctl+0x50c/0x1360 03:03:31 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xc01064bd, 0x0) [ 297.779573][T11391] ? sg_new_write.isra.0+0x880/0x880 [ 297.784963][T11391] ? ioctl_file_clone+0x180/0x180 [ 297.790096][T11391] ? __fget_files+0x32f/0x500 [ 297.794817][T11391] ? ksys_dup3+0x3c0/0x3c0 [ 297.799247][T11391] ? __sb_end_write+0x101/0x1d0 [ 297.804118][T11391] ? vfs_write+0x161/0x5d0 [ 297.808558][T11391] sg_ioctl+0x8f/0x120 [ 297.812655][T11391] ? sg_compat_ioctl+0x120/0x120 [ 297.817614][T11391] ksys_ioctl+0x11a/0x180 [ 297.822098][T11391] __x64_sys_ioctl+0x6f/0xb0 [ 297.826717][T11391] ? lockdep_hardirqs_on+0x463/0x620 [ 297.832030][T11391] do_syscall_64+0xf6/0x7d0 [ 297.836562][T11391] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 297.842484][T11391] RIP: 0033:0x45c829 [ 297.846398][T11391] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.866106][T11391] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:03:31 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xc0189436, 0x0) 03:03:31 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x30}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:31 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 297.874548][T11391] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 297.882539][T11391] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 297.890536][T11391] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 297.898531][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 297.906528][T11391] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 03:03:32 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:32 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:32 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xc020660b, 0x0) 03:03:32 executing program 1 (fault-call:6 fault-nth:29): syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) 03:03:32 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b05020008000800", 0x1e}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 298.307290][T11424] FAULT_INJECTION: forcing a failure. [ 298.307290][T11424] name failslab, interval 1, probability 0, space 0, times 0 [ 298.322097][T11424] CPU: 0 PID: 11424 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 298.330799][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.340877][T11424] Call Trace: [ 298.344203][T11424] dump_stack+0x188/0x20d [ 298.348590][T11424] should_fail.cold+0x5/0xa [ 298.353243][T11424] ? fault_create_debugfs_attr+0x140/0x140 [ 298.359118][T11424] should_failslab+0x5/0xf [ 298.363567][T11424] __kmalloc+0x2d9/0x7a0 [ 298.367844][T11424] ? tracepoint_probe_register_prio+0x32f/0x770 [ 298.374137][T11424] tracepoint_probe_register_prio+0x32f/0x770 [ 298.380244][T11424] ? blk_add_trace_rq+0x470/0x470 [ 298.385301][T11424] get_probe_ref+0x60/0x3e0 [ 298.389842][T11424] do_blk_trace_setup+0x7d3/0xb30 [ 298.394897][T11424] ? _copy_from_user+0x13c/0x1a0 [ 298.399865][T11424] __blk_trace_setup+0xca/0x180 [ 298.404736][T11424] ? do_blk_trace_setup+0xb30/0xb30 [ 298.409988][T11424] blk_trace_setup+0x43/0x60 [ 298.414611][T11424] sg_ioctl_common+0x2f8/0x2720 [ 298.419496][T11424] ? do_vfs_ioctl+0x50c/0x1360 [ 298.424292][T11424] ? sg_new_write.isra.0+0x880/0x880 [ 298.429615][T11424] ? ioctl_file_clone+0x180/0x180 [ 298.435114][T11424] ? __fget_files+0x32f/0x500 [ 298.439825][T11424] ? ksys_dup3+0x3c0/0x3c0 [ 298.444263][T11424] ? __sb_end_write+0x101/0x1d0 [ 298.449186][T11424] ? vfs_write+0x161/0x5d0 [ 298.453663][T11424] sg_ioctl+0x8f/0x120 [ 298.457761][T11424] ? sg_compat_ioctl+0x120/0x120 [ 298.462730][T11424] ksys_ioctl+0x11a/0x180 [ 298.468225][T11424] __x64_sys_ioctl+0x6f/0xb0 [ 298.472861][T11424] ? lockdep_hardirqs_on+0x463/0x620 [ 298.478177][T11424] do_syscall_64+0xf6/0x7d0 [ 298.482776][T11424] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 298.488724][T11424] RIP: 0033:0x45c829 [ 298.492636][T11424] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.512497][T11424] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.522327][T11424] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 298.530319][T11424] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 298.538327][T11424] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.546497][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 298.554523][T11424] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 [ 298.565670][T11424] ------------[ cut here ]------------ [ 298.571697][T11424] WARNING: CPU: 0 PID: 11424 at kernel/trace/blktrace.c:1115 get_probe_ref+0x327/0x3e0 [ 298.581350][T11424] Kernel panic - not syncing: panic_on_warn set ... [ 298.588059][T11424] CPU: 0 PID: 11424 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 298.596772][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.606850][T11424] Call Trace: [ 298.610166][T11424] dump_stack+0x188/0x20d [ 298.614519][T11424] ? get_probe_ref+0x290/0x3e0 [ 298.619358][T11424] panic+0x2e3/0x75c [ 298.623281][T11424] ? add_taint.cold+0x16/0x16 [ 298.628033][T11424] ? printk+0xba/0xed [ 298.632048][T11424] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 298.637543][T11424] ? __warn.cold+0x14/0x35 [ 298.642069][T11424] ? get_probe_ref+0x327/0x3e0 [ 298.646864][T11424] __warn.cold+0x2f/0x35 [ 298.651196][T11424] ? get_probe_ref+0x327/0x3e0 [ 298.655988][T11424] report_bug+0x27b/0x2f0 [ 298.660389][T11424] do_error_trap+0x12b/0x220 [ 298.665002][T11424] ? get_probe_ref+0x327/0x3e0 [ 298.669791][T11424] do_invalid_op+0x32/0x40 [ 298.674227][T11424] ? get_probe_ref+0x327/0x3e0 [ 298.679009][T11424] invalid_op+0x23/0x30 [ 298.683219][T11424] RIP: 0010:get_probe_ref+0x327/0x3e0 [ 298.688617][T11424] Code: 8a e8 3d d3 fb ff 31 ff 89 c3 89 c6 e8 62 56 fa ff 85 db 0f 84 1e fd ff ff e8 e5 54 fa ff 0f 0b e9 12 fd ff ff e8 d9 54 fa ff <0f> 0b e9 45 fd ff ff e8 cd 54 fa ff 0f 0b e9 66 fd ff ff e8 c1 54 03:03:32 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:03:32 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0xc0481273, 0x0) 03:03:32 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x32}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:03:32 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000ae08100fd038b0502000800080016", 0x1f}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 298.708420][T11424] RSP: 0018:ffffc90008627b88 EFLAGS: 00010246 [ 298.714519][T11424] RAX: 0000000000040000 RBX: 00000000fffffff4 RCX: ffffc900043d9000 [ 298.722609][T11424] RDX: 0000000000040000 RSI: ffffffff8178de97 RDI: 0000000000000005 [ 298.730701][T11424] RBP: ffff8880930ce100 R08: ffff88809d2f4500 R09: fffffbfff133f1c1 [ 298.738808][T11424] R10: ffffffff899f8e07 R11: fffffbfff133f1c0 R12: ffff8880a0219100 [ 298.747002][T11424] R13: ffff888089315b80 R14: 0000000000000000 R15: ffff8880930ce130 [ 298.755047][T11424] ? get_probe_ref+0x327/0x3e0 [ 298.760213][T11424] ? get_probe_ref+0x327/0x3e0 [ 298.765016][T11424] do_blk_trace_setup+0x7d3/0xb30 [ 298.770362][T11424] ? _copy_from_user+0x13c/0x1a0 [ 298.775819][T11424] __blk_trace_setup+0xca/0x180 [ 298.780715][T11424] ? do_blk_trace_setup+0xb30/0xb30 [ 298.786473][T11424] blk_trace_setup+0x43/0x60 [ 298.791202][T11424] sg_ioctl_common+0x2f8/0x2720 [ 298.796176][T11424] ? do_vfs_ioctl+0x50c/0x1360 [ 298.800973][T11424] ? sg_new_write.isra.0+0x880/0x880 [ 298.806286][T11424] ? ioctl_file_clone+0x180/0x180 [ 298.811336][T11424] ? __fget_files+0x32f/0x500 [ 298.816046][T11424] ? ksys_dup3+0x3c0/0x3c0 [ 298.820665][T11424] ? __sb_end_write+0x101/0x1d0 [ 298.825552][T11424] ? vfs_write+0x161/0x5d0 [ 298.830151][T11424] sg_ioctl+0x8f/0x120 [ 298.834335][T11424] ? sg_compat_ioctl+0x120/0x120 [ 298.839306][T11424] ksys_ioctl+0x11a/0x180 [ 298.843703][T11424] __x64_sys_ioctl+0x6f/0xb0 [ 298.848334][T11424] ? lockdep_hardirqs_on+0x463/0x620 [ 298.853667][T11424] do_syscall_64+0xf6/0x7d0 [ 298.858206][T11424] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 298.864234][T11424] RIP: 0033:0x45c829 [ 298.868150][T11424] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.888218][T11424] RSP: 002b:00007f3c21d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.896907][T11424] RAX: ffffffffffffffda RBX: 00000000004e1660 RCX: 000000000045c829 [ 298.905084][T11424] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004 [ 298.913078][T11424] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.921083][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 298.929158][T11424] R13: 000000000000022a R14: 00000000004c4506 R15: 00007f3c21d956d4 [ 298.939173][T11424] Kernel Offset: disabled [ 298.943815][T11424] Rebooting in 86400 seconds..