[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.386538] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.323461] random: sshd: uninitialized urandom read (32 bytes read) [ 32.866583] random: sshd: uninitialized urandom read (32 bytes read) [ 34.175292] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. [ 39.855911] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/28 14:07:20 fuzzer started [ 41.350050] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/28 14:07:22 dialing manager at 10.128.0.26:41083 2018/06/28 14:07:24 syscalls: 1517 2018/06/28 14:07:24 code coverage: enabled 2018/06/28 14:07:24 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/06/28 14:07:24 setuid sandbox: enabled 2018/06/28 14:07:24 namespace sandbox: enabled 2018/06/28 14:07:24 fault injection: enabled 2018/06/28 14:07:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/06/28 14:07:24 net packed injection: enabled [ 46.058915] random: crng init done 14:08:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x700000) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:08:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x2000000000000001, 0xffffffffffffffff) 14:08:35 executing program 7: sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) 14:08:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 14:08:35 executing program 3: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/136) 14:08:35 executing program 4: r0 = getpgrp(0x0) capget(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)) 14:08:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:08:35 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x5) [ 116.699982] IPVS: ftp: loaded support on port[0] = 21 [ 116.708913] IPVS: ftp: loaded support on port[0] = 21 [ 116.774646] IPVS: ftp: loaded support on port[0] = 21 [ 116.789067] IPVS: ftp: loaded support on port[0] = 21 [ 116.825713] IPVS: ftp: loaded support on port[0] = 21 [ 116.863507] IPVS: ftp: loaded support on port[0] = 21 [ 116.867364] IPVS: ftp: loaded support on port[0] = 21 [ 116.886506] IPVS: ftp: loaded support on port[0] = 21 [ 118.558237] ip (4631) used greatest stack depth: 54424 bytes left [ 119.059209] ip (4668) used greatest stack depth: 54328 bytes left [ 120.011706] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.018214] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.068231] device bridge_slave_0 entered promiscuous mode [ 120.162662] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.169156] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.205634] device bridge_slave_0 entered promiscuous mode [ 120.225390] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.231837] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.246573] device bridge_slave_0 entered promiscuous mode [ 120.267545] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.273988] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.290366] device bridge_slave_0 entered promiscuous mode [ 120.306639] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.313097] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.328559] device bridge_slave_0 entered promiscuous mode [ 120.342524] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.348983] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.357167] device bridge_slave_0 entered promiscuous mode [ 120.365781] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.372203] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.390321] device bridge_slave_1 entered promiscuous mode [ 120.407072] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.413540] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.437366] device bridge_slave_0 entered promiscuous mode [ 120.453509] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.459943] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.473841] device bridge_slave_0 entered promiscuous mode [ 120.484510] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.490947] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.506186] device bridge_slave_1 entered promiscuous mode [ 120.518273] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.524710] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.540674] device bridge_slave_1 entered promiscuous mode [ 120.557983] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.564469] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.580930] device bridge_slave_1 entered promiscuous mode [ 120.591807] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.598288] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.607298] device bridge_slave_1 entered promiscuous mode [ 120.616693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.624641] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.631120] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.656107] device bridge_slave_1 entered promiscuous mode [ 120.671691] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.678151] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.709449] device bridge_slave_1 entered promiscuous mode [ 120.724605] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.731083] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.753220] device bridge_slave_1 entered promiscuous mode [ 120.765785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.775693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.787068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.795523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 120.804446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.812609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.890277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.958651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.970451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 120.987139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.005150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.018657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.038379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.086541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.151409] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.520819] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.553586] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.636495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.649355] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.674527] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.704673] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.720921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 121.741893] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 121.773907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.783331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.846876] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 121.889651] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 121.905827] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 121.923531] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 121.978862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.985972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.028503] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.044923] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.135588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.142610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.155201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.175713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.182801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.196975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.239864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.248531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.258762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.270533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.304491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.316471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.323934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.357218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.386955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.400779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.438657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.448134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.458332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.465532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.487714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.515241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.573503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.587180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.773594] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 122.791250] team0: Port device team_slave_0 added [ 122.820638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 122.856426] team0: Port device team_slave_0 added [ 122.939460] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 122.966309] team0: Port device team_slave_1 added [ 123.034876] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.074864] team0: Port device team_slave_1 added [ 123.096355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.113325] team0: Port device team_slave_0 added [ 123.126054] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.141741] team0: Port device team_slave_0 added [ 123.162096] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.183815] team0: Port device team_slave_0 added [ 123.207469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.232726] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.250531] team0: Port device team_slave_0 added [ 123.270986] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.290943] team0: Port device team_slave_0 added [ 123.305706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.316804] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.329594] team0: Port device team_slave_0 added [ 123.348769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.364946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.394708] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.408617] team0: Port device team_slave_1 added [ 123.425924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 123.433198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.445826] team0: Port device team_slave_1 added [ 123.467691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.476268] team0: Port device team_slave_1 added [ 123.489363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.514415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.545857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 123.554420] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.565238] team0: Port device team_slave_1 added [ 123.588578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.597874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.620954] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.632221] team0: Port device team_slave_1 added [ 123.650976] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.667582] team0: Port device team_slave_1 added [ 123.703124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.710353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.720302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.741262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.756833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.771256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.797334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 123.806661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.816270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 123.825868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.844244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.864191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.879981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.899611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.908654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.919971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.931843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.940180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.948700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 123.960371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 123.968775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.996123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.025756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.047557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.070912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.085238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.092841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.100852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.108586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.116724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.128350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.137503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.145684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.158814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.179269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.186945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.196288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.204253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.211259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.255109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.275944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.303840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.323304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.343327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.351327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.359161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.366710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.374690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.389480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.415703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.423710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.446156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.461866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.482170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.492259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.502414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.513436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.524996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.536510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.572406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.601312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.617655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.626211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.646580] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.659749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.671872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.701504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.709199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.728864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.756340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.764149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.771505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.786969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.816607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.834441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.850563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.865533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.883097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.923740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.931507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.946771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.989737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.997368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.039601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.918101] ip (5145) used greatest stack depth: 54120 bytes left [ 126.663340] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.669808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.676634] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.683113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.742263] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.749216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.804087] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.810532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.817405] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.823802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.835729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.843915] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.850339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.857167] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.863610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.914576] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.933324] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.939777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.946559] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.952970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.972304] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.023519] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.029973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.036782] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.043208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.105920] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.203263] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.209724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.216533] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.222964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.300805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.316789] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.323230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.329962] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.336350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.344654] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.602015] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.608501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.615281] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.621737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.658862] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.776375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.784443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.831859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.845725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.861785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.869124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.876705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.085360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.109595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.141486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.191471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.511744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.590286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.824822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.889764] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.953634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.988805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.021807] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.055301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.267348] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.358791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.613943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.620293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.631801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.677927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.691140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.697458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.711721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.749115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.775137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.817611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.833136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.845721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.878788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.911205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.173591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.179932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.197776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.229811] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.246372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.282768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.435580] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.466576] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.515169] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.697780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.704181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.714116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.740216] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.753560] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.774192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.809747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.007335] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.034296] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.490778] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.539618] 8021q: adding VLAN 0 to HW filter on device team0 14:09:02 executing program 1: mkdir(&(0x7f0000000000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000180)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./control/file0\x00') close(r0) 14:09:02 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1600000000000000, 0x0, 0x0, 0x0, 0x0, "804e2486cff9d9266b6504d1017e922724e09b8a6d2cec6c5249cf42d85e7f102204bb458c81a116e92825862da340dec9ee4a6bb74e77d3dd1a52f33cc1748d", "9b9565fd6c7860bd47638a0e3a6899a829b38528694cb064080000bdf5c1d14998d5bbac6c4deae26bc26c30acd5983cc9a8453e000873477ebc926e83d8fccc", "73e37038ac9e1afce8d40c23003f1559045737cfaa8dd9040000f2ffffff0051"}) 14:09:02 executing program 3: mkdir(&(0x7f00000011c0)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000012000)={0x0, 0x0, 0x0, @thr={&(0x7f0000d05000), &(0x7f00005a6f90)}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 14:09:02 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 14:09:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0x41) [ 142.541263] dccp_invalid_packet: pskb_may_pull failed 14:09:02 executing program 3: mkdir(&(0x7f00000011c0)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 14:09:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:02 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800000000002, 0x800000000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:03 executing program 0: 14:09:03 executing program 3: 14:09:03 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x9, 0x80006, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000080)="0650746045", 0x5) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x800000020000004, &(0x7f0000000140)={0xa, 0x6b8, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f000079df88)) msgsnd(0x0, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) 14:09:04 executing program 1: 14:09:04 executing program 2: 14:09:04 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800000000002, 0x800000000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:04 executing program 3: 14:09:04 executing program 4: 14:09:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:04 executing program 0: 14:09:04 executing program 4: 14:09:04 executing program 3: 14:09:04 executing program 1: 14:09:04 executing program 0: 14:09:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:04 executing program 2: 14:09:04 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800000000002, 0x800000000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:04 executing program 4: 14:09:04 executing program 3: 14:09:04 executing program 0: 14:09:04 executing program 1: 14:09:04 executing program 2: 14:09:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:04 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800000000002, 0x800000000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:05 executing program 4: 14:09:05 executing program 0: 14:09:05 executing program 1: 14:09:05 executing program 3: 14:09:05 executing program 2: 14:09:05 executing program 7: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:05 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800000000002, 0x800000000000000) syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:05 executing program 3: 14:09:05 executing program 0: 14:09:05 executing program 4: 14:09:05 executing program 2: 14:09:05 executing program 1: 14:09:05 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800000000002, 0x800000000000000) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:05 executing program 4: 14:09:05 executing program 0: 14:09:05 executing program 3: 14:09:05 executing program 2: 14:09:05 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setflags(r0, 0x2, 0x1) 14:09:05 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 14:09:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") r1 = socket$inet6(0xa, 0x3, 0x8001000000002c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xffef}], 0x1, &(0x7f0000000200)}, 0x0) 14:09:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:06 executing program 0: socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000003c0)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") 14:09:06 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000d51eed)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x0, 0x21}}}}}}, 0x0) 14:09:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) [ 146.319350] device lo entered promiscuous mode 14:09:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) socket$inet6(0xa, 0x8000000000000802, 0x88) 14:09:06 executing program 4: 14:09:06 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 14:09:06 executing program 1: 14:09:06 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @loopback=0x7f000001}}) 14:09:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0xe, &(0x7f0000002500)=""/4096, &(0x7f00000000c0)=0x1000) [ 146.987930] sock: process `syz-executor4' is using obsolete getsockopt SO_BSDCOMPAT 14:09:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) unlink(&(0x7f0000001700)='./file0\x00') link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 14:09:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rename(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./file0\x00') 14:09:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000000180)}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)='c', 0x1}], 0x1, &(0x7f0000000480)=ANY=[]}, 0x2000c890) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@sco={0x1f}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000900)}, 0x4000) close(r2) 14:09:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 14:09:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x20000000000002, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x31c) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) 14:09:08 executing program 6: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6274726673cd98751e70e52e2c00"]) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 14:09:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) socket$inet6(0xa, 0x8000000000000802, 0x88) 14:09:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x3c}, 0x1}, 0x0) 14:09:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x20, 0xa3bc010931239d7f, 0x0, 0x0, {0x2}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14}]}, 0x2c}, 0x1}, 0x0) 14:09:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) ftruncate(0xffffffffffffffff, 0x0) 14:09:08 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 14:09:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000101ffff80db023cbff5a2b50000000008001500000000000800080004000000"], 0x24}, 0x1}, 0x0) 14:09:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./file1\x00', 0x0) dup3(r0, r1, 0x0) [ 148.374882] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 14:09:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) ftruncate(r1, 0x0) 14:09:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140), 0x0) 14:09:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000000180)}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)='c', 0x1}], 0x1, &(0x7f0000000480)=ANY=[]}, 0x2000c890) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@sco={0x1f}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000900)}, 0x4000) close(r2) 14:09:08 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 14:09:08 executing program 2: r0 = socket(0x10, 0x800000802, 0x0) write(r0, &(0x7f00000002c0)="220000005a00070300be02000005e50e80ff000000000000f8b16f04bb5e688e6739", 0x22) 14:09:08 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) 14:09:08 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x401, @empty, 0x8}, 0x1c) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 14:09:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) socket$inet6(0xa, 0x8000000000000802, 0x88) 14:09:09 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00') fchmod(r0, 0x4) 14:09:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="040100001600170300000000000000005fea99a611fc02783bd4368f6d0a66000000000000f5ff0000000000000001e000000200000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0x104}, 0x1}, 0x0) r1 = dup(r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x28, &(0x7f00000001c0)}, 0x10) 14:09:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000240)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000440)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x6a7a, @local={0xfe, 0x80, [], 0xaa}, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="9793ffd4cd48181b7b23a1203be81dcdf886", 0x12}, {&(0x7f0000000180)="232709b7677b8cee1651b5ff6fba5398cce3c6208580d497d6c8f6802f1753a95befa1cbeb9f57ef5f6fc65c5436554a91ca9d4684ba8c97d7b2f1a416a7f2fc87099bc3c88e944ae8c66e0bb1ebeed5ccf9836d18934cd8fa606620eb5daf681dc06c8f569da1748e3bd5e42014100c1767385307d2c9a280ebae34", 0x7c}, {&(0x7f0000000280)="d0b7bfc58b0270e84bb2b2fa8bf961cf29a403c40fa17d4880bbe883dfa9d99831ddee1af3a37f12b01bde5e08645c1b63d58a1f0f4ba6deaa5581000311aa5084fee7e0fc5b13ba0c82", 0x4a}, {&(0x7f0000000300)="f797889b373f58900febafbadd97feb797018aa7c455919ca7fcff5c028f412a07e9edd76855bcad27a70c3ae063528d0b21f25068b37a122a118e5344b9e0b7a107087541f7424e225a891de01dfbe5cc8e18fd8bcc5dfcfb08616687bc52ebc7123479152c2fb8923c67efaaf8abcee112baef259ab536b3a4358636c88c36", 0x80}], 0x4, &(0x7f00000003c0)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1b}}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @authinfo={0x18, 0x84, 0x6, {0xffffffffffffffc0}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffff}}], 0x80, 0x810}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0xa97, @mcast1={0xff, 0x1, [], 0x1}, 0x5d}, @in={0x2, 0x4e22, @rand_addr=0x4}, @in6={0xa, 0x7, 0x80000000000000, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, @in6={0xa, 0x4e22, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x336c}], 0x74) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) 14:09:09 executing program 3: r0 = socket(0x5, 0x100000803, 0xfffffffffffffffd) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x58, 0x101000) ioctl$TIOCNOTTY(r1, 0x5422) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) sched_yield() ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) r3 = socket(0xa, 0x1, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000580)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @dev, 0x0}, &(0x7f0000000880)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', r7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000004c0)={{0xee9, 0x4}, 'port1\x00', 0x2, 0x400, 0xff, 0x100000001, 0x7, 0x1, 0xfffffffffffffffd, 0x0, 0x2, 0x10000}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, 0xfffffffffffffffe, 0x5, 0xfffffffffffffc00, 0x400, 0x1, 0xa20010, r8}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000001c40)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @empty, 0xc2ab, 0x7, 0x0, 0x100, 0xfffffffffffffff9, 0x200000, r8}) sendmsg$nl_generic(r5, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xfee3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000022000100008db4e1cd4655b41deadc342805053f032daa0000008ea42251467b169f3c53fab9215de3e0f0ea85"], 0x14}, 0x1}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x80000001, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000280)={0x8, 0x6}, 0x2) capget(&(0x7f0000000340)={0x20071026, r9}, &(0x7f0000000400)={0x5, 0x3, 0x8, 0xfffffffffffffffb, 0x90}) eventfd2(0x7, 0x1) sendmsg$nl_netfilter(r10, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ddec00000507010500000000000000250f00000654b77ec9fb41c45a95059c2784339367d6821119c0ca478a8161af677d5eefb41d86e6657a9d5149845c5b706efdac94620b06cf1e1ed71cb3cb28102108004f000008000094922d5c3cee50aa11f000e2bb8bb3f952e936ddd0726891ee241c5dfa9c7a12c56c9c1d5e977a1117fc3be453050c5e46a1e199db7b9177fa3db2959048a0"], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) dup2(r3, r2) 14:09:09 executing program 7 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:09 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x401, @empty, 0x8}, 0x1c) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 149.054945] FAULT_INJECTION: forcing a failure. [ 149.054945] name failslab, interval 1, probability 0, space 0, times 1 [ 149.066373] CPU: 0 PID: 6879 Comm: syz-executor7 Not tainted 4.17.0+ #9 [ 149.073154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.082536] Call Trace: [ 149.085168] dump_stack+0x185/0x1d0 [ 149.088868] should_fail+0x87b/0xab0 [ 149.092632] __should_failslab+0x278/0x2a0 [ 149.096924] should_failslab+0x29/0x70 [ 149.100868] kmem_cache_alloc_node+0x157/0xc80 [ 149.105509] ? __alloc_skb+0x202/0x9e0 [ 149.109437] __alloc_skb+0x202/0x9e0 [ 149.113213] netlink_sendmsg+0x76e/0x1350 [ 149.117424] ? netlink_getsockopt+0xc60/0xc60 [ 149.121958] ___sys_sendmsg+0xec8/0x1320 [ 149.126074] ? __fdget+0x4e/0x60 [ 149.129486] ? __fget_light+0x57/0x700 [ 149.133418] ? __fdget+0x4e/0x60 [ 149.136831] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 149.142239] ? __fget_light+0x6a3/0x700 [ 149.146276] __x64_sys_sendmsg+0x331/0x460 [ 149.150556] ? ___sys_sendmsg+0x1320/0x1320 [ 149.154907] do_syscall_64+0x15b/0x230 [ 149.158842] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 149.164053] RIP: 0033:0x455a99 [ 149.167260] RSP: 002b:00007f54c43bdc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.175010] RAX: ffffffffffffffda RBX: 00007f54c43be6d4 RCX: 0000000000455a99 [ 149.182308] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000013 [ 149.189601] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.196897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 14:09:09 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:09 executing program 0: [ 149.204188] R13: 00000000004c0e59 R14: 00000000004d0cf8 R15: 0000000000000000 14:09:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) chown(&(0x7f0000000280)='./file0\x00', r3, 0x0) r4 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)='(nodev+^posix_acl_access\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r4, 0x11000000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x5c) r5 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, 0x0) keyctl$set_timeout(0xf, r5, 0x9) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x0, 0x0, 0x100, 0xce89, 0xa00000, r2}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000005c0)=""/132, &(0x7f0000000300)=0x84) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) 14:09:09 executing program 7 (fault-call:1 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) [ 149.265648] capability: warning: `syz-executor3' uses deprecated v2 capabilities in a way that may be insecure 14:09:09 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 14:09:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 14:09:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getlink={0x20, 0x12, 0x103, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 14:09:09 executing program 2: mkdir(&(0x7f00000011c0)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000012000)={0x0, 0x0, 0x0, @thr={&(0x7f0000d05000), &(0x7f00005a6f90)}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 149.423467] FAULT_INJECTION: forcing a failure. [ 149.423467] name failslab, interval 1, probability 0, space 0, times 0 [ 149.434922] CPU: 0 PID: 6913 Comm: syz-executor7 Not tainted 4.17.0+ #9 [ 149.441700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.451076] Call Trace: [ 149.453710] dump_stack+0x185/0x1d0 [ 149.457405] should_fail+0x87b/0xab0 [ 149.461170] __should_failslab+0x278/0x2a0 [ 149.465467] should_failslab+0x29/0x70 [ 149.469413] __kmalloc_node_track_caller+0x24b/0x11b0 [ 149.474652] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 149.480058] ? netlink_sendmsg+0x76e/0x1350 [ 149.484426] __alloc_skb+0x2cb/0x9e0 [ 149.488168] ? netlink_sendmsg+0x76e/0x1350 [ 149.492532] netlink_sendmsg+0x76e/0x1350 [ 149.496738] ? netlink_getsockopt+0xc60/0xc60 [ 149.501275] ___sys_sendmsg+0xec8/0x1320 [ 149.505397] ? __fdget+0x4e/0x60 [ 149.508812] ? __fget_light+0x57/0x700 [ 149.512736] ? __fdget+0x4e/0x60 [ 149.516154] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 149.521568] ? __fget_light+0x6a3/0x700 [ 149.525613] __x64_sys_sendmsg+0x331/0x460 [ 149.529892] ? ___sys_sendmsg+0x1320/0x1320 [ 149.534244] do_syscall_64+0x15b/0x230 [ 149.538173] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 149.543380] RIP: 0033:0x455a99 [ 149.546582] RSP: 002b:00007f54c43bdc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.554326] RAX: ffffffffffffffda RBX: 00007f54c43be6d4 RCX: 0000000000455a99 [ 149.561625] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000013 [ 149.568916] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.576214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 149.583519] R13: 00000000004c0e59 R14: 00000000004d0cf8 R15: 0000000000000001 14:09:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) chown(&(0x7f0000000280)='./file0\x00', r3, 0x0) r4 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)='(nodev+^posix_acl_access\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r4, 0x11000000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x5c) r5 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, 0x0) keyctl$set_timeout(0xf, r5, 0x9) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x0, 0x0, 0x100, 0xce89, 0xa00000, r2}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000005c0)=""/132, &(0x7f0000000300)=0x84) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) 14:09:10 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 14:09:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') readv(r0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/253, 0xfd}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000008c0)="295ee1311f16f477671070") ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000d00)={{0x2}, {0x0, @random="90da5bc97747"}, 0x8000000000008, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 'syzkaller0\x00'}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1) 14:09:10 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x8, 0x0, 0x8000) 14:09:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="ffffff000a000200abaaaaaaaaaa0000"], 0x2}, 0x1}, 0x0) 14:09:10 executing program 7 (fault-call:1 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) [ 150.176699] FAULT_INJECTION: forcing a failure. [ 150.176699] name failslab, interval 1, probability 0, space 0, times 0 [ 150.188182] CPU: 1 PID: 6936 Comm: syz-executor7 Not tainted 4.17.0+ #9 [ 150.194962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.204339] Call Trace: [ 150.206979] dump_stack+0x185/0x1d0 [ 150.210653] should_fail+0x87b/0xab0 [ 150.214411] __should_failslab+0x278/0x2a0 [ 150.218690] should_failslab+0x29/0x70 14:09:10 executing program 2: socket$nl_xfrm(0x11, 0x3, 0x6) syz_emit_ethernet(0xe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@generic={0x600}}}, &(0x7f0000000000)) [ 150.222623] kmem_cache_alloc_node+0x157/0xc80 [ 150.227244] ? __alloc_skb+0x202/0x9e0 [ 150.231183] __alloc_skb+0x202/0x9e0 [ 150.234928] ? mutex_lock+0x31/0x90 [ 150.238613] ? _cond_resched+0x3c/0xd0 [ 150.242533] netlink_dump+0x407/0x1550 [ 150.246463] __netlink_dump_start+0x1131/0x1270 [ 150.251189] ? genl_rcv_msg+0x1850/0x1850 [ 150.255381] genl_rcv_msg+0xec7/0x1850 [ 150.259328] ? __msan_poison_alloca+0x15c/0x1d0 [ 150.264055] ? __should_failslab+0x278/0x2a0 [ 150.268499] ? genl_rcv_msg+0x1850/0x1850 [ 150.272676] ? genl_lock_start+0x180/0x180 14:09:10 executing program 3: [ 150.276943] ? genl_lock_dumpit+0x130/0x130 [ 150.281315] netlink_rcv_skb+0x37e/0x600 [ 150.285422] ? genl_unbind+0x350/0x350 [ 150.289362] genl_rcv+0x63/0x80 [ 150.292676] netlink_unicast+0x1680/0x1750 [ 150.296959] ? genl_pernet_exit+0xa0/0xa0 [ 150.301148] netlink_sendmsg+0x104f/0x1350 [ 150.305449] ? netlink_getsockopt+0xc60/0xc60 [ 150.309991] ___sys_sendmsg+0xec8/0x1320 [ 150.314121] ? __fdget+0x4e/0x60 [ 150.317537] ? __fget_light+0x57/0x700 [ 150.321471] ? __fdget+0x4e/0x60 [ 150.324887] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 150.330301] ? __fget_light+0x6a3/0x700 [ 150.334344] __x64_sys_sendmsg+0x331/0x460 [ 150.338626] ? ___sys_sendmsg+0x1320/0x1320 [ 150.342978] do_syscall_64+0x15b/0x230 [ 150.346914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 150.352126] RIP: 0033:0x455a99 [ 150.355336] RSP: 002b:00007f54c43bdc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.363077] RAX: ffffffffffffffda RBX: 00007f54c43be6d4 RCX: 0000000000455a99 [ 150.370369] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000013 [ 150.377663] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.384949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 150.392242] R13: 00000000004c0e59 R14: 00000000004d0cf8 R15: 0000000000000002 14:09:10 executing program 1: 14:09:10 executing program 0: 14:09:10 executing program 2: 14:09:10 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) 14:09:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") pread64(r0, &(0x7f0000000040)=""/33, 0x21, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") pread64(r0, &(0x7f0000002000)=""/4096, 0xffffff68, 0x0) 14:09:10 executing program 6: r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0x0) 14:09:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)="696c6c696e6f697300755b78d018def5e0c266c028d7c6502e0dea439c98e589db3d27b5a0ae4b0c19a9c149e423ef7ef3c2fcf254d2dbd0c3bbe8a7d58276b9051f0a065470d400a35d0f5994f1fbbf25000000000000000000", 0x5a) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x800000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0x5c60db85c3269ea5, 0x20020007, &(0x7f0000000000)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 14:09:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:11 executing program 7 (fault-call:1 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:11 executing program 0: 14:09:11 executing program 2: 14:09:11 executing program 4: 14:09:11 executing program 3: 14:09:11 executing program 6: 14:09:11 executing program 1: [ 151.174741] FAULT_INJECTION: forcing a failure. [ 151.174741] name failslab, interval 1, probability 0, space 0, times 0 [ 151.186176] CPU: 0 PID: 7000 Comm: syz-executor7 Not tainted 4.17.0+ #9 [ 151.192951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.202318] Call Trace: [ 151.204946] dump_stack+0x185/0x1d0 [ 151.208612] should_fail+0x87b/0xab0 [ 151.212367] __should_failslab+0x278/0x2a0 [ 151.216658] should_failslab+0x29/0x70 [ 151.220583] __kmalloc_node_track_caller+0x24b/0x11b0 [ 151.225821] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.231214] ? netlink_dump+0x407/0x1550 [ 151.235324] __alloc_skb+0x2cb/0x9e0 [ 151.239071] ? netlink_dump+0x407/0x1550 [ 151.243199] ? _cond_resched+0x3c/0xd0 [ 151.247117] netlink_dump+0x407/0x1550 [ 151.251044] __netlink_dump_start+0x1131/0x1270 [ 151.255753] ? genl_rcv_msg+0x1850/0x1850 [ 151.259935] genl_rcv_msg+0xec7/0x1850 [ 151.263871] ? __msan_poison_alloca+0x15c/0x1d0 [ 151.268587] ? __should_failslab+0x278/0x2a0 [ 151.273025] ? genl_rcv_msg+0x1850/0x1850 [ 151.277204] ? genl_lock_start+0x180/0x180 [ 151.281471] ? genl_lock_dumpit+0x130/0x130 [ 151.285854] netlink_rcv_skb+0x37e/0x600 [ 151.289969] ? genl_unbind+0x350/0x350 [ 151.293910] genl_rcv+0x63/0x80 [ 151.297225] netlink_unicast+0x1680/0x1750 [ 151.301509] ? genl_pernet_exit+0xa0/0xa0 [ 151.305696] netlink_sendmsg+0x104f/0x1350 [ 151.309993] ? netlink_getsockopt+0xc60/0xc60 [ 151.314542] ___sys_sendmsg+0xec8/0x1320 [ 151.318664] ? __fdget+0x4e/0x60 14:09:11 executing program 1: 14:09:11 executing program 0: 14:09:11 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000180)=0x7400, 0x5) 14:09:11 executing program 2: 14:09:11 executing program 3: 14:09:11 executing program 6: [ 151.322075] ? __fget_light+0x57/0x700 [ 151.326001] ? __fdget+0x4e/0x60 [ 151.329422] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 151.334836] ? __fget_light+0x6a3/0x700 [ 151.338876] __x64_sys_sendmsg+0x331/0x460 [ 151.343158] ? ___sys_sendmsg+0x1320/0x1320 [ 151.347514] do_syscall_64+0x15b/0x230 [ 151.351446] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.356655] RIP: 0033:0x455a99 [ 151.359863] RSP: 002b:00007f54c43bdc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.367607] RAX: ffffffffffffffda RBX: 00007f54c43be6d4 RCX: 0000000000455a99 [ 151.374902] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000013 [ 151.382196] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 151.389494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 151.396787] R13: 00000000004c0e59 R14: 00000000004d0cf8 R15: 0000000000000003 14:09:11 executing program 2: 14:09:11 executing program 3: 14:09:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:12 executing program 1: 14:09:12 executing program 0: 14:09:12 executing program 6: 14:09:12 executing program 4: 14:09:12 executing program 7 (fault-call:1 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 14:09:12 executing program 2: 14:09:12 executing program 3: 14:09:12 executing program 2: 14:09:12 executing program 0: 14:09:12 executing program 3: 14:09:12 executing program 6 (fault-call:4 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:12 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x294801) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x0, 0x2}}) 14:09:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)="d1975191ed78e69c8757ae8ffb38c3369f60681f6517f1e00bd1be2674a7a43cd5c19efd6ab92d196f3f66042508ed1f1c90678446f30ad30af9a3430456d760", 0x40, 0xfffffffffffffff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x2, 0x1}, 0x8) socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x7adb37ff73779fd1, &(0x7f0000000240)={0x0, 0x1e, 0xfffffffffffffffd, @thr={&(0x7f0000000280)="bbe82b85be417d8466abb52bdbc0f3e4414faf866c6e5464ad759be39a0c7d91db4a993d4c584ec0005989f75c5fd2a47bbff38ab81d0e019d2ad306cc44e5debc9819bb35625920e8", &(0x7f0000000300)="cd654ec1b1507c3653928c349f023b7ea778087cbfc6cb5089fbec6f46f7ba3fb6c34b4d73900472884b474fb4c6cfbf14e047fae15a88dc6d6387d040449c1ef1debbb1b75c914c2f2a9e85287d5f8416cd944bd633cb7c6bbcc15a19bcea9979bcdf20371fa579850ef55c1e4c005f0625474c6b798174da4f962a30951e20feac3bb05c7816a03491b1ff01f43a0298a76ee41f6f611736d861269c7c3833fce5e55c6084337c224134e25c64f9758e080d"}}, &(0x7f0000000080)) [ 152.288662] FAULT_INJECTION: forcing a failure. [ 152.288662] name failslab, interval 1, probability 0, space 0, times 0 [ 152.300095] CPU: 0 PID: 7048 Comm: syz-executor6 Not tainted 4.17.0+ #9 [ 152.306877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.316252] Call Trace: [ 152.318887] dump_stack+0x185/0x1d0 [ 152.322565] should_fail+0x87b/0xab0 [ 152.326332] __should_failslab+0x278/0x2a0 [ 152.330631] should_failslab+0x29/0x70 [ 152.334571] __kmalloc+0xbe/0x350 14:09:12 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x10000) fcntl$notify(r0, 0x402, 0x80000034) ioctl$KDSETMODE(r0, 0x4b3a, 0x11) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback=0x7f000001}}}, 0x80, &(0x7f0000000440)}}, {{&(0x7f0000000c00)=@can={0x1d}, 0x80, &(0x7f0000001100)}}], 0x2, 0x0) 14:09:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b}}) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xfffffffffffffff9, 0x141002) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0x7f, @local={0xfe, 0x80, [], 0xaa}, 0x5}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x8000}, 0x8) [ 152.338076] ? __kthread_create_on_node+0xb2/0x7b0 [ 152.343043] ? __kthread_create_on_node+0x14e/0x7b0 [ 152.348105] __kthread_create_on_node+0x14e/0x7b0 [ 152.352997] ? __msan_poison_alloca+0x15c/0x1d0 [ 152.357724] ? loop_attr_do_show_dio+0x150/0x150 [ 152.362525] ? lo_ioctl+0x3163/0x4450 [ 152.366365] kthread_create_on_node+0x243/0x270 [ 152.371121] ? loop_attr_do_show_dio+0x150/0x150 [ 152.375922] lo_ioctl+0x3163/0x4450 [ 152.379603] ? mntput_no_expire+0xad/0x17c0 [ 152.383988] ? lockref_put_or_lock+0x41/0x370 [ 152.388644] ? lockref_put_or_lock+0x262/0x370 [ 152.393287] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 152.398779] ? terminate_walk+0x665/0x6e0 [ 152.402984] blkdev_ioctl+0x2290/0x4f80 [ 152.407010] ? kmsan_set_origin_inline+0x6b/0x120 [ 152.411913] ? kmsan_set_origin+0x9e/0x160 [ 152.416201] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.421599] ? kmsan_set_origin_inline+0x6b/0x120 [ 152.426510] block_ioctl+0x16f/0x1d0 [ 152.430271] ? block_llseek+0x190/0x190 [ 152.434275] do_vfs_ioctl+0xcbd/0x24b0 [ 152.438215] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 152.443603] ? __fget_light+0x6a3/0x700 [ 152.447631] ? security_file_ioctl+0x5e/0x200 [ 152.452191] __x64_sys_ioctl+0x280/0x320 [ 152.456296] ? ksys_ioctl+0x260/0x260 [ 152.460131] do_syscall_64+0x15b/0x230 [ 152.464067] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 152.469281] RIP: 0033:0x455a99 [ 152.472487] RSP: 002b:00007f16f08f2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.480250] RAX: ffffffffffffffda RBX: 00007f16f08f36d4 RCX: 0000000000455a99 [ 152.487542] RDX: 0000000000000013 RSI: 0000000000004c00 RDI: 0000000000000014 [ 152.494836] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.502129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 152.509417] R13: 00000000004be07c R14: 00000000004cc498 R15: 0000000000000000 14:09:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:13 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0xf9, r1, 0x1, 0x0, 0x6, @random="bc87245cfd78"}, 0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000100)=[@authinfo={0x18, 0x84, 0x6, {0xfffffffffffffffe}}, @sndinfo={0x20, 0x84, 0x2, {0x401, 0x200, 0x9, 0xffff, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x2, 0x2, 0xfffffffffffffff9, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x20, 0x1, 0x208, 0x2306, 0x1000, 0x2, 0x0, 0x0, r2}}, @init={0x18, 0x84, 0x0, {0x80, 0x4, 0x7fff, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3ff}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback=0x7f000001}], 0xd0}], 0x1, 0x0) 14:09:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x8) 14:09:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045438, 0x6f3000) 14:09:13 executing program 6 (fault-call:4 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:13 executing program 4: r0 = socket$inet(0x2, 0x805, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x2, 0x7fffffff}) sendmmsg(r0, &(0x7f0000008c80)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)='G', 0x1}], 0x1, &(0x7f00000005c0)}}, {{&(0x7f0000007980)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x80, &(0x7f0000008b80), 0x0, &(0x7f0000008bc0)=[{0xb0, 0x10f, 0xffff, "2c3bdc7b10fd319f6aeb8e43bda68b03eb24f62830d00590a34312cb72d7b34521b0504d32303682cadebea2d7e47d8090e67a1e92154b96c2e12bf3171a47068dedff2b036dd90a2a23df20407bfebe579e34cdeb59d4bba5d3626d16070b19f9921c51162356e924397db556fd79902f2d996d7182da9c7d0b9e77a5910818d24cea2dc05ebf327988a8ebcbea0c14727c74ef02dca1644b793f8eba7f58e3"}], 0xb0, 0x40000}, 0xffffffffffffffff}], 0x2, 0x4) 14:09:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) accept4$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0x1c, 0x800) write(r0, &(0x7f0000000040)="06", 0x1) r1 = socket$inet6(0xa, 0x1000000000006, 0x20000005) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={r2, r3/1000+30000}, 0x10) 14:09:13 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4}, 0x5) r0 = socket(0x11, 0x80002, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x5, 0x1000, 0xfffffffffffffffc, 0x7fff, 0x175}, 0x2}) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) [ 153.127385] FAULT_INJECTION: forcing a failure. [ 153.127385] name failslab, interval 1, probability 0, space 0, times 0 [ 153.138777] CPU: 0 PID: 7089 Comm: syz-executor6 Not tainted 4.17.0+ #9 [ 153.145556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.154931] Call Trace: [ 153.157579] dump_stack+0x185/0x1d0 [ 153.161284] should_fail+0x87b/0xab0 [ 153.165048] __should_failslab+0x278/0x2a0 [ 153.169342] should_failslab+0x29/0x70 [ 153.173261] kmem_cache_alloc+0x129/0xb70 14:09:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x82bc, &(0x7f0000000300)) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000440)="01", 0x1, r2) r4 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000580), 0x124, r0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffffff, 0x6, 0x1, 0xa6b, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) accept4$packet(r5, &(0x7f0000000180), &(0x7f0000000280)=0x14, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="dbd4048d2e4024f13802aaedbd7d0ce7b456350346e4e6923a3e3027913766c6b41d296ea98f686c5e1f21c92feed576b82ef1e830cef4a790f7ea87c75026e2375fde5c49d994d6a5f339d6e938d6b47aa7cf521cb568c0542e0e1e24a1db732d89fe3b6f038c7d5a0006bf6cbc33341a04628eeb0e57086fb2b889f41fcf833d93eb5cbcf6b3c2a19c01c17bea569adacb203c79daa0e8cbb6f401", 0x9c) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crct10dif\x00'}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) [ 153.177443] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.182315] ? __kernfs_new_node+0x137/0x6e0 [ 153.186781] ? kstrdup_const+0x1ff/0x270 [ 153.190878] __kernfs_new_node+0x137/0x6e0 [ 153.195149] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.200030] kernfs_create_dir_ns+0x167/0x4e0 [ 153.204616] internal_create_group+0x21f/0x1860 [ 153.209336] sysfs_create_group+0x70/0x80 [ 153.213526] lo_ioctl+0x3735/0x4450 [ 153.217203] ? mntput_no_expire+0xad/0x17c0 [ 153.221587] ? lockref_put_or_lock+0x41/0x370 14:09:13 executing program 1: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x80, 0xffffffffffffff4a, 0x8, 0x81}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x200000088) recvfrom$inet6(r2, &(0x7f0000000000)=""/4, 0x798c2e70f51d0cc3, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x709000) bind$inet6(r2, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000100)=0x7ff, 0x4) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000001c0)=""/115) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x72fd06b}}, 0x3ff, 0x7ff}, &(0x7f00000004c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r4, 0x5}, &(0x7f0000000300)=0x8) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ptrace$setopts(0x2, r5, 0x5, 0x2) arch_prctl(0x1004, &(0x7f0000000080)="825f1bc18374a9a5065bbdc9f4e4fae9a8dbf0bf15b6b99b4624dce587240ff38e5be5e98161f82e47d0fc4aa9a4ab699ddb44f680448bc6772e021f22c29ba009425453427e9c9c9e2231c8de68a5378f3d5e591dbd5b804780bf8e49efc55f25f593d36d2244237bab2ca45801f3a344cffb4481b47a228a942e25dcfd67c7b8e9183da130802d4435a9963e821bd19066a061da01cfebbf631a43a7a240f0714e1c4bb1e4badd44fa") 14:09:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/56) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x24, 0x4, 0x70bd2c, 0x25dfdbfb, {0x7}, [@typed={0x8, 0x80, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x1, 0x5, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x480080) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x2, 0x2, 0x100, 0x3, 0x3}, 0x0, 0x8000, 'id1\x00', 'timer0\x00', 0x0, 0x8000, 0x200, 0x7fff, 0x5}) [ 153.226148] ? lockref_put_or_lock+0x262/0x370 [ 153.230794] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 153.236283] ? terminate_walk+0x665/0x6e0 [ 153.240490] blkdev_ioctl+0x2290/0x4f80 [ 153.244514] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.249426] ? kmsan_set_origin+0x9e/0x160 [ 153.253718] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.259116] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.264016] block_ioctl+0x16f/0x1d0 [ 153.267776] ? block_llseek+0x190/0x190 [ 153.271779] do_vfs_ioctl+0xcbd/0x24b0 [ 153.275719] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 153.281132] ? __fget_light+0x6a3/0x700 [ 153.285159] ? security_file_ioctl+0x5e/0x200 [ 153.289720] __x64_sys_ioctl+0x280/0x320 [ 153.293819] ? ksys_ioctl+0x260/0x260 [ 153.297648] do_syscall_64+0x15b/0x230 [ 153.301583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 153.306797] RIP: 0033:0x455a99 [ 153.310004] RSP: 002b:00007f16f08f2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.317747] RAX: ffffffffffffffda RBX: 00007f16f08f36d4 RCX: 0000000000455a99 14:09:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008911, &(0x7f0000000040)="290900311f16f4163a12ec") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x2, 0x4, 0x7, 0x1ff, 0x20, 0x8}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) [ 153.325037] RDX: 0000000000000013 RSI: 0000000000004c00 RDI: 0000000000000014 [ 153.332332] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.339626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 153.346921] R13: 00000000004be07c R14: 00000000004cc498 R15: 0000000000000001 14:09:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@reserved=0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000100)={@any=0xffffffff}) 14:09:13 executing program 6 (fault-call:4 fault-nth:2): r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r2 = fcntl$dupfd(r0, 0x406, r0) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000600)={0x2, 0x44e23, @multicast2=0xe0000002}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) kexec_load(0x5, 0x2, &(0x7f0000000400)=[{&(0x7f0000000640)="8c197e6bb4fd922c0b79aea53ecccfac4bec2b1035db705fac7e5ee4dbdc4bb13aa13e6c7a38115f8271f06848dd419d1b39427acf80ae5a0786f42c069367658a88a9df3a7a12b3f3914b20e7aa9cc78b2b768d89b6e2c721b4c2ddaea40e5ad38352a6b74b78328de0b6f32bd26f7bb9a84c2e63baad983a3942eed0cf8996460e505cfc6ca5c36383bbcb1da7b778c1765050148ec707d85fa166e917fbf23a62a15ee81cf81428594c559e222fbbc1e40becfcdb86822b7050e186aaebb59fa7ab633e9d75f90cb810220693e36424767c7ec8d8fca1f7aff471ff3836550e7b7eaab436994169af998b1cf86a9d9879c0d8de8cf264fa15b2861454da06f907bd3e83f4ce6b22c0a8edff3cb6c814af2c2eed99b677abefcf86e3acec68b664f9affad5374a0f51ce826bb601262162622b97d05ee69c9f60ae76d7f954499d8a9a873a94249cb27621184b71069aba0be04810467867359313cd9a7d41b22b557c0ec9df9ff2724c3802499c9b816942fc348099f0b1ecd01cd3470000c6c9894a06b3124feef258239fc87ed9a535089515c242be1d06bde8cf74ffc947d2e70221089f520f08ac7b9671ce69d41559c16ee2e2c3efb1057ea57837d90b64c907ef41ee7fb06cde99125ac66ed18e0defcae1fa1d23b1f3fe2d489d270a86621c71004bfea634e9fbde3415ddf614e9c789fe560569f9de83d2ca7acb3b0c8148b913802b5e585384c61ec9c98a7a549ef74f44f19cf6181f0cae9f8e2ee7d24efa35e252f8d0c12c9f247bbc40177e51f6c6539e24ded6c6726561cb03065c7696a67743790a4a0080e9ffdfa67e7e5294496fe80dce31424f4c94fe1f1926c0deda3d51f116dad2e09d47c82dde3b8b577e288b1d505728144efad63cbfd6bd3546df1b61a15519f914e51b39094358cbb40d1ad5e31e5fb6062d09614e14420f2776354f6826a4936b3c8af4bd6071b904cfc107d2e65a1fa5cca2ec27bb110de61470a3a6a4305114f4f18157922dc29cd928b8f35aae699cf00d7c22ea0a5b6fa45ea0de7c11a5e4c05e9e5bd777aa3907245e489ad213d9264f409872d1e482127e5eb64f7da502853baf46f97d233f95ab9cae39d92eb1d3697136de933b6d4951a9ac191eb2ef12c304ab659b26f6d7d902ed42c064d67a8937bec133879008bd4dbd6af2bedd02f944c3de3a02890b72592b905f555aeff9e764bc024762b492a9b5bb317f0514a8ae4c4713599452e941c09cbd7ecc05fd2d278d35608ec938ddecd3c2de16751c389fea6e8d932d7bbac250cbf1f2692fb9c3a3cb9260d9aacc4b0536ab280cc8c46c2e5c52559fde6be37bf33f10acefb54a3a6e3a99a3c233530ae8a3bb404e0b2f23f091a7d7c65d74c278785215bbbb0aa299e0d4ebc81a1116fa77e775964284b7ffcd9e2dc2645ec74b85a5ae0831855ef9804a8b162c0ac33144e242fb64995ae0b3c74502306435f5f6dddb919f784ee8be11bf46187a484c34f51fa5f77e26a874358a6d029dab466750161d4a67c7d79b72f57e0eebe920f579b3709d21854b31de9572b62c403cbc38a83d06c50b984e83b56acbacb0577d1e237a743b02b4528b535088c1d4c7e01e93438f809a41493ce74ab902ec3be2f9884615ac7884fcb42ced16b3b245283fe178239415811405d7a68505c2d0b5f1d210ad381638140249e678fe8e54833f262ce1ea2c0d3790a791f445b55b9186d8dacdf1d591ed6325c0138a7b1e379e927d0ee2ec593770c23868b28ebc8d5d6e4ec4fe636e4eedefc1ab3971cd00a4f1d6e456c7c62743d47d2a8b025ab7c22fa2c691f718fd4f0b93e81264e3d611842f2220ab67c7c837e9a9d595870aeace5ce832a51085983a783a7329b1e824039cc7e289821819942b4b7fae512b27aeb57921de7210a39753c6a8befcfa1cc9f30810f369ce435df42905aae63e42735884ff422fd8e42e51180486df08518894b153ce3d219bddfdfda1e087b6f3e298eff51bc1382115e938fcc351125c83c004d6df001404717aaa81a670222b39263b01cf180b207830d21665172aa4eab9746a3a5d9ac894f29c33300d5998e8d57829fe86a28979e85290033428978306015b26361fb69b02ade64d5a35acbbca1cf95079ed64ec7dfab87d7faff68c271268caf5cf2797bc0db1701cf60c6db54313b31a1cc6213f61a67e416a63b1e5ec00ff31b1a0123fe6f2fb089f175f905f46113c0e9f8e945e6c4d0dda1fa689678bcb86e571605589506da0995eba45217ee2562046dbf88913cb34f6d92fe03ad81a5ebd9cbac35d8ada02df3d172e8d62f1a73014458d595ffba0c31ad313d0d2e80141972a47cc6151bad428f68013d7fb4373ac08e09aa8e847d8cd102d00b7ccb7342e9f24d4211cb8cbc6cd21e18a2210deaa7728a7ebbd62a8cb693fec479a1d9bc08a43dd826de2364e1f5ef5761e8ce9ee191db371fb102ceddb7755126b47c289d433eb3fcce52eb0dd98b27ae023eb4ca4b2b55f2c76991724de5f327a657fc50b7283bd8832718106395f28a0def7180e10ba9c05f35b1c384fa07020ebaac3571684160210c8433e7fd7c291ec95d66126c9621133a631946d724b9f48add1d7f646ec28da6b486d6a88cafa1974d5330c8efb1e6d458a349f9ce8450999f4c406838c6d82f6267cf67131f018aec82fa3d6c26eb013636d3a4e38cab96f68fdef62efe6058b9277bc4676e36e997c0f64baf51239dfd7c5bd629c59145c07d7545f49f9146f87828a4edf29dd5acb8166cc921e17d595bad532d4f4f0543b9fa02e51d1fca51c23ed3f2f777202ca11a34863627634bfe3d0b1c4b44028c7ec16be94f9b1030f86cb6d71d4a468d8720c2fae91df42b171e26f917af4285dc74f335bcf4fa1d33d60e02f4a8586f7f6de88e8d5b3d75b3b7ba39a863ba78c0baa43eaa95f8b44f2b1789ef6c27424acaaa7884b2aa74c4a3fdafef8b1a330d80e0c17bc46e061fcb166c3c58cad994ed2aec46cd7d1f76f80d353c0c9410c9140bdfe17147ab24078b24f0262cfbb3325ac02cdd8e6a70c69f67163a1b8c1071695d2ca0dc872f3cc815f75d958fefc5c5baffdc124311cde4812fcc9dffad199b52896ab989a1de73c45f27a5b370061682a7defee9f67bd62693de77a158fdff0a795fd54edc34838237b25049ac8f9ff29f195167930f4c02731b9092d11dd04991d379f2a3ff7a8ad0728ec31a786bea6dbd17f143c8682392808d208fc472e4c675ca50fd2526d92a2589f9f856e3af0be781a0a122aa87a4de645103bd361f6ca0c01f7ba31f2c2277029c0a9bf1c3efad64d67bb47c3e4e6b94c495797e9746e79db84e5fcb9ba21e3fe47e28e6d398e565e05405ce3e1284451b90bd19037f7dd59d831cfa87332b8e24f1c4bdcc3f17331b301e0e8d33bad2527d1b83caf12961c2426e32b885ef8771ae7d178a706713f5ce0651820a822aa30f44348838a6809929ca5a9422c719e12075f94d495dc35cc39b9cf824e8c6f203e83edd5ad74156a95d9ef5282ecafaab865a15e57a860c227128002ddeb8d02892be8e62e7c278e35776ba495cb351892cbd316d3fc0e64e8a29402c26330c48606cfb7bb4a58029e8b65ac1783d4536ec9da4c633cf160e504276283f6943f40b3c00bed64943ef8515a20ec4fb057b38336c36cffcce5c86bf5a7024f3715d7685316f0fee5d33228b898884f91be5687467a53b02a4c67548e34af4940c69615e93d882f299c66208b2d67af3c479894ba66eacf399553d5692faed944edfa603686237db723647a7fdf96afd1d2d2794087dabae2666401e1243a01295029f4e935eee6d33c0d4729ddad55bbf903a308b55b5c6079126ff86a0b6d7d2f53c55eabe8108f7645eb09d2e41e47a245eb86bbae931c21d48b4a53f43baeb7c04e386b6c201b538ea871f6dc35e98a5ee4dbe5a753ae446c7e89686e75c506b248f36ac16b962c4b25e7867c1e9b3125ee314da7a9e9c0bf01f5a393919863325e706f49b82ab5a81e28a38788905d383fddb1a104ddc532b9798bd9f67cc135b81d54fa0c290bdc7019fdd0ef81df9c950e2ee770122159b462e1a05b578e0684d3add7f9c0fd9fd4e7308c4fe9c634d106a7b5a33a3bc60e9ad813adbf771bf98a8573ecc7f3c64697909fd89aeeac179e315c70e4736b285e6598e2f92969bbedae01b53fc7631ebc020839490bde962d778b4ceb1398f1285222ff0fc7cb93dbff93b5349149bbe32a22edbd997b2f89501f1ac491572ebf447f0a46195b829a9851cab84304ff14a94c6c55958839f53eddac7cfcb9a6c91a188765decea768654eb1e54ae916c0b5d90d87cd66461c8946f738d0e51ba83613eb3ed9b412c4dec1bc137e99ae547790423b50c8d4bdc818aa7b52c72920058e158a198820260b2ec892133c9d5d0e560e0f0f8d08cef050097112ae7073db6000b408e66c4dca784072b1adbf617a6574aec557e0d137eac959a602c7366a26218e2979f4dcf40b4ae1328d202f8728c40473fb51bdf7843fd18f5fbced9ae0d7ee7256ff2d8f2f4243179c24c0e7b42aa14fb0b036415f2b02a61cf1526c4c49ffdf21c8d4b5a6b4e85233241e8f015e47a75b85fac6cfcc4a8866b2ea920467dab8f9b2b6accdd73e290bd60d55f451dd18929b09755333311c44e5244eaa75bd7e8a716ee425b0e88a43e2847770d4806882d65dc3c1ae2bf8bae181cb23563ddb92c5f2059ad56e7dbbefee8d555a8e84c53bcd7272dddee80ae40148b23ef9fc9e01402ae834fe0afb391ffd3b78a0e9fe6306ce5fdc0dff91c605cc841c15c1578073905be735bc3795f7f0f9fc31d9f717baf473620131b2a262f40cfed7e124c8501af0147e02c42b6abef2b77ec76857a67df8e91014ec06ac087ea585392b18a5b704ad4aae0078b9bd8a61b68b08652d150042639dccfe0561420cb8a8d4845d0d3a2029a27a0321debb350f33b027708959e1f0af60cefd323cc0d662a0e60a6db296bf11cffe428a6a9f5687cf98e3131cb24aa9516a3ca638ed7a47d4804a0a2a92fa943a01e82c87f4819b15b7e8f93111c3817b6c34a6767f9b4bfc5dd6f078f64074b39d0ca4b9e0efb90b1b15111f5e66c5ab7a336d979b74e9065fd41f3d2a21e3e81e8d4db507d3823594401dd66531b7b1c4533884a0566e9166c9557f4427f616517cded90ce97b07730ab98894b71bd8dfcc0adb38d6e6ecbbf67bb187e19ae00619f337484ea0b6e19069c56b67452be530f9d37dd107e78f62d5468bfc4db24a1503168db41242fa08f6c175c0f91e73531abe3e6a9cf7552fa65572f3115c2d796bd5f1d11088a5bc48d794c62b6ab16e48004a5e89288d1b7cd43a147dd08f5625f74134d1b45dde8eac84251fcdbc9923625911ac86fc2813555fcae6cd1252f1d0d93d2af70bc1a9362d3817858d6d347586d3a263ea6d8fae1a63f7a59afc3505be27f7d1f724a5bcc37fa7269e2f100b9498e86bc1c7e3e85d87729bb9d027be75b4078510d427526e4765c90c6d38c372865ef3a47965cdbeef749a353cc30c0409d944ee298b04aa3de1d8971d9f3516e77c40fa78a48ff612730ac66c21656abc9b22ba2e68598f6feb7ee24fcb313144eda2f60c789dc376627e4be26c717366cf6bee5dc1b2538b8e13b716991f2b4f0b93b58b64def632f78f16634d17f01861b4b14aa20957a4a5b3bf218569add3f6d8d9c0ad5d55968a57d56f60007f11c7e0cf0b1465e44e00837c", 0x1000, 0x2e83, 0x73d3980f}, {&(0x7f00000003c0)="8519e51911b4112855b9fd96e5d37394fd898112af5418fbc960d0b31aa76b296a84ba", 0x23, 0xc8, 0x6}], 0x30002) shutdown(r3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000340)='ns/net\x00') pipe(&(0x7f0000000380)) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000001c0)) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xb0, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffb8f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x38}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14:09:13 executing program 4: r0 = socket$inet(0x2, 0x200000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x1000000000d1, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0xd, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff9}}}, 0x90) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000100)) 14:09:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/4, 0x1ea, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 14:09:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x7000000000000000, &(0x7f00000009c0)="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") getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0dd2800000000000000bf700000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 14:09:13 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x402, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x3, 0x3, 0x998, 0x50f, '\x00', 0x100000000}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x6, 0x0, 0x7fffffff, 0x0, @tick, {}, {}, @result}], 0x30) 14:09:13 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xdfffffffffffffe, 0x10000000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:13 executing program 7: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8001, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}, 0x3ff}}, 0xffffffffffff7fff, 0x1000, 0xb031, "937a73570a0b3004d305b37a82e213e2ddce7b2727d283660dc8e2f7353544dd06d94aa1df8f96efa509a7567f9e6f13f895120ad75b213f85edd7051cab2dfb29eaf185acccb259cdb84e89d8684286"}, 0xd8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0x29, 0x1, 0x100000000, 0x7fff, 0x8, 0x3, 0x0, r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$3(0x3) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="00fdff0000000000000000010020000000000000"], 0x14}, 0x1}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2800, 0x0) 14:09:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1000016f4779e1070") r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xb2, 0x200) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000001000/0x1000)=nil, 0x1000}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, &(0x7f000000affc)=0x20) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000040)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) 14:09:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = dup(r0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x2eaf, 0x0, 0x8, 0xfffffffffffffffb, 0x2}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2400000052001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 14:09:14 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40040, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 14:09:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) rt_sigreturn() [ 154.123289] ------------[ cut here ]------------ [ 154.128192] sysfs group 'loop' not found for kobject 'loop0' [ 154.134213] WARNING: CPU: 0 PID: 4484 at fs/sysfs/group.c:235 sysfs_remove_group+0x1d7/0x5f0 [ 154.142809] Kernel panic - not syncing: panic_on_warn set ... [ 154.142809] [ 154.150213] CPU: 0 PID: 4484 Comm: syz-executor0 Not tainted 4.17.0+ #9 [ 154.156980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.159879] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.166354] Call Trace: [ 154.166403] dump_stack+0x185/0x1d0 [ 154.166461] panic+0x3d0/0x990 [ 154.166511] ? disable_trace_on_warning+0x18/0xd0 [ 154.166565] __warn+0x40f/0x580 [ 154.191256] ? sysfs_remove_group+0x1d7/0x5f0 [ 154.195809] report_bug+0x72a/0x880 [ 154.199502] ? sysfs_remove_group+0x1d7/0x5f0 [ 154.204051] ? sysfs_remove_group+0x1d7/0x5f0 [ 154.208581] do_error_trap+0x1c1/0x620 [ 154.212521] ? vprintk_func+0x517/0x700 [ 154.216548] ? sysfs_remove_group+0x1d7/0x5f0 14:09:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) r2 = dup(r0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x100000001, 0x4) write$eventfd(r2, &(0x7f0000605ff8), 0xffbe) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:09:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c000, 0x80) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x8}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400fdff00000000000000006b9cf09000000000"], 0x14}, 0x1}, 0x0) 14:09:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffffffffffe, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x80000001, 0x80000000, 0x8, 0xfffffffffffffffb, 0x3}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, 0x84) rt_sigpending(&(0x7f0000000040), 0x8) 14:09:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) rt_sigreturn() [ 154.221097] do_invalid_op+0x46/0x50 [ 154.224842] invalid_op+0x14/0x20 [ 154.228317] RIP: 0010:sysfs_remove_group+0x1d7/0x5f0 [ 154.233433] RSP: 0018:ffff880153daf730 EFLAGS: 00010286 [ 154.238811] RAX: 0000000000000030 RBX: 0000000000000000 RCX: 0000000000000000 [ 154.246099] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 154.253389] RBP: ffff880153daf798 R08: 0000000001080020 R09: 0000000000000002 [ 154.260679] R10: 0000000000000000 R11: ffffffff86575950 R12: ffffffff8aa09f94 [ 154.267971] R13: 0000000000000000 R14: ffff8801d3d8a4c0 R15: ffff8801cc6ca618 [ 154.275289] ? write_ext_msg+0x950/0x950 [ 154.279418] loop_clr_fd+0x889/0xf70 [ 154.283185] ? rcu_all_qs+0x32/0x1f0 [ 154.286957] lo_ioctl+0x38e/0x4450 [ 154.290558] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 154.296055] ? tracing_generic_entry_update+0x230/0x2b0 [ 154.301474] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 154.306974] ? perf_trace_buf_update+0xe3/0x130 [ 154.311691] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 154.317192] ? perf_tp_event+0xcee/0xd50 [ 154.321303] ? kmsan_set_origin_inline+0x6b/0x120 [ 154.326194] ? __msan_poison_alloca+0x15c/0x1d0 [ 154.330921] blkdev_ioctl+0x2290/0x4f80 [ 154.334950] ? putname+0x1d8/0x210 [ 154.338552] ? kmem_cache_free+0xec/0x2bc0 [ 154.343009] ? putname+0x1d8/0x210 [ 154.346601] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 154.352017] ? kmem_cache_free+0x89d/0x2bc0 [ 154.356398] ? kmsan_set_origin+0x9e/0x160 [ 154.357925] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.360772] ? perf_trace_run_bpf_submit+0x1e9/0x3d0 [ 154.360807] ? kmsan_set_origin_inline+0x6b/0x120 [ 154.360866] block_ioctl+0x16f/0x1d0 [ 154.360898] ? block_llseek+0x190/0x190 [ 154.360947] do_vfs_ioctl+0xcbd/0x24b0 [ 154.389613] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 154.395007] ? __fget_light+0x1f5/0x700 [ 154.399039] ? security_file_ioctl+0x5e/0x200 [ 154.403579] __x64_sys_ioctl+0x280/0x320 [ 154.407679] ? ksys_ioctl+0x260/0x260 [ 154.411516] do_syscall_64+0x15b/0x230 [ 154.415442] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 154.420651] RIP: 0033:0x455907 [ 154.423859] RSP: 002b:0000000000a3eab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.431596] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000455907 [ 154.438885] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000013 [ 154.446174] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 154.453466] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 154.460754] R13: 0000000000001380 R14: 0000000000a3f160 R15: 00000000007024c0 [ 154.468509] Dumping ftrace buffer: [ 154.472038] (ftrace buffer empty) [ 154.475730] Kernel Offset: disabled [ 154.479350] Rebooting in 86400 seconds..