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", 0x1000}], 0x4, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5a3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xa8}}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c00)="48cf3f2f99390123d9d0e597b1cbf0486c540ae3c6ceb7cce64889e7fa3b65483249a5f254", 0x25}], 0x1, &(0x7f0000000c80)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffbd7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x715}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1662a321}}, @timestamping={{0x14, 0x1, 0x25, 0x4f}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xd8}}], 0x4, 0x4008004) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000e80)=""/161, 0xfffffed1}], 0x1, &(0x7f00000000c0)=""/33, 0x21, 0x6e01}, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) [ 1654.948746][ T3403] usb 4-1: new high-speed USB device number 68 using dummy_hcd 06:06:28 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="3be550323b0e98e29790adbf7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000001c0), &(0x7f00000000c0)=0x68) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000080)={0x2, 0x8000}) [ 1655.035232][T15648] usb 1-1: USB disconnect, device number 46 06:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgrp(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1000}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00f5800000d9297d720400000000000000000000aa070900000000000000000000000000012f"], 0x7e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="b7ac66060f3d09eee3da7d57a02e4e364c864926", 0x14, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r4, r5}, &(0x7f0000000540)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000100)={'rmd160-generic\x00'}}) keyctl$setperm(0x5, r6, 0x50000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000300)=0x7fffffff, &(0x7f0000000440)=0x4) socket$key(0xf, 0x3, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000001c0)=""/225) [ 1655.282398][ T3403] usb 4-1: device descriptor read/64, error 18 06:06:28 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x6558}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1655.548675][T15648] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1655.694771][ T3403] usb 4-1: device descriptor read/64, error 18 [ 1655.818662][T15648] usb 1-1: Using ep0 maxpacket: 32 [ 1655.944830][T15648] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1655.965318][T15648] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1655.975409][ T3403] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1655.989621][T15648] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 06:06:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000280), 0x80000) copy_file_range(r1, &(0x7f0000000240)=0x7ada, r7, &(0x7f0000000300)=0x3, 0x1, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) [ 1656.260739][ T3403] usb 4-1: device descriptor read/64, error 18 06:06:29 executing program 4: syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109024400010102000009040000020206000305240000000000000009058103000000000009058202ff030000010905030200"/86], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2809}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@private2, 0x66, r8}) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="23e57ae023de43d2697e8148225e32f99ef6d877", 0x14, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000000)="62883e711eb26e5cf4787b1d41be28f3d6c7a71c55362dabaf4564f6e57ec79b38edb36e376f30622d91c0e85401358d600251ce115ec7882564ce3e5b6d8709e714acc2b9001556071f472496e6e72b5ae9134e25763935200b7d0f0f9360", 0x5f, r9}) [ 1656.375481][T15648] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1656.418897][T15648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.420601][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:06:29 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x8100}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1656.464121][T15648] usb 1-1: Product: syz [ 1656.510193][T15648] usb 1-1: SerialNumber: syz [ 1656.570558][ T7889] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1656.591326][T15648] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1656.698723][ T3403] usb 4-1: device descriptor read/64, error 18 [ 1656.818806][ T3403] usb usb4-port1: attempt power cycle 06:06:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000000)={0x2, 0x9}) [ 1657.010082][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:06:29 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}]}) 06:06:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8c002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="014f040000000000000060bc7d9400352c00fe83000000000000000000001800000000012f"], 0x7e) [ 1657.544608][ T3403] usb 4-1: new high-speed USB device number 70 using dummy_hcd 06:06:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYRES32], 0x7e) 06:06:30 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xf000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x7a3880, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/151, 0xfe7f}], 0x1, &(0x7f00000000c0)=""/18, 0xffda, 0x6e01}, 0x3f00) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, 0x2, {0x8000000000, 0x44, 0x0, {0x6, 0x1, 0x0, 0x7, 0x400, 0x4, 0x7ff, 0xf6, 0x5, 0x40, 0x2, 0x0, 0x0, 0x7}}}, 0x78) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) [ 1657.678727][ T3403] usb 4-1: device descriptor read/8, error -71 [ 1657.898691][ T3403] usb 4-1: device descriptor read/8, error -71 06:06:31 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x420}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) 06:06:31 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x0, 0x4, 0x1ff, 0x9}) syz_usb_connect$cdc_ecm(0x2, 0x50, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0xfd, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "f2fb16"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0xfff7, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x27, 0x35}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 06:06:31 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) accept4$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109023b000101003000090400000202060000052406000005240000000d240f01000000000000000000090582022000b2870009050302000001000039e799535bcb923f3c4a54d86a474cf5596fe5c617b2ea876d8272afd94611101b4762f38044bb1fc9325c6341f8ec245b798aa46b873d1d12b94a9d95d09481aaada6c69c58dcb50bcaac1f8a32e70a7b5d817952cff44b5b3d667624f8e9039019716ce5160ede73d6"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd922efc5b428d914df1269f29d22d1a76a2e7a5d2cae47dab280a62930a9cd38613308174b131b2a10f931cda75a96abfadd49a61443634dd68540887f886cca316b385ae2378f6a12b8d33dae9144aaeb2b159c3b5ba6e10f795ee903fd34efb76c5af7eaf94a8ab220e5d7f5a138571750a55086424a01066724a893da2ff6fe30005dc3"]}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$CHAR_RAW_PG(r3, 0x1269, &(0x7f0000000140)={0x1000, 0x0, 0xe, &(0x7f0000000100)="c9b42b03afe20fe6aa420ed112fe"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f00000000c0)) 06:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe800000000000caebffffffffffffa9ff0200000000000000000000000000012fb5c776509bba6893a93e4ca6e2522709000000000000006a323e5f20e510e54867a6983d3a6e9055b4bf24086ad355fb8c08b64948503867132af32716d7ec9f3985c0452e37d21380129784527e47059a6e334a9163166f617476b6b46160c1d08f9500b9d181a85ef4dca51e295b8d63b2ec60dbedabe6f44f4b02c8037036ba82eb9d63132d542c909a3e41df49021ea311a3cb0a709295"], 0x7e) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40080400}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x8c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x980}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffb}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf13}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf35}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x20048844) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x40, 0x28, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {0x0, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x29, 0x0, 0x0, 0x1, 0x12, @mcast1, @local, 0x8000, 0x7800, 0x7fffffff, 0x4}}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x35}, r9}, 0x14) [ 1658.112695][T15648] usb 1-1: USB disconnect, device number 47 [ 1658.274035][ T8000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:06:31 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x34000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1658.531278][ T29] audit: type=1800 audit(5890773991.445:121): pid=7963 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=15988 res=0 06:06:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) [ 1658.668739][T15648] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1658.698601][ T3403] usb 4-1: new full-speed USB device number 71 using dummy_hcd 06:06:31 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee884b2d312d8342f647388e323526b900a2b0aa7d3deca7cb3ace2e8ce630207ac0ee11205b3ff42569d05cae5aa746fd48029ef268686129030000003981a09df1923076e661e91fd967d6c5b428d914dff9ffffff00000000c4e07bbfb7b41d1c2dec76f66b35323124c608"]}]}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffb) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYBLOB="cb62df75e891229e790a352e666d434b2be63e013464bec299594f77145e3c13fc6169465079f530f3bd5593eff8ad9b617a5ce4d3a348bc6a88a5be122a3c599f17deabf77de700891caeba39b4dc0d7871884a72535249561fa14576151ac28aaa14d1a0ee8c9b4f5b039459afb29f9e301c30e2d663446f9720a5784af52f217abb48cf42e6f1f9de74b170c0b69c47480bddbbcad8b466674b1fb52b37a04f2553d7ff739977ee9fabaf46eb9fa7e988d34074ee2af6ed36e91437d5edf7c86df3b2e84633d3caec86fec0a55ca858c87632b5285aa26984ac8f3867f1e38fea1e6eb3841528c70af770fd8fc52b00f1e19c18e2a1d4a2", @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="040000000000f3ff00f2ffff0a0001006367726f757000003c000200380001003400009c5a4cde0074756e6e656c5f6b6579000004000280040006000c00070000000000000000000c0008000000000000f314d97374000000060005"], 0x74}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x40000, 0x8, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x66, 0x0, 0x1e, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, {[@generic={0x89, 0x12, "a83c7bebdc5200abf6db5aae2f80d9ff"}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={0x25c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000040) [ 1658.919203][T15648] usb 1-1: Using ep0 maxpacket: 32 [ 1658.930074][ T3403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1658.943701][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1658.957185][ T3403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1658.966227][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendto$inet(r1, &(0x7f00000001c0)="5a60064ea0d27b7ffbeafc03d18cc2a8233fa1ac1e25056667a57d612a2f2a221e8a3327487e597ac9f303a38c3e8dbc86c07c28908a1acb5d3a4b340735dea608fa224bc9213088c1bd076f5cce3d89abdef9ada66f5eac5ff9945b922c61660faebea80e9e15c262ef05cd2da714576bffdc924052bd1e961d204dc0301a204167a1a055763dd70471738dcd24f966342c770ae23efe8c360cbdfb0b66929e1ec94976fd4bbfdf7f13c80d6894a921cf7353425a52cc3746788a94e10bf3cd377c3b043855915abe164c2904149a35cdb7", 0xd2, 0x810, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="010031e838bbd1000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000020000000000000"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x9) [ 1659.045798][T15648] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1659.068604][T15648] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1659.078379][T15648] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1659.182606][ T3403] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1659.198457][ T3403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.206596][ T3403] usb 4-1: Product: syz [ 1659.227317][ T3403] usb 4-1: Manufacturer: syz [ 1659.242998][ T3403] usb 4-1: SerialNumber: syz [ 1659.256118][ T3403] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1659.272488][ T3403] usb 4-1: no configuration chosen from 1 choice 06:06:32 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x400300}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1659.309399][T15648] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1659.328689][T15648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.343715][T15648] usb 1-1: Product: syz [ 1659.363732][T15648] usb 1-1: Manufacturer: 㚽䌍嵴팑ⶈⲃ䝺踸㔲뤦ꈀꪰ㵽剕⻎‰쁺ꫮ䘢䣽鸂棲䉨툩뇓㤨꾁ਈ煮쉱ꃼを홧듅񚌔 [ 1659.395070][T15648] usb 1-1: SerialNumber: syz [ 1659.450282][ T7994] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1659.469814][T15648] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1659.487435][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1659.536184][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:06:32 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400001020301090244000101040000090400000202060000052406000005240000000d240f01000000000000000000090581030000000000090582db9400000000090503020000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) [ 1659.653019][ T29] audit: type=1800 audit(5890773992.565:122): pid=8012 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=15988 res=0 [ 1659.680127][ T2756] usb 1-1: USB disconnect, device number 48 06:06:32 executing program 5: ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x9, &(0x7f0000000080)=[0xeb, 0x2, 0x0, 0x86, 0x8000, 0x4, 0x7fff, 0x101, 0x0], 0x0, 0x30, 0x5, 0x5ea, &(0x7f0000000100)=[0x0, 0x8, 0x7, 0x0, 0x200020], &(0x7f0000000140)}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000280)=[0x6, 0x1], &(0x7f0000000300)=[0x29, 0x3, 0x9], 0x2, 0x4, 0xb70, &(0x7f0000000340)=[0xffff, 0x1, 0x8000, 0x6], &(0x7f0000000380)=[0x5]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x4, 0x70, 0x10, 0x9, 0xfc, 0x4, 0x0, 0x41c0, 0x80000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, @perf_bp={&(0x7f0000000240), 0x2}, 0x141, 0x3, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x9) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0xa) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x7e) [ 1660.458557][ T2756] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1660.698451][ T2756] usb 1-1: Using ep0 maxpacket: 32 [ 1660.787329][ T29] audit: type=1800 audit(5890773993.695:123): pid=8072 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=15892 res=0 [ 1660.818767][ T2756] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1660.828804][ T2756] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1660.838921][ T2756] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1661.009741][ T2756] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1661.019107][ T2756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.027092][ T2756] usb 1-1: Product: syz [ 1661.031700][ T2756] usb 1-1: Manufacturer: 㚽䌍嵴팑ⶈⲃ䝺踸㔲뤦ꈀꪰ㵽剕⻎‰쁺ꫮ䘢䣽鸂棲䉨툩뇓㤨꾁ਈ煮쉱ꃼを홧듅񚌔 [ 1661.047189][ T2756] usb 1-1: SerialNumber: syz [ 1661.073669][ T7994] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1661.089543][ T2756] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1661.150558][ T2756] usb 4-1: USB disconnect, device number 71 06:06:34 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xf0ffff}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88102, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROBES={0x5, 0x15, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc080}, 0x18000) 06:06:34 executing program 4: syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001300)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r2, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xa8, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 06:06:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20024841) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x70042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x400900) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0xfffffecc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r5, r9, 0x8}) 06:06:34 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="00201a9f0010000507000000009835d0ec67f89af23a3a3b26902f801908597c00"/44, @ANYRES32=r6, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x1a, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r6, @ANYRES32=r6, @ANYBLOB="edff0000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in=@private=0xa010100, @in6=@mcast1, 0x4e20, 0x2, 0x4e22, 0x7, 0xa, 0x20, 0x20, 0x32, r6}, {0x4, 0x1ff, 0x6, 0x3, 0x23b, 0xc01, 0x6}, {0x5c48fab6, 0x800, 0x8, 0xfff}, 0x47, 0x6e6bba, 0x2, 0x0, 0x2}, {{@in=@broadcast, 0x4d3, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x3, 0x0, 0x3f, 0x3, 0x71}}, 0xe8) r9 = open(&(0x7f0000000240)='./file0\x00', 0x111100, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x7, @local, 0x8}, @in6={0xa, 0x4e20, 0x1, @loopback, 0x7}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x4}], 0x84) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) [ 1661.211394][ T3403] usb 1-1: USB disconnect, device number 49 [ 1661.728442][ T3403] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1661.978368][ T3403] usb 1-1: Using ep0 maxpacket: 32 06:06:35 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1662.117026][ T3403] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1662.164721][ T3403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1662.182608][ T29] audit: type=1800 audit(5890773995.095:124): pid=8104 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16163 res=0 06:06:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x7e) [ 1662.237896][ T3403] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 06:06:35 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) [ 1662.418553][ T3403] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1662.427642][ T3403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 06:06:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000480)='security.evm\x00', &(0x7f00000007c0)=@v2={0x3, 0x0, 0x3, 0x6, 0xf3, "b459b92f21ceb51d10af6cf14a71473637a887dc810f51935c9e79268ab54fead4b682ebe158b9587f3bac6c672ef7e74f251e0e3e8fa543ee0baa09c65a1632afe1acd7d8bf2867b56161f4c06784f189d8ff854420a15bc47d2a06dff17645fe8b4166c84817a696cc61670e6340baf1dcc89ebe803af06faf23a1b3986dbb2eace3ddf28b3b9227b90b587cb0e23a7be4c6954ed6370ff8525e9e6e6247055b1e761cb1155c75695b1ebb5ba12143c2b9d4f0d714d5b490ca1b348ae1bb394f6663d9e209a2615bd3ede4ad15e843065e6c792165cc501dca2f89108b6728712e36e4718fbf827575fcf1405f48661c1b92"}, 0xfc, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000004c0)={'veth0_to_team\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/534], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x19c, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x57}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd3}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f5a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x19c}}, 0x1) close(r0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x80) [ 1662.474555][ T3403] usb 1-1: Product: syz [ 1662.493025][ T3403] usb 1-1: Manufacturer: 㚽䌍嵴팑ⶈⲃ䝺踸㔲뤦ꈀꪰ㵽剕⻎‰쁺ꫮ䘢䣽鸂棲䉨툩뇓㤨꾁ਈ煮쉱ꃼを홧듅񚌔 06:06:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000640)=""/99, 0x63}], 0x6}, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000240)) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) [ 1662.551039][ T2523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1662.558389][ T3403] usb 1-1: SerialNumber: syz [ 1662.564966][ T2523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1662.620122][ T8118] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1662.645646][ T3403] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1662.838341][T12084] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1662.909449][ T2523] usb 1-1: USB disconnect, device number 50 06:06:35 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1663.098372][T12084] usb 4-1: Using ep0 maxpacket: 32 [ 1663.248475][T12084] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1663.258420][T12084] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1663.269959][T12084] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1663.280548][T12084] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1663.291135][T12084] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 06:06:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000160bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bind(r3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @private=0xa010100}, 0x2, 0x3, 0x1}}, 0x80) 06:06:36 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x9f, 0x8]) [ 1663.478662][T12084] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1663.493579][T12084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.520889][T12084] usb 4-1: Product: syz [ 1663.547081][ T29] audit: type=1800 audit(5890773996.455:125): pid=8155 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16163 res=0 [ 1663.569142][T12084] usb 4-1: Manufacturer: 㚽䌍嵴팑ⶈⲃ䝺踸㔲뤦ꈀꪰ㵽剕⻎‰쁺ꫮ䘢䣽鸂棲䉨툩뇓㤨꾁ਈ煮쉱ꃼを홧듅񚌔 [ 1663.607496][T12084] usb 4-1: SerialNumber: syz [ 1663.659521][T12084] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1663.898280][ T3403] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1663.942645][ T2756] usb 4-1: USB disconnect, device number 72 [ 1664.158333][ T3403] usb 1-1: Using ep0 maxpacket: 32 06:06:37 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0xc021, 0x3}) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) 06:06:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80b0cc59bc5b670ac3800000000000000000aaff0200"/51], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 06:06:37 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x3) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)=[{&(0x7f00000013c0)={0x10, 0x3a, 0x400, 0x70bd29, 0x25dfdbfe}, 0x10}, {&(0x7f0000007880)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="4d3744fdf9c5f40c0372ed31d9602e776a12368c70bc0b38f2b26ce24e19e0bf5bf27220d223f406d6aa1860052856ccdbaa45d68e243bf1fae2b2a7191677701f8eec0ce9abc499016d1038aad3978a418dc52a8d454599e3cb814a34a921dd78fcf6e416c7bbef3db848e401df50713570a06e9c3150f0b2a16209604ac09dd3645a87137befa608ac9f14a9c71ba64fda1823ae5fe258a8484b909243d517141b96ebfa1fba40ec020ca9dad598607ae1051eaaf2d0b9ddb4d48eb4643ae60be8fa7a52ba706633615f80f8595d0aa0d6c50b0b5cd3439af1ed43c81dec7b08001700", @ANYRES32=0x0, @ANYBLOB="08002300c91756124dd3ad80bfc38f96a42e682ad666c6d4b2d5d6e8bd7d73bacf08f737817e888c771fdf7f3346b68b3ae634564c5b1b47a4f9777b0b770300cf72889185c0820e214ba8c5bcda7818f7a08ac38ce4dbb49f92d5fbeda7700a860d2c87cdc65c8af56b3d730bb9a9220627bd2180f26a600d77c20e9ad5b5a63c22863171fd122fa7dcbd4eb868208e22bda1ed09d4f44b8472a6a67e7ec49398982d5c2da7f21b70cd74068832bc61af4562c6c097f4fbd4f022c0ef5de976424f1fa5f9eebca98581e95388dff3f88890fa928c9a7339143f370e245f3516f3c55adfb4c0516196e0b481bc7b1b", @ANYRES32=0x0, @ANYBLOB='\b\x00%\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="09d9b1833a74e81db4c9b96e64e49706d67b3e3f6964a52b401f1a1327c49407e126771d82bce205e1c8167b63a6fceae62a2fe476f37a51ace53398c31e5d72fbc48eb9d6c320ca7ae5dd8bb2d7f1d3f3a68d45a9b41463f95b"], 0x2860}, {&(0x7f0000001400)={0x11d8, 0x7, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="fa792d3bd6569f8263f162228398585b00b6", @generic="854c692f924486994a9605ab3ee2cec09d91b44fa442055e7fa0e61cec8beb5f7fc980f9a86460145c7d18a37b83b286cf42b2f83cf50456dd7cfd5fbfc81d239f6fd3775b95b4e251855d144f86e41a4077963a97c3d44d323c0b6f82dfa78dcd51f367343466148add89e5bf79a62bc28d14907c9ba257ec02a3ced39291eb4f7c713d867f7deab471b3f3d3abfe436377d4fdc30590c0e96be4be54f0a313b025f404f4e4c0b2b52052d96f1df314c42770f3c59961473562123471ef91da5eab2ac555f5c94b4879", @generic="f41a8de6016540a0516e52d3d82d7ec972b2d2dbdc11176a6c350e6e4f179d692a56462e8976a1ccad9e5d933a9b60627439140afd6f1bed92ac6462ad8456a3a1eff1061ff9b3bdd5efaa476d59235bab4ac20ad0a4ffe3c9299c30c30eacaf48d13586d13a907cf916e34c3d6cd13f8a4d67c68ca4ee9d32655865ba2fdc62fbbe72974f9981a90166982ca6b0225a005288d17344cc4e4bb4281d7a962908fb49a3be90fe6c394f42b4fbd9e672f2a82e5a7051b972f376cd571f95d4a8329df9befe98a83b5f35ee32c6ca1e6ec3b5e7cec13b11fe96914aebe365b285f3d58703ce", @generic="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", @typed={0x8, 0x1f, 0x0, 0x0, @u32=0xffff8001}]}, 0x11d8}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000"], 0xe8, 0x4006}, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) [ 1664.278553][ T3403] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 06:06:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000160bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bind(r3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @private=0xa010100}, 0x2, 0x3, 0x1}}, 0x80) 06:06:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2b0, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x28f}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x2b}, 0x16}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffff77, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x31e, @empty, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8001}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x400c010}, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94000000000002000000000000000000000000000000012f"], 0x7e) [ 1664.479670][ T3403] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1664.504614][ T3403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.571313][ T3403] usb 1-1: Product: syz [ 1664.594810][ T3403] usb 1-1: Manufacturer: 㚽䌍嵴팑ⶈⲃ䝺踸㔲뤦ꈀꪰ㵽剕⻎‰쁺ꫮ䘢䣽鸂棲䉨툩뇓㤨꾁ਈ煮쉱ꃼを홧듅񚌔 [ 1664.644509][ T3403] usb 1-1: SerialNumber: syz [ 1664.689362][ T3403] cdc_ether: probe of 1-1:1.0 failed with error -22 06:06:37 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) [ 1665.014381][T12084] usb 1-1: USB disconnect, device number 51 06:06:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:38 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x4000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1665.149083][ T29] audit: type=1800 audit(5890773998.065:126): pid=8214 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16383 res=0 06:06:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x322) 06:06:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000240)=0x3) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x7e) 06:06:38 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r3, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa240a402}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 06:06:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:39 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x5000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x313301, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f00000001c0)={@none, 0x6a, 0x7, 0x8b, 0x9, 0x6, "f7b0fb201c6e9de7491da0d367a187d2e60a10369d3a41bf01372590a49dcd86470498c66cad4f3f262ed7e83401fae05c1c336ec3ceb3b1b1d28ebe898a2f1628734d125a26691bb74783ce4542769e13200eb9c56c445dcf56dbfd50e8119e3ac9a6df12faf1693b5448277a5a9891079c2d4f8d81758bd6442194205353a0"}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:39 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) syz_usb_connect$uac1(0x1, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xfe, 0x80, 0x50, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x9, 0x20, "0604ef2d8518ca"}, @as_header={0x7, 0x24, 0x1, 0x47, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0xff, 0x5, {0x7, 0x25, 0x1, 0x0, 0x7, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb2, 0x8, 0x47, "1bd9231b7e"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xaf, 0x1, 0x80, 0x7f, "f25a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3e, 0x80, 0x4, {0x7, 0x25, 0x1, 0x80, 0x0, 0x7000}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x40, 0x2, 0x0, 0xc1}, 0x57, &(0x7f00000001c0)={0x5, 0xf, 0x57, 0x5, [@generic={0x17, 0x10, 0x4, "5cda1d522ff26e5d50462c6cfb23b5f7394eb30c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3f, 0x0, 0x200}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x3, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x4, 0x9, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0xfa, 0x4, 0x5, 0xf000, 0xd3b, [0xffff00, 0xc000, 0x3fc0, 0xf8]}]}, 0x1, [{0x85, &(0x7f0000000240)=@string={0x85, 0x3, "500e5593441faef4e76914413ec2259c8c0b7712e042a3e51152e8c1520ded84bb1ccbb7284a6959f9aa24dc521c7959f764cba7146fb0e1d091e2e9d603743fb3afba7660bc863ae70f69bf63bf40c64e093961e854d748aaf3dd9b7a860163ade46b302e1d85f3d930c13edfce891115f8e62d91b1fe60c3dcf4e58a6c8457e4e7ad"}}]}) 06:06:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:39 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x6000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:40 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x36, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0xfffffffffffffea4, 0x3, 0x429}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) 06:06:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x7e) 06:06:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9fef}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x1, 0x100, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, 0x40, 0x1, 0x100, 0x100}}) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:40 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x8000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:40 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {0x6}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880088a0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x2, 0x70bd29, 0x40, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 06:06:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xf4803, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x68480, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ppoll(&(0x7f0000000480)=[{r1, 0x82}, {0xffffffffffffffff, 0x1}, {r4, 0x4400}, {r0, 0x42}, {r6, 0x8}, {r7, 0x4204}], 0x6, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)={[0x5]}, 0x8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000091ca935d6b379e54000000180004801300010062726f616463617300000000000000007c77da2063f14ed7b205fc518bf8dbaa251f21fca9328dc3b357df291fa5d56d5e85e776990acdc1408fd4f57570ea7f2a6cc0bd8fa2fe04af9fd48afcdac423f1f185cad049eb8f3e1457216690f1feb76f1d080691bbb61c3a02d83da4ffac7c32a607e0126640b355fcfde1ef1b5846d085cf3deac3ab681b8c35f2"], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="65020000", @ANYRES16=r8, @ANYBLOB="00042bbd7000fedbdf25040000003c000180380004001400010002004e24000000000000000000000000200002000a004e2000000008fc000000000000000000000000000000070000000c00098008000100030000001c000180180001006574683a76657468305f746f5f62726964676500a400018008000300070000000800030000010000080003000400000044000400200001000a004e2000000009fc01000000000000000000000000000005000000200002000a0004010000000600000000000000000000000000000001000200000800030008000000170001006574683a6272696467655f736c6176655f3100000d0001007564703a73797a31000000001200010069623a6e657464657673696d30000000100005800c00028008000200cdca91bc4400038008000300020000000800020063270000080002004000000008000100c500000008000200ff0300000800020002000000080002000001000008000200faffffffa8000580070001006962000044000280080002000700000008000100100000000800040006000000080004000800000008000300010000000800020007000000080004000600000008000400400000000c0002800800010010000000070001006962000008000100657468000800010065746800240002800800030005000000080002000000008008000200070000000800020005000000080001006574680008000100756470004c0002802400038008000100050000000800010009000000080001000800000008000200060000001c0003800800020005000000080002000700000008000200000000800800010000020000"], 0x264}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="0100000000005c00000060bc6194004c2c0039defe840000000000000009106b1f218af9b31a534c39000000000000aaff0200bdb6ede2e288128f6dd6293a87c821c973497ab336bc857fe2e2d073b9544566a1e494295ab0c740a16d52bac187c7635149e1c77234864df9d03505754d595b1470e1ba0ca7c5e6b243d89925546643ba35020000008d7b506f2235c5fcc4c6e59accb9fd0240755782d1a673785e77e0bed121ecca4bff047e796d01d1dbf6b152e8cfe08547594c52c2d3b6d723c3da6403de40606732f1d83652eabe096d8504a4e5b1cb790000000000853c8f8a47329ae4aeb31b6420e13a5894c3fb74ff9990d095ed7e24938c475550da664f2dc27cf904b1358ab55fcfe55d5c49c49cabd828d9be5b5f556b69f1bbd178e788dee4e65b6e9b2c0000000000000000003dda8f27dc70707cc696e28b7c36aa4721de1ac1228bf15a31bff2"], 0x7e) 06:06:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:41 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x9000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:42 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="67a59eb879f8d45f7b30edae3ebe35c68e999a481c226c9c751b225f7280d648b5b8195e6477e6e7fdb5326e83afa42570d7a6736d26a3bc99afe5f8ee1fa0d6ba1748c36574"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x430}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e03bd360d43745d11d3cdee882d832c7a47388e323526b900a2b0aa7d3dabf05552ce2e8ce630207ac0eeaa2246fd48029ef268684229d2d3b1283981af080a48fa71c2fca09df1923076e661e91fd967d6c5b428d914df"]}]}) 06:06:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) lookup_dcookie(0x2, &(0x7f0000000000)=""/57, 0x39) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1a) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:42 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x43, &(0x7f00000000c0)=@string={0x43, 0x3, "c34390c84ad90551969e82ed3eae87640ed4266cf282894fe228bb284857c10c489d7164265f268acdcb2decb504c6507fd0a1e336fb41ae1b661e5421d7e0d25a"}}, {0x7e, &(0x7f0000000000)=ANY=[@ANYRES64=r0]}]}) 06:06:42 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xa000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x6269, 0x7fffffff, 0x4}, 0x10) 06:06:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000006558012f"], 0x7e) 06:06:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) r3 = socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000240)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000280)=[{}, {}, {}], 0x0, [{}, {}]}, 0x98) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000006558012f"], 0x7e) 06:06:43 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xb000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000006558012f"], 0x7e) 06:06:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x800, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x101, 0x1, 0x8, 0x80000000}, 0x10) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 06:06:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:44 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2fac7f871d9d67da}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xfffffffffffffe82}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$cgroup_type(r0, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r3 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYRES64=r6, @ANYRESOCT], 0x7e) r7 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_G_AUDIO(r8, 0x80345621, &(0x7f0000000000)) 06:06:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:44 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xc000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:45 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) [ 1672.818217][ T29] audit: type=1800 audit(5890774005.736:127): pid=8614 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16258 res=0 06:06:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x30808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x10c7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:45 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xe000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:45 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:46 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'macsec0\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000000)={0x1, 0x3, 0x13cbb721, 0x0, 0x7, 0x3}) [ 1673.896471][ T29] audit: type=1800 audit(5890774006.806:128): pid=8679 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16258 res=0 06:06:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/251, 0xfb}], 0x5, &(0x7f0000000000)=""/33, 0x21, 0x6e01}, 0x3f00) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:46 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xf000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:47 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:47 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x210000, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x8, 0x49d7, 0xffff, 0x9, 0xb, "ed6d7417fd08138ef992b06cf79983290aef91"}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) [ 1674.974032][ T29] audit: type=1800 audit(5890774007.886:129): pid=8741 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=15810 res=0 06:06:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000000480)=[{&(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x8, 0x80, "7d9fef1c5ca73ae0ede3f6a12110b19b7985f3ccc9796fe6479f2e800f8b25cbde1a8f4c3e6cc25734b4d9d3a2808dbf473498fad72182d3d23ed1e569fe07", 0x1f}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000300)="0363d566a4196ae9e6f967896e25dfb99ea3f6d892c24fa79298d3441a10b27139a575a0f359d924e7c289fe1c0c51ff039279285f9cc5", 0x37}, {&(0x7f0000000340)="ea628ff7c2996fd22a02ebf384b71e056d09b7a576eeac43f8ffde90c95427db960ffb1a", 0x24}, {&(0x7f0000000380)="aa3b01c165336b9b54ac34faa10f3275e8c9dc3b518e4c4c07c8c7ce76f19d84d4f2358bf88cb4509e801ae75999daa9b7ec2106", 0x34}], 0x3, &(0x7f0000000400)={0x78, 0x10e, 0x80000000, "cc1192b58854eb3bf4e989df624fec3f51d844511ba2325ed5df99e0aa4ef8818b278c47664def6160059e147b4afa599f961b1cb92b10f4d8209feebecc89c0beb92ae303769452024d1c8a2eb902b7deb7b534a72c375973111628a1ec85da668c33120c858e"}, 0x78, 0x48044}], 0x1, 0x8010) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:48 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:48 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x10000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) [ 1676.064377][ T29] audit: type=1800 audit(5890774008.976:130): pid=8813 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16382 res=0 06:06:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000240)={0x1, 0x0, {0x20010001, 0x1, 0x4, 0x100}}) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:49 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x11000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x13a4, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xa413, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1677.204608][ T29] audit: type=1800 audit(5890774010.116:131): pid=8873 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16369 res=0 06:06:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0xa080, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4000}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fffffff, 0x202000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={@private0={0xfc, 0x0, [], 0x1}, 0x3d, r7}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'gretap0\x00', @dev={[], 0x15}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:50 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x12000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x30000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1678.283486][ T8943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:06:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xfffd, 0xff}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/154, 0xffffff77}], 0xde2, &(0x7f0000000240)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:06:51 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x12060000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) [ 1679.561923][ T29] audit: type=1800 audit(5890774012.476:132): pid=9004 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=15749 res=0 06:06:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x6, 0xa, 0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/156, 0xffffff77}], 0x51, &(0x7f00000001c0)=""/17, 0xfffffffffffffe9b, 0x6e01}, 0x21e20) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:52 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x13000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1000}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000380)=""/90) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100008000f5e20a881497f2510a170fc073587cccfa00000000000000000000aaff020000000000000000f4ff000000012f00"/65], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000200)="23cf66fb5f43cd4939b7a9cc44db6134fbbe73a92401edbdd2868dd2f8bce977c6eac2a9dbc659f0ef1e58402f315a7fbb5a28bfb583cf2c6f12b354435d", &(0x7f0000000240)=""/31, &(0x7f0000000280)="e34ff7abb46b1fe35fb78e2047091eece181078348f8719c23bfa07ae57acc07feb8d4bb9518f92e15dece66cc89a28ad669dd1a41ba8537ad39b4339d64abbe", &(0x7f00000002c0)="e6315947c2e371676c3685844dc8cca2e8ada1a8148c7d59b27e9bd6e390a7c5fd0764eeb76af5951178b4d5e369516af6df03664022e631ccea262660c440c082d8f8cb24cc862519688368ae53795b", 0x8, r5}, 0x38) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x2, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1ff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x480d0) 06:06:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xe000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x5, 0x3ff}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000879de87f4f8c6a522401cc79698c00d8e6919d14b401ec1a23ce3604e17ae4591e2c00fe8000001f02000000000000005b3eb7334a70afb2140001aaff02000085d3800062db24f853718cff445fc3789bef0d8ba7cfbf86526fb6b3f0da7c4e303a28ebb288118263c778e1ff978e4899d4eeed89d190377ebfb4a64c00a7c8"], 0x7e) 06:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) [ 1680.767922][ T29] audit: type=1800 audit(5890774013.686:133): pid=9062 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16380 res=0 06:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:53 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x38000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/164, 0xa4}], 0x1, &(0x7f0000000000)=""/27, 0x1b, 0x6e01}, 0x40000000) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01001c0000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:06:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xa4130000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'vlan1\x00', {0x7, 0x10, @remote}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) getsockname(r1, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80) 06:06:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:54 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3f000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000240)={0x2, 0x0, 0xf933, 0x8001}, 0x10) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x192, 0x0, &(0x7f0000000380)="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", 0x0, 0xfe, 0x60000000, 0x4c, 0x0, &(0x7f0000000280)="3a61304fbcc53bd4b4c166083e31908e6c8497fc6cbca1f51b5328a1876e5c79913641f5fb7b1802989593b57197574c34192dee37849ac9d1f95ffc8d524442cd633203e2828369a5a47d24"}, 0xffffffffffffff76) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x24, &(0x7f0000000540)='syzkaller\x00') bind$alg(r0, &(0x7f0000000a80)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc-aes-neon\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44004) 06:06:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x7e) 06:06:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:55 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x60000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 06:06:56 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x65580000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x41) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xfffa}, 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000240)) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xf, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:57 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x81000000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x15) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'vcan0\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00000000000000aaff020000e4ffffffffffffff000000012f33ec315482eb9071f9a983a0364c18f09d7f5b8f9e94b874e277ba9ed8049671e77ac55a79d6bf0ed74edf1d3296df7321aaedf00d6cf306d351dbbc91778a3e564cacc4e3e86c1e8137250c992d9d4d98f37ecfa3c2203161231fb78181b41b7d65065c5f787ef79f0c67547bf0060ebe2b68f448185d3a8240c01bfdd067060b60919ccca4cdcba944c663cc757f07bab6de9cc7c6e2b6343b1b90207b6de057f0c984657d49bec1faf6169c9f9cff1e03f8adf0a0025adbcff1e90738daa3617b77823e0c02c9f7e12f3fcd88d3f17d40218ec2558f58e7229242bf1dda6bd215b5559a106fd4253c31af16b2d2da876995309af94c43ecd7a5ad78180d27d48f99c615dd1b5d40dd9fae672476c323e3108b106cb77a5769078f2833c951d1f4039a894cff19da35382de8be3caf45c3e13ec9dfd6ec4ca5feba0a134ec1f194f21e8f699865ccc0a2ed478687018b3efc54ed6ba03b32a162332dbf5bacf7cc330f470745d1e83c3201166d497f47662999f65f03b22c7bd0ad63a908ea8b79d23f2bcf76ea45c7e2b7b6b1a89f4d6b53656f89b1cce873278ae6e800"/468], 0x7e) 06:06:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2000006c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:06:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:06:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:58 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x88a8ffff}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:06:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x2, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x3, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000200)=0x5) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r7, 0xf}}, 0x10) 06:06:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x7e) 06:06:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:06:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:06:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0xa, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1687.075951][ T29] audit: type=1800 audit(5890774019.986:134): pid=9430 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16384 res=0 06:07:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x80000001, @mcast1, 0x9}}, 0x6a29, 0x31a4, 0xffffffff, 0x101, 0x20, 0x0, 0x9}, &(0x7f0000000240)=0x9c) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:00 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x99d457d4}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x13, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x7e) 06:07:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) syz_open_dev$tty20(0xc, 0x4, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x18, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x300, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x2, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x7e) 06:07:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x5, &(0x7f0000000280)=[{0xb83, 0xe0, 0x20, 0x4}, {0x8, 0x59, 0x20}, {0x7, 0x9, 0xff, 0x98}, {0x0, 0x1, 0x6, 0x1}, {0x8000, 0xff, 0x81, 0x80}]}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) perf_event_open(0x0, r2, 0x13, 0xffffffffffffffff, 0x8) sendfile(r1, r0, 0x0, 0x7fffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=""/11, 0xb, 0x6e01}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x3, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000008000000000079cd6464f825d16d00000000000000000000000000012f"], 0x7e) 06:07:01 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x9effffff}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x7e) 06:07:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x5, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:01 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000240)={0x7, 0x80000000, 0x7fffffff, {0x3, 0xfffffffe}, 0x2, 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendfile(0xffffffffffffffff, r6, 0x0, 0x9) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x8, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x589081, 0x0) ioctl$BLKGETSIZE(r8, 0x1260, &(0x7f0000000200)) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x902) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000100)={0xffffffff, 0x3f}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x7e) 06:07:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x8, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x9, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xe, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000300)="d43879df8e54dd04cf7cdef815d738c88deec8f7c8eab8bdbef8d0c9035d815728e45f9d4d2ada", 0x27, 0x9e4}, {&(0x7f0000000340)="521346638aeac7c64f904fc138c202e1c0b5f6d1f113cb0d3aff53c372a999fd4b4507808087ea7411211a1df544e690444dbbf31cbf", 0x36, 0x6}, {&(0x7f0000000380)="ee0a7ba93daef93fbd1d2cac62d4bd26ff6716b36015bdcc0b28bdd2", 0x1c, 0x7}, {&(0x7f00000003c0)="7a4b08705f168b02133b89b49417e39d03a0c2532e61f2548b05b30815557d80529adc6a4a3dbbd52778178ae322c08770372129c91c7cf2f3c5405d9ec3da23a3b40f1db2fe7a364f4d3e50bf9dea352be4b059f236d37c3dd41d87b2342afb0337afd4b88df215c8ce09565db6f586383adec86f77d2a9d363883a904bdc41fc34806a9d8a944d2ac053740b3e0108e0ae263cf2fa818319b855648ab5e19f1f8cd85d7ec5753cfa96c9afbfd3ff4de28fe1d91ae2b197ad7215b18c51e1ca1d79783bbf06735be70843131249a169bd0ebe6aa38b19bd57eaf604", 0xdc, 0x7}, {&(0x7f00000013c0)="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", 0x1000, 0x2}, {&(0x7f00000004c0)="eb185c6ecb2b24c9492825cf97f9b1badbbc2ea21cecd20434353103cbf525693c0b6e92f3690be96070e8f741f2daae416cf18f94ff63a5afb0a89d0b13b54158fede7255614cabcff802f656c1137d9080d7db6a0fd028746def967a7de426d28a1efb395e38b9bf49b5d93e2720c7abd99cde838ca33dc3c079a380ccf62edb09ca407f8bbc3109661ab6a070c2d75b9edcf9daee9f42ef8ceaf1288b65c3d4c202061716491d6f7c08e29d1f83083f3694", 0xb3}, {&(0x7f0000000580)="8c405331e3fa23cfa51138dd7369f6b3e380bf0b81298575de01097ef948f2280516973b660aae41708af168", 0x2c, 0x4}], 0x1000000, &(0x7f0000000740)=ANY=[@ANYBLOB='noquota,smackfsfloor=cpuacct.usage_user\x00,smackfsfloor=cpuacct.usage_user\x00,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f757365723d637075616363742e7573616765dc0ea5f5b4af678dd2de5f75736572002c00ebfaf19db248e8dfde2cc5d265938350d66b51cf795a8d6b34e9afadb595aa695e66459db47e3b584f4028f9"]) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:02 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xd457d499}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x7e) 06:07:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x60, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000e00)={{0x12, 0x1, 0x0, 0x8d, 0x76, 0x6c, 0x0, 0x11d9, 0x1003, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xf, 0xa3, {0xa3, 0xa, "3bb9ede251687d0e3f04b7016ee5c0cf89eaa13b378e8697238b70cbd7f89e52158565b2ac2da3e54945c5991f84338d7ea568c25f8cd31a9fdb9e179df6872c487f9c7321baa2c2ef26702595ad3691680794b6a99cae08d731c4608551196f239647027bc71c56d9be51c5b8f803856ff7527916f689ea3e44d50af34d9733933b389835af6f6ecb8127fecbc69bf9746293bd361e6e7be80b6a2fa16658862e"}}, &(0x7f0000000280)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "a7b34b24d2c3d3852437626211f1b7ab3e83223ee2344f91c321d63e42590cf2201565621c7623260fc93aed0e074e5eb646a6fb9a5598ed84df512cdc001bf714b96a13a6f5f65e7e2a5b9730fc7dc630631f55efa51323382b8acdd41859265b2e1ae41fdde2eed3f994c3b59696e2938672f9394d12a3a486a2643e396b7f45cdaa1c375769953e93c19d67054f8f17b7f5f246ebc23a229c3374e2613149926d8acb88bca4433ec133581d8679b3"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000340)={0x40, 0x16, 0x72, "7f1c84c392524e2d461cdb0bf15dd5d1de7b86a8757e5b9ea1237622a0ecc53d0ed6f94194635d0bd290fd745cf81b23734603d20329a5eb0bcace4c90d5724c09377ad87a26635f2761f2f2810586c22571825e1bbd0dc485f86f18a3037a039c997141791af0bbcfd7b010fa5f41642845"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0xe5}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "023051"}, &(0x7f0000000400)={0x20, 0x82, 0x2, "f147"}, &(0x7f0000000440)={0x20, 0x83, 0x1, "8c"}, &(0x7f0000000480)={0x20, 0x84, 0x3, "1c22fe"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "3dd449"}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) [ 1689.961215][ T9646] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=cpuacct.usage_user" 06:07:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x300, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x500, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1690.307337][T12084] usb 3-1: new high-speed USB device number 28 using dummy_hcd 06:07:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x900, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:03 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xf0ffffff}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) [ 1690.576328][ T9657] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=cpuacct.usage_user" [ 1690.597176][T12084] usb 3-1: device descriptor read/64, error 18 06:07:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0x5}, 0x1e118, 0x0, 0x10001, 0x8, 0x0, 0x4000000, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000340)=@req={0x28, &(0x7f0000000300)={'sit0\x00', @ifru_settings={0x2, 0x2, @fr_pvc_info=&(0x7f0000000240)={0x0, 'vxcan1\x00'}}}}) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xe00, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf00, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1691.027838][T12084] usb 3-1: device descriptor read/64, error 18 06:07:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x7e) 06:07:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x13a4, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x6000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1691.301422][T12084] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1691.593596][T12084] usb 3-1: device descriptor read/64, error 18 [ 1691.834900][ T29] audit: type=1800 audit(5890774024.747:135): pid=9705 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16371 res=0 [ 1692.017240][T12084] usb 3-1: device descriptor read/64, error 18 [ 1692.142209][T12084] usb usb3-port1: attempt power cycle [ 1692.867126][T12084] usb 3-1: new high-speed USB device number 30 using dummy_hcd 06:07:05 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xffffa888}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xa413, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x7e) 06:07:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x7e) 06:07:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x20, 0x37, 0x2, {0x0, 0x3f, 0xff, r6, 0x2, '{$'}}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000000000000dfffffffffffffa9ff0200000000000000000000000000012f72a6d320caa86722a138cbd13275b9c13924b90cea52009add1a61ec142a6c2ae4f8a8996b493939a656bc554343759f7d52ee1ecf0df187dfa66144e3417096d0dd86ce6509af2889bffa947571dfd514b6365766b01de1ca79bb89342873cb99c6b5119d5c196c54f26604960eaf582011c86d153f985be8a5774ead6daf0eb6db14eeb2b4cb916b0d697a925fb834e114ab1333c83f558064323abbe2589a839ad6b09a0d0a22962920342391597bf1b99712cb4d331273081ef2aaf78518d4dd62a1f4"], 0x7e) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 06:07:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) [ 1693.007081][T12084] usb 3-1: device descriptor read/8, error -71 06:07:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x30000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1693.227161][T12084] usb 3-1: device descriptor read/8, error -71 06:07:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x34000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x400300, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf0ffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x1000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:06 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xfffff000}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x2000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x7e) 06:07:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x7e) [ 1693.885354][ T29] audit: type=1800 audit(5890774026.797:136): pid=9762 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16368 res=0 06:07:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f", @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES16=r4, @ANYRES64=r6, @ANYRES16], 0x7e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') 06:07:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x3000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) 06:07:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x5000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x8000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:07 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xffffff7f}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x7e) 06:07:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x7e) 06:07:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x9000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x20, &(0x7f0000000040)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xe000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x60000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, 0xffffffffffffffff, 0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) r3 = socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) finit_module(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x9effffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xa4130000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:08 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xffffff9e}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000000000000"], 0x7e) 06:07:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x7e) 06:07:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfcffffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 06:07:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffff000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000280)="00377ec6d4f693f6ffd8a3d644f0a9bf", 0x10) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:10 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xfffffff0}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffffffc, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000000000000"], 0x7e) 06:07:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x7e) 06:07:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010101}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:11 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xffffffff}}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000240)=0x3f) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x4, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x5, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x9, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000000000000"], 0x7e) 06:07:12 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x3}]}, 0x74}}, 0x0) 06:07:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x7e) 06:07:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x7e) 06:07:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xe, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x60, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1699.743569][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:07:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000240)=0x3000) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x5}, 0x8) r2 = socket(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0xacb3, 0x3f, 0x8}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x300, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x500, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x8}]}, 0x74}}, 0x0) 06:07:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000"], 0x7e) 06:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x900, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x7e) 06:07:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getpid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r3, &(0x7f0000000180)=ANY=[], 0x7e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x8000000) 06:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xe00, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf00, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x13a4, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x6000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xa413, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:13 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x6}]}, 0x74}}, 0x0) 06:07:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000"], 0x7e) 06:07:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x7e) 06:07:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x30000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:15 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x18, 0x80, &(0x7f00000001c0)="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"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x34000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:15 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x8}]}, 0x74}}, 0x0) 06:07:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x7e) 06:07:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000"], 0x7e) 06:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x400300, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf0ffff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x1000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x2000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x3000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x4000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1703.586251][ T29] audit: type=1800 audit(5890774036.497:137): pid=10264 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16369 res=0 06:07:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'gretap0\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f499655a433fdbadb977d686dce7ff63c7f2d2a9651c2e274bc7ad27bfdedff49105ef89143a473df941d2843dd60ceeb6f0cbc644d35059d1f8d9692379937ef517d7497549995c90c86d78430503b924288fb113b6518cf80629407dcc81692cf2aef187cfbe59c5ddf0e2b45e308350ea03b738308ff8b3f5a2433529872b284f597c4a95b3cc58784"], 0x7e) 06:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x5000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:16 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x9}]}, 0x74}}, 0x0) 06:07:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000000000000"], 0x7e) 06:07:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000"], 0x7e) 06:07:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x1f01) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000280)) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ocfs2_control\x00', 0x200, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0xffffffffffffffff) 06:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x8000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$input_event(r2, &(0x7f0000000040)={{r4, r5/1000+10000}, 0x5, 0xce66, 0x2}, 0x18) 06:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x9000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000340)=""/32, 0x20}], 0x3, &(0x7f0000000000)=""/17, 0x11, 0x6e01}, 0x3f00) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000280)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xe000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x60000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:17 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0xa}]}, 0x74}}, 0x0) 06:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x9effffff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000000000000"], 0x7e) 06:07:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xa4130000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000"], 0x7e) [ 1705.155718][ T29] audit: type=1800 audit(5890774038.067:138): pid=10363 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16380 res=0 06:07:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf0ffffff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xfcffffff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)={0x88, 0x4, 0x2, "830743a409c89b6c6f7e9acfcfe1023b1a4ab511f7b03d945cac4e8a44b59b534ae1e3c7909735a2c45e23e636935b73e666251f7c59ed4c0b80fd46b93c2bd16514ebca356dd6bdeb6fa34873b24a90c000253272bb3f97fe98ade752ee4f5d546fa44b6fb75cb52a7bbe7bfd6e2c14c3f7756945afed90322ec38fc59919d18fc34e2cdbfc9fe6"}) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:18 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0xb}]}, 0x74}}, 0x0) 06:07:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x1b8, 0x9, &(0x7f00000001c0)}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000"], 0x7e) 06:07:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe80000000000000"], 0x7e) 06:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xfffff000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1706.101732][T10440] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 06:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xffffff7f, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xffffff9e, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xfffffff0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:19 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0xf}]}, 0x74}}, 0x0) 06:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xfffffffc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000"], 0x7e) 06:07:21 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x10}]}, 0x74}}, 0x0) 06:07:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200"/48], 0x7e) 06:07:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6c00008000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x400000, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) close(r2) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./control\x00', 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) io_submit(r3, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000340)="1b", 0x1001, 0x2}, 0x0]) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0xc15, 0x0, 0x0, {{}, {0x6}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r8, 0x704, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008812) io_pgetevents(r3, 0x24, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f0000000100)={r5, r6+60000000}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c0000000000000000aaff0200000000000000000000000000012f", @ANYRES64], 0x7e) 06:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200"/48], 0x7e) 06:07:22 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x11}]}, 0x74}}, 0x0) 06:07:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400041c1, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000"], 0x7e) 06:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x6}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x7}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, &(0x7f0000000000)=0x23aeac54) 06:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:23 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x12}]}, 0x74}}, 0x0) 06:07:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200"/48], 0x7e) 06:07:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000"], 0x7e) 06:07:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000240)={0x0, 0x7fff, 0x200, 0x81, 0x14, "0a70e7dce9edef53"}) finit_module(r3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x11}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x13}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x2}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7e) 06:07:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000"], 0x7e) 06:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x3}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:24 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x13}]}, 0x74}}, 0x0) 06:07:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) inotify_init1(0x0) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x4}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x5}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x8}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5}, 0x0, 0x0, 0x200, 0x9, 0x400000000000000, 0x5, 0x7f, 0x6, 0x400, 0x0, 0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r7, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r8, 0x3}, &(0x7f00000001c0)=0x8) 06:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x9}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0xe}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0xf}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7e) 06:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x60}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:26 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x612}]}, 0x74}}, 0x0) 06:07:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000"], 0x7e) 06:07:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000300)=@ax25, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f00000000c0)=""/10, 0xa}], 0x2, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) dup(0xffffffffffffffff) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x2}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x3}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x4}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x5}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:27 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7e) 06:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x8}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000"], 0x7e) 06:07:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2ab01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0xabcc}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/6, 0xffffffffffffff84, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r2, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000340), &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x10001}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000240)=0x8001, &(0x7f0000000280)=0xfec8) 06:07:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0104000000005c00ff0060bc7d94004c2c00fe8000100000837cb15128e1b1a7e100aaff0200edffffff080000000000e7f360ed55319002bffbf1e850ab0100000122"], 0x7e) 06:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x9}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xe}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:27 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x74}}, 0x0) 06:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xf}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x60}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xf0}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x300}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f00000003c0)) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x7ffffffe, 0x3f, &(0x7f0000000300)=""/163, &(0x7f0000000280)=0xa3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200"/48], 0x7e) 06:07:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x500}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0xfffc, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:28 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x74}}, 0x0) 06:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x900}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xe00}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200"/48], 0x7e) 06:07:30 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x74}}, 0x0) 06:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xf00}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf55b, 0xef}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x9, 0x7}, 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x901, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000280)={0x61, &(0x7f0000000300)="17bda6a3bcdef9ad143a28715532f506930449e3be787b6372efc7d19096eee4d10cdb54f974efa0ea8205f905fdbf5cf7443fa2d19273255706c1c029d7feb9b2ae259111a0b44fab845642eaed0f030636d3b5065184d47444ebe1785594c5d17c6a6b1b5bed45015f52a8d26b6c344eb39f1fcb6539c0fee3cd0855c2e82c661ef4fe91b9646b0d1bb02bc81012670163c1d1dc7d79d2a2a8a0bdafbd0a77f77a9ce48944e4a79cc84c62f134d157dcf1ddba2b07daa5"}) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x13a4}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000300)="d43879df8e54dd04cf7cdef815d738c88deec8f7c8eab8bdbef8d0c9035d815728e45f9d4d2ada", 0x27, 0x9e4}, {&(0x7f0000000340)="521346638aeac7c64f904fc138c202e1c0b5f6d1f113cb0d3aff53c372a999fd4b4507808087ea7411211a1df544e690444dbbf31cbf", 0x36, 0x6}, {&(0x7f0000000380)="ee0a7ba93daef93fbd1d2cac62d4bd26ff6716b36015bdcc0b28bdd2", 0x1c, 0x7}, {&(0x7f00000003c0)="7a4b08705f168b02133b89b49417e39d03a0c2532e61f2548b05b30815557d80529adc6a4a3dbbd52778178ae322c08770372129c91c7cf2f3c5405d9ec3da23a3b40f1db2fe7a364f4d3e50bf9dea352be4b059f236d37c3dd41d87b2342afb0337afd4b88df215c8ce09565db6f586383adec86f77d2a9d363883a904bdc41fc34806a9d8a944d2ac053740b3e0108e0ae263cf2fa818319b855648ab5e19f1f8cd85d7ec5753cfa96c9afbfd3ff4de28fe1d91ae2b197ad7215b18c51e1ca1d79783bbf06735be70843131249a169bd0ebe6aa38b19bd57eaf604", 0xdc, 0x7}, {&(0x7f00000013c0)="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", 0x1000, 0x2}, {&(0x7f00000004c0)="eb185c6ecb2b24c9492825cf97f9b1badbbc2ea21cecd20434353103cbf525693c0b6e92f3690be96070e8f741f2daae416cf18f94ff63a5afb0a89d0b13b54158fede7255614cabcff802f656c1137d9080d7db6a0fd028746def967a7de426d28a1efb395e38b9bf49b5d93e2720c7abd99cde838ca33dc3c079a380ccf62edb09ca407f8bbc3109661ab6a070c2d75b9edcf9daee9f42ef8ceaf1288b65c3d4c202061716491d6f7c08e29d1f83083f3694", 0xb3}, {&(0x7f0000000580)="8c405331e3fa23cfa51138dd7369f6b3e380bf0b81298575de01097ef948f2280516973b660aae41708af168", 0x2c, 0x4}], 0x1000000, &(0x7f0000000740)=ANY=[@ANYBLOB='noquota,smackfsfloor=cpuacct.usage_user\x00,smackfsfloor=cpuacct.usage_user\x00,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f757365723d637075616363742e7573616765dc0ea5f5b4af678dd2de5f75736572002c00ebfaf19db248e8dfde2cc5d265938350d66b51cf795a8d6b34e9afadb595aa695e66459db47e3b584f4028f9"]) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10500, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='t\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="0400000000000000000000000b0001006367726f757000003c00020038000100340000000f00010074756e6e656c5f6b6579000004000280040006000c00070000000000000000000c000800000000000000000006000500000000004e587a70ea232ae80f9ad539e9bec4b517bdf60611c67f99e107c9ebdb9581771cda329a3792d9cfaed27a303683f83ab8a2dab60e870c8965befce00203aad2056de30b97ba2299a95faf54907c88c7c4de4c7a38642391b0b0a55d1c1cfa04c1a09d435a2086bfa3f9bee894f01d6fb2e9649563ee515d639833c26c4de2690fdf7c2cff9a8e8ce4a7f527fc047d4dcba4d5a792600d6976bc816d98797b5697f760ae0ec5bd84976136788b663424496c5e8292298260089263fd0382b17a9d668a217446cad69a95fb09f7e6410137dc755e75fd107d99"], 0x74}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r8, 0x4, 0x7f, 0x1, 0x9, 0x16, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x700, 0x20, 0x20, 0xfe6a}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x64, 0x6c, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12010, 0x1000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_PROMISCUITY={0x8}, @IFLA_PHYS_SWITCH_ID={0x19, 0x24, "222f92d6f560730d6e6acf0215622e93ec0899845e"}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x10000010) 06:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x6000}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xa413}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xf000}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1717.630335][T10957] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=cpuacct.usage_user" 06:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0xffff}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1718.027690][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1718.081799][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:07:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200"/48], 0x7e) 06:07:31 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x74}}, 0x0) [ 1718.161618][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:07:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x3, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1718.435317][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1718.504970][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:07:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x4, 0x70, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x41c5, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x10000162, &(0x7f0000000100)=""/31, 0x1f, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x6) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000240)="242ae59f1fd94568b4e3ce435a2abde3cd7171153ccf1f3dbd7dfe89cfc740052f962e36d440f34832d8f001ae840e3426bc13526f284182613f757387685b9332cf3b0c1141fe45555592c737581cb75ac0116d", 0x54) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000300)="d43879df8e54dd04cf7cdef815d738c88deec8f7c8eab8bdbef8d0c9035d815728e45f9d4d2ada", 0x27, 0x9e4}, {&(0x7f0000000340)="521346638aeac7c64f904fc138c202e1c0b5f6d1f113cb0d3aff53c372a999fd4b4507808087ea7411211a1df544e690444dbbf31cbf", 0x36, 0x6}, {&(0x7f0000000380)="ee0a7ba93daef93fbd1d2cac62d4bd26ff6716b36015bdcc0b28bdd2", 0x1c, 0x7}, {&(0x7f00000003c0)="7a4b08705f168b02133b89b49417e39d03a0c2532e61f2548b05b30815557d80529adc6a4a3dbbd52778178ae322c08770372129c91c7cf2f3c5405d9ec3da23a3b40f1db2fe7a364f4d3e50bf9dea352be4b059f236d37c3dd41d87b2342afb0337afd4b88df215c8ce09565db6f586383adec86f77d2a9d363883a904bdc41fc34806a9d8a944d2ac053740b3e0108e0ae263cf2fa818319b855648ab5e19f1f8cd85d7ec5753cfa96c9afbfd3ff4de28fe1d91ae2b197ad7215b18c51e1ca1d79783bbf06735be70843131249a169bd0ebe6aa38b19bd57eaf604", 0xdc, 0x7}, {&(0x7f00000013c0)="9b923000c738d04b11690df8588d527ffbf3cf7f4404cafe90900c8498717a04823bb5eece7d40ad2fd90f8479798d6bc8d20767346eec519ca94f91e35189b46a5e8c22acbfae0fe3d8ae8c4c7af462d87959d035851fa6a882fcae58a9306aa420054cea5575f925f8aa8d5b0a902b4e8192f7946afed4c5c18ec6593e7de2c47f45a9e1a7baf3af8f65d100b14a5e0cf537ed607036436dab8fc324971e091606f83869d38bdefbf579fdf163ef02b28db4e84bb9efa9bf6afa88a80d4c9ec7a2cd23f9fb163898fc1e836c73953a2279615afdab765f1d6ebd063d362011f8a9bb3ad5d46d09146bb4261a43fd07cc18c3d5ef3adf1d1a4cdad79032b4d7a923604a128e21ee5486c8b0d2cd989bbe750e62f582c7bedb464d434a6bd3b60ae6bb95ced4538c375393ed444e674bf69506c328ced00420d9730dcfbf800deb50bc7b7856890a46e090e0d5300d7dd02aa504b985ee332cd2e229368a29eda29696867d9759dccda8ea1362b8bfed36b049c31e5123f7cb13a08707a613008a650d950bd0f4b268dca42ccafa01d01026729935e65ac309040ce5239a8eb4a94ab00d15d888c026906c17335cb847d23283eb2c2f13e87cbed09ca0a5730db4b108ea3798f840685d552fb48cbea591fe764961ce199debcd261a86a42269f3b06b7722cbb4cdbcd464443f7715e980707b640e385ca8995f47f5224fc368a557ac1100b08d5428594de3b83e58f0caa3a4e364cae485790a6868d05fa5f61a83ea4a5d8b4c777dae469a26d94dacd0ec98524241ea041888355d0bbdc6a30afc0861aa3011e4166a7adccbde7eebb076697ad3634c8d7bcecefedb24c4a810012b6d3d89d0ff9c39ca3bb7880a25e17115da8a4895ea6dd92c8284dcbd4228ec9e17405fff52d1da9719009512dbd291cc4203f721905cb86e877d54ae6c2f9d481e58e3f63e9cb890596017fd662d021be693347f3042233ec5c064c75d67d87e6e40a12838e1274b2ca731d1c28f47a89d55356cbd01f624ae6e316e8225d6a757f01cc2c82d509e26cbd1022f5f2a9ecce8580e22794c9789db5d802bf079a9e5379917579d135c3859125176f5593ff8cbef594dbf23e1f6f004dd209397c79edf7a037c81988dd4db659ac86f7cdde7f5d3eb69e63bb583d046eb46558b276d26b04afe70ccae4fa109c593bbced2f89c8a4e2c30f0410b0e7fb6270f10c17c08f451a114437ea1cb74c0821d1e6321f00548ac46ea7c14a78a3e140c9c07e4afded4cc3d00c771d0ec28b3d82fafc7e511631f2b44e867d981a2fe2b8e0c45988c016770ed9944b88ad17f96d5a202a4471622107ee2c7e38a059ffcc488987dec114dd92c36a07d8051fd0eb09b9dbf6399f34c82ae53d3ba315b289cdcb46d49e8d59aa622eea86f027fa8976fdd3e4bdfcccd3936c2c05a85ab7a1038b3a5701935b2e563cbe594a4535e7364d5144b8294166eb0fddecc1f0628fe447691c32fc1aa14529682aea96e1e09e1286cf817ee49a7b21478fecf8d78dbf300b2aaa1a83d4b7ff4fae6306cb6d1f035a68359e45db7c1d19f65716aea68dfd2a829df77857ed4f949677080cbb3f42546ec7acbab7cab4f00706adb060768c1ac3c7cc55a8d84a3eef4370f01a4ef492599e3ec55725ed22e978f33b0e1915af8f7f5798aa620b346576c53759508e0a8e51a7d363feb74687c32e180c142df8c7546b35bdab9994fedafe711129f13e012d77e2605afbb7c3ac279eaacc8dcfcbeb66acee39cafe8e59604edf5dee0ac8ed9458d082ea04256db311cf1b6c8c034897b845e9396dabec0b3ae95f6cbe824a15b59f0aa242facf10c2cdce2a5773c8464bb629a572eaf8fae4ed09b99acfe8031b8cec2c1c8f131cf44c661d2452fc1443fe8ce7ee57b2e2fb817a8db58c1cd1af4d4d45a517b1120e55fb628cebedbf7f7baef1be3f0dc67c32a61aac202779e9a6774c5fd268703189252d39f4a69fc63395187b49b39d957e3ef5e9498a563000f1055ead93a8d9b291216fa6f9853b904c200dbf32b4b0182d92de44623266acbb12f33fc7e7b64361111d4fa862fc0b4e1b7e829fe5000e4e233e4d4218d9dd8ee61248e02bc8418f64ff1b5df147fee7680a8a4ee9ba99974aeee5fdee2aeb64b75308be3c192fa3a766caef64932274ce62b14d67107bef45a0fd75799fa66257620df5dbd78362e73b8f9717a888f9128a480aaffbcc879a1091030d0e66ab56d12600bb74b2a8508e295d31ad8dbbd6b30ca70da66b4a39f1e24fb8e7e75ab8ed86b27a83ff0ca4d4c71f77f0057a0b9eef6cf6f944934ca735152f165a8b8cee703f7046508a1f26df2c421b2ecfdf674a795a60cf9bbbfccb739b3a4154dc9858428b1b54be3a2083640e3ae7f030b3b1a46f15e8b5eb9995454f50a7bd561654d5e16b3e0558257c4bda8a43ec4fa96a37d4a2f585b58fe4ec532ac6c04e1275304055868a58f6f61997b1a227bdd555b9d046073621be9d4a23487dec0a51837d79e7c3af46ca5e4d86888cf6991cc9dde58569bdae25c872b2c891d9bb4635df65633499e80d0568ab274b3007564d0c66fcf18490f868f78987f384b0d6367fa94ac85a57660bf7afeb482199e52a864f8ac290a3197bcda6122077b00c20cfc8dcc1d7c64d4a7a080ed110c854d981fd53e35bcb371edcd5070ab7bcf66e002fc4c76eeab07f8b50e53ffffe67d76b145d501a14ef0ee237cf075adc5e8a676da6d6dcc00ee8efc789b72933345b3b3e0c85d273c64d55034b882da55874d3a2b5015b42d77744b4cb0fa96b95242b42140148b1785ce6257101804c2211ea795dd822cfaa2684b286bfdf3b87d612c5ce847c73a2715c59a8b2b7865b790e9392d72895d8b81275b3849de9c994383d9215567d9b2c80a433439fe9d8e4b19428f68adafdde2b6ece16ad584de62aef63a167c8354f1e3288b62142403668c4a88c5673bc465a4f786f6b9f3b25102a42e203393d53fa128b5fff74a2a3669f7f3e6a077df8e060d886feea614987e034cc0788b3b2b419ae612882c65ab56970c6ca975ace36756e001d4205011dfbfc4c618f7bc38c89b79096c1247892dfc705a0a84e3c308fc58aee0de905880dd8e110dea25ea1c7bee47016b9f6c5bf2d193aa73ae5b55518c583cc84b57bdce7585df287eca66b0f468c97ebc4a461a29e107f80949f015440d0f7869b7c4b38f9841f9b2db1bef3eb9c7783da512e2a7cce9cf7068f8731a8f37b380fd8148c48b2b23b1e07732d70eab44e9f75937b976d8bf9d7070ae82f93494400b95499beac0acfea3146358e54cfdd7e267065fe0a6ece4ee6dfe4a07406a80a16bedbeeae1500f669a2cd5479cd12b8aef7ede238cd877aea82af71f91c4e7088fc093cdc9fcfe0bbb8f2b242451040befb14dea4048e1c6deb54ee687ecfd2b1a25af557c2f04247be68f2c0f37884ba58c44693c79b736377c1e93a8bfbaab81da267a8ca240be252b03d4aea3ea8de64dfa0b75e292c66a0a8cfacc4e04be4199288d471c607cacc6fc0828a3a94e5309446331e72033d8baaff44f47f56e8f1b1bcb2ff7e72dc6e08af2d3f71edf9132215b993087ae54b761d1ed0c2cf086db3fcf094da5c19db0f6f4e4be01ba29d25d78b9a398fc2c272d6ec8fe869e199a4c458e5d8d00c780c686bb56b2e7a172cbc7e5631449cb80614c9ec95e043e504e261ace01aa88f929c26cf7fb69da986048486dd237c2d376b4e43515ae6311d446fc3fa082f1dc64f6bc1f0f014b1e28407ca7dfb5f79df900a802b3b30129c8ca6d953ac5ee6918630a8b538a76a2ea17914095a91c02dd481fc2888aefd4ac77fd11b8595fec7b15ddd2f624a375c0c7f16c3146cbad9af17bc33b6891320e7297b10dd360511c152731f95a564d06d202f4ffc7d28dc7d02878b4890d18d05d5bed1fe8cf52c31c0696d0236bff76254f13bbef2a1e8e6bd164509fbd20432f45bf1ba42943fe623d8c7988e3576fe942b7a9fa12290933bd3016be899e573da0376dffad2090f6ec8548cdb8437b533e98a67d150c8ed5ff250d779b300b0dc0983f2f38093a28c5dc6e71e6e61c37f68a36fa1ea3886076edf57db29f248b6bf94d496a9ae121f8ce2c6ee61d87ac0599af113073d5998afd2ba54ae609e9ed7a4af4184f8345fd80e41bb960096fb65283a8c3387058ce8b2cbf77358dcc67a1a72fd5f149791a4b4c7809cef7394f75c06183560c0cd9c5da85e536428ac3f077ecd5f7d2be4280ce2a1adf1d4ebb7977eb89af37a402245d138005a3820107197bae62b9d708b0c45a1551820dd612235664ede56bdbc04252fd917a02c890d1e01b2df33d0ebbf236ecb72bb811d88585aeb63dcab1424bba220ce5b606a33456c00f3131d7667e69c8ce028825c06b46b95d14df3de1f3d7e8d30eab4b25c66d5ea0fe62cc1d059fa9bd8ca53d474693e79adb2735f1ccf54c26b526859b4bd3ab15986d1f77a71e500f18de2f04f679719708a91f7f6c45083262150a93997791f7fa91ef3de4cd1715adef4c01c31574799c220f5b85236b0787243db8fc0ca1ecfbdd50caf40757d77dd53939d96a024ca62dae2ffab089de14f379f0f7b13de74dc82ce9c626a40d77bf31a2a56e8acff77bc0f633d054e3a98be4f63e6555a213422f55aed4b66a1c34c397b1357e8caad999913bb32fc2c97f1e8e6b8243e003c33ed2e5e6c7be586c6ef9d69d8eb61f6e004a248369fa2ac26a1fabe6d6cacc64fcaa9da10828dee7ab056b07e488e05aaa8cf08c82982b5d7644a93a987d791b760d045fd75ef95ebf0614f08cec0bcfc61cbdc2bfedecd16458eb70d6e5fd19b4af79b04cbc10f7de2f965efdb448569e353631bca74db9159c03a39a018ef42f684c24888486a0adb110af8420ccf9b7fdb580fe23226e878b31fc1faea261fe7ecc6b09873f7dae73b21baf294d71ca4647a6a77c63e9ce87834304e46d9ffcdb9ee0cd118b1a8d290127251380d7c5588e110caef764397b97bebe0d15f4fba511ed305e5260dd689e029ec6fbe1cd5c142609443784d56bc78727c705c524e509458127fb19f4deefefd94feddd891958ca1c09481c5ce6e5ac94617462eecf753e628649e63ce10b35950e6fce8959be1da7ababe0efc48119699d5fe80b6ee705dd04a50170999b0d287ee955dbb95f02f15161c1ee90e7301d7f291a8bb853aa7aeba6fea9e9de9a2714b0ae5b00699bbd3173169b1286576d2ee620bc1c9ffeffbe30727a80e3bc00afe1cbd6223f35f89730d1c5731e6e4f82829917bc9d5f3d8ac860b5ce1f1896fbd6d852cb731992beadc518fa475d3048976ce9726497b6bf5a92eec500f4db0c8e8d1f6820a713302795ad27a0931e1fa57015aa26a626ba9d4366fd910b385a2f245080c87cf5b7828f19da753fef99a34babc2646cfd871970beaed5c9d3cdf5b4f51e959323961b7409ec902dd726181ac6503ffdd894c87abf0255707b8bdc3558229fc9220c112edc7a4660d7a8519e24382e7588c4df6e77a0f9ffa61477f979472216c7a784c490dc1cdeee2b412727c09f27c049bed0bac42e76e63ced2a65af3cbca5a5ae101d55d0b464f379ac59f9a171c49c191e1c06196ae04d8991acada821972b1ca6b723bb7c3a7aca58d8db821794f1f5efd8da64aa5b5b5249b6d47f5d4c2a5c2cb9a13ef6fe93148a87cc7cbfd6a2b68cf5af594412789e35a21fa3213f0478702ff1689bf56901bdf56c8ca92c99", 0x1000, 0x2}, {&(0x7f00000004c0)="eb185c6ecb2b24c9492825cf97f9b1badbbc2ea21cecd20434353103cbf525693c0b6e92f3690be96070e8f741f2daae416cf18f94ff63a5afb0a89d0b13b54158fede7255614cabcff802f656c1137d9080d7db6a0fd028746def967a7de426d28a1efb395e38b9bf49b5d93e2720c7abd99cde838ca33dc3c079a380ccf62edb09ca407f8bbc3109661ab6a070c2d75b9edcf9daee9f42ef8ceaf1288b65c3d4c202061716491d6f7c08e29d1f83083f3694", 0xb3}, {&(0x7f0000000580)="8c405331e3fa23cfa51138dd7369f6b3e380bf0b81298575de01097ef948f2280516973b660aae41708af168", 0x2c, 0x4}], 0x1000000, &(0x7f0000000740)=ANY=[@ANYBLOB='noquota,smackfsfloor=cpuacct.usage_user\x00,smackfsfloor=cpuacct.usage_user\x00,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f757365723d637075616363742e7573616765dc0ea5f5b4af678dd2de5f75736572002c00ebfaf19db248e8dfde2cc5d265938350d66b51cf795a8d6b34e9afadb595aa695e66459db47e3b584f4028f9"]) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1719.131563][T11022] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=cpuacct.usage_user" [ 1719.554841][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1719.599270][ T29] audit: type=1800 audit(5890774052.518:139): pid=11019 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16373 res=0 06:07:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x86, 0x442000) write$6lowpan_enable(r1, &(0x7f0000000040)='1', 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) shutdown(r4, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7e) 06:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x5, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:32 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x74}}, 0x0) 06:07:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000300)="d43879df8e54dd04cf7cdef815d738c88deec8f7c8eab8bdbef8d0c9035d815728e45f9d4d2ada", 0x27, 0x9e4}, {&(0x7f0000000340)="521346638aeac7c64f904fc138c202e1c0b5f6d1f113cb0d3aff53c372a999fd4b4507808087ea7411211a1df544e690444dbbf31cbf", 0x36, 0x6}, {&(0x7f0000000380)="ee0a7ba93daef93fbd1d2cac62d4bd26ff6716b36015bdcc0b28bdd2", 0x1c, 0x7}, {&(0x7f00000003c0)="7a4b08705f168b02133b89b49417e39d03a0c2532e61f2548b05b30815557d80529adc6a4a3dbbd52778178ae322c08770372129c91c7cf2f3c5405d9ec3da23a3b40f1db2fe7a364f4d3e50bf9dea352be4b059f236d37c3dd41d87b2342afb0337afd4b88df215c8ce09565db6f586383adec86f77d2a9d363883a904bdc41fc34806a9d8a944d2ac053740b3e0108e0ae263cf2fa818319b855648ab5e19f1f8cd85d7ec5753cfa96c9afbfd3ff4de28fe1d91ae2b197ad7215b18c51e1ca1d79783bbf06735be70843131249a169bd0ebe6aa38b19bd57eaf604", 0xdc, 0x7}, {&(0x7f00000013c0)="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", 0x1000, 0x2}, {&(0x7f00000004c0)="eb185c6ecb2b24c9492825cf97f9b1badbbc2ea21cecd20434353103cbf525693c0b6e92f3690be96070e8f741f2daae416cf18f94ff63a5afb0a89d0b13b54158fede7255614cabcff802f656c1137d9080d7db6a0fd028746def967a7de426d28a1efb395e38b9bf49b5d93e2720c7abd99cde838ca33dc3c079a380ccf62edb09ca407f8bbc3109661ab6a070c2d75b9edcf9daee9f42ef8ceaf1288b65c3d4c202061716491d6f7c08e29d1f83083f3694", 0xb3}, {&(0x7f0000000580)="8c405331e3fa23cfa51138dd7369f6b3e380bf0b81298575de01097ef948f2280516973b660aae41708af168", 0x2c, 0x4}], 0x1000000, &(0x7f0000000740)=ANY=[@ANYBLOB='noquota,smackfsfloor=cpuacct.usage_user\x00,smackfsfloor=cpuacct.usage_user\x00,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f757365723d637075616363742e7573616765dc0ea5f5b4af678dd2de5f75736572002c00ebfaf19db248e8dfde2cc5d265938350d66b51cf795a8d6b34e9afadb595aa695e66459db47e3b584f4028f9"]) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x6, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x7, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1720.272693][T11068] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=cpuacct.usage_user" 06:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1720.510776][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1720.543219][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1720.587378][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1720.620850][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1ec0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x8, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:34 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='syzkaller1\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:34 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x74}}, 0x0) 06:07:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x30808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x10c7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0xa, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7e) 06:07:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) renameat2(r0, &(0x7f0000000280)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00', 0x2) perf_event_open(0x0, 0x0, 0x7, r0, 0xb) sendfile(r3, r0, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000), 0x100000000000025b, &(0x7f00000013c0)=""/102400, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000340)={0x3, "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"}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x13, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x18, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x1e68, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x1e7c, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x1ea4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x1ea8, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:35 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0xfffc, @empty}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x7e) 06:07:35 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x74}}, 0x0) 06:07:35 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x1eac, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x40218, 0x0, 0xffffffff, 0x2}, 0x0, 0x4200000, 0xffffffffffffffff, 0xa) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x200081) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0xffffffffffffffff) 06:07:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7e) [ 1723.015263][T11183] FAULT_INJECTION: forcing a failure. [ 1723.015263][T11183] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.045177][T11183] CPU: 0 PID: 11183 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 1723.053905][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.063967][T11183] Call Trace: [ 1723.067320][T11183] dump_stack+0x18f/0x20d [ 1723.071666][T11183] should_fail.cold+0x5/0x14 [ 1723.076364][T11183] should_failslab+0x5/0xf [ 1723.080799][T11183] kmem_cache_alloc_node+0x257/0x3c0 [ 1723.086097][T11183] __alloc_skb+0x71/0x550 [ 1723.090446][T11183] alloc_skb_with_frags+0x92/0x570 [ 1723.095584][T11183] ? __might_fault+0xef/0x1d0 [ 1723.100270][T11183] ? find_held_lock+0x2d/0x110 [ 1723.105051][T11183] sock_alloc_send_pskb+0x72a/0x880 [ 1723.110279][T11183] ? lock_downgrade+0x820/0x820 [ 1723.121587][T11183] ? sock_wmalloc+0x120/0x120 [ 1723.126274][T11183] ? copyin+0x10e/0x140 [ 1723.130444][T11183] ? _copy_from_iter_full+0x247/0x890 [ 1723.135825][T11183] ? iov_iter_advance+0x250/0xea0 [ 1723.140871][T11183] tun_get_user+0x135b/0x35b0 [ 1723.145572][T11183] ? lock_acquire+0x1f1/0xad0 [ 1723.150259][T11183] ? tun_build_skb+0xf30/0xf30 [ 1723.155037][T11183] ? lock_downgrade+0x820/0x820 [ 1723.159896][T11183] ? aa_file_perm+0x5e2/0x1100 [ 1723.164680][T11183] tun_chr_write_iter+0xba/0x151 [ 1723.169632][T11183] new_sync_write+0x422/0x650 [ 1723.174317][T11183] ? new_sync_read+0x6e0/0x6e0 [ 1723.179095][T11183] ? lock_downgrade+0x820/0x820 [ 1723.183950][T11183] ? vfs_write+0x397/0x6b0 [ 1723.188389][T11183] ? apparmor_file_permission+0x26e/0x4e0 [ 1723.194130][T11183] vfs_write+0x59d/0x6b0 [ 1723.198385][T11183] ksys_write+0x12d/0x250 [ 1723.202728][T11183] ? __ia32_sys_read+0xb0/0xb0 [ 1723.207495][T11183] ? lock_is_held_type+0xb0/0xe0 [ 1723.212438][T11183] ? do_syscall_64+0x1c/0xe0 [ 1723.217036][T11183] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1723.223025][T11183] do_syscall_64+0x60/0xe0 [ 1723.227448][T11183] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1723.233343][T11183] RIP: 0033:0x45c369 [ 1723.237240][T11183] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1723.256847][T11183] RSP: 002b:00007fa1115efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:07:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1723.265272][T11183] RAX: ffffffffffffffda RBX: 0000000000038100 RCX: 000000000045c369 [ 1723.273252][T11183] RDX: 000000000000007e RSI: 0000000020000180 RDI: 0000000000000003 [ 1723.281232][T11183] RBP: 00007fa1115efca0 R08: 0000000000000000 R09: 0000000000000000 [ 1723.289228][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1723.297306][T11183] R13: 00007ffffee3430f R14: 00007fa1115f09c0 R15: 000000000078bf0c 06:07:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x0, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x3, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1723.577035][T11212] __nla_validate_parse: 2 callbacks suppressed [ 1723.577046][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1723.595828][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 06:07:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x2, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x3, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1723.826904][T11225] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1723.856978][ T29] audit: type=1800 audit(5890774056.778:140): pid=11188 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16379 res=0 [ 1723.896108][T11228] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 06:07:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:37 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa}}]}, 0x74}}, 0x0) 06:07:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x8, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x400080, 0x0) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000280)=[0xdc, 0xfffffffd]) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:37 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:37 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0xa, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1724.351384][T11244] FAULT_INJECTION: forcing a failure. [ 1724.351384][T11244] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.385463][T11245] FAULT_INJECTION: forcing a failure. [ 1724.385463][T11245] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.415786][T11244] CPU: 1 PID: 11244 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 1724.424525][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.434802][T11244] Call Trace: [ 1724.438122][T11244] dump_stack+0x18f/0x20d [ 1724.442475][T11244] should_fail.cold+0x5/0x14 [ 1724.445411][T11257] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1724.447160][T11244] should_failslab+0x5/0xf [ 1724.447180][T11244] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1724.447203][T11244] __kmalloc_node_track_caller+0x38/0x60 [ 1724.447218][T11244] __alloc_skb+0xae/0x550 [ 1724.447237][T11244] alloc_skb_with_frags+0x92/0x570 [ 1724.447251][T11244] ? __might_fault+0xef/0x1d0 [ 1724.447270][T11244] ? find_held_lock+0x2d/0x110 [ 1724.466834][T11258] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1724.471291][T11244] sock_alloc_send_pskb+0x72a/0x880 [ 1724.471312][T11244] ? lock_downgrade+0x820/0x820 [ 1724.471334][T11244] ? sock_wmalloc+0x120/0x120 06:07:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x13, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1724.513119][T11244] ? copyin+0x10e/0x140 [ 1724.517294][T11244] ? _copy_from_iter_full+0x247/0x890 [ 1724.522675][T11244] ? iov_iter_advance+0x250/0xea0 [ 1724.527716][T11244] tun_get_user+0x135b/0x35b0 [ 1724.532431][T11244] ? lock_acquire+0x1f1/0xad0 [ 1724.537125][T11244] ? tun_build_skb+0xf30/0xf30 [ 1724.542172][T11244] ? lock_downgrade+0x820/0x820 [ 1724.547824][T11244] ? aa_file_perm+0x5e2/0x1100 [ 1724.553823][T11244] tun_chr_write_iter+0xba/0x151 [ 1724.558863][T11244] new_sync_write+0x422/0x650 [ 1724.563558][T11244] ? new_sync_read+0x6e0/0x6e0 [ 1724.568802][T11244] ? lock_downgrade+0x820/0x820 [ 1724.573751][T11244] ? vfs_write+0x397/0x6b0 [ 1724.578184][T11244] ? apparmor_file_permission+0x26e/0x4e0 [ 1724.583959][T11244] vfs_write+0x59d/0x6b0 [ 1724.588222][T11244] ksys_write+0x12d/0x250 [ 1724.592562][T11244] ? __ia32_sys_read+0xb0/0xb0 [ 1724.597331][T11244] ? lock_is_held_type+0xb0/0xe0 [ 1724.603971][T11244] ? do_syscall_64+0x1c/0xe0 [ 1724.608585][T11244] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1724.614785][T11244] do_syscall_64+0x60/0xe0 [ 1724.619216][T11244] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1724.625203][T11244] RIP: 0033:0x45c369 [ 1724.629284][T11244] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1724.648980][T11244] RSP: 002b:00007fa1115efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1724.657408][T11244] RAX: ffffffffffffffda RBX: 0000000000038100 RCX: 000000000045c369 [ 1724.665831][T11244] RDX: 000000000000007e RSI: 0000000020000180 RDI: 0000000000000003 [ 1724.673812][T11244] RBP: 00007fa1115efca0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.681793][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.689952][T11244] R13: 00007ffffee3430f R14: 00007fa1115f09c0 R15: 000000000078bf0c [ 1724.735002][T11245] CPU: 0 PID: 11245 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 1724.743823][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.754065][T11245] Call Trace: [ 1724.757382][T11245] dump_stack+0x18f/0x20d [ 1724.761733][T11245] should_fail.cold+0x5/0x14 [ 1724.766443][T11245] should_failslab+0x5/0xf [ 1724.770870][T11245] kmem_cache_alloc_node+0x257/0x3c0 [ 1724.776176][T11245] __alloc_skb+0x71/0x550 [ 1724.780552][T11245] alloc_skb_with_frags+0x92/0x570 [ 1724.785766][T11245] ? __might_fault+0xef/0x1d0 [ 1724.790470][T11245] ? find_held_lock+0x2d/0x110 [ 1724.795362][T11245] sock_alloc_send_pskb+0x72a/0x880 [ 1724.800580][T11245] ? lock_downgrade+0x820/0x820 [ 1724.805475][T11245] ? sock_wmalloc+0x120/0x120 [ 1724.810170][T11245] ? copyin+0x10e/0x140 [ 1724.814349][T11245] ? _copy_from_iter_full+0x247/0x890 [ 1724.819921][T11245] ? iov_iter_advance+0x250/0xea0 [ 1724.824968][T11245] tun_get_user+0x135b/0x35b0 [ 1724.829680][T11245] ? lock_acquire+0x1f1/0xad0 [ 1724.834373][T11245] ? tun_build_skb+0xf30/0xf30 [ 1724.839166][T11245] ? lock_downgrade+0x820/0x820 [ 1724.844460][T11245] ? aa_file_perm+0x5e2/0x1100 [ 1724.849247][T11245] tun_chr_write_iter+0xba/0x151 [ 1724.854407][T11245] new_sync_write+0x422/0x650 [ 1724.859096][T11245] ? new_sync_read+0x6e0/0x6e0 [ 1724.863998][T11245] ? lock_downgrade+0x820/0x820 [ 1724.868859][T11245] ? vfs_write+0x397/0x6b0 [ 1724.873297][T11245] ? apparmor_file_permission+0x26e/0x4e0 [ 1724.879049][T11245] vfs_write+0x59d/0x6b0 [ 1724.883305][T11245] ksys_write+0x12d/0x250 [ 1724.887647][T11245] ? __ia32_sys_read+0xb0/0xb0 [ 1724.892418][T11245] ? lock_is_held_type+0xb0/0xe0 [ 1724.897381][T11245] ? do_syscall_64+0x1c/0xe0 [ 1724.902027][T11245] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1724.908136][T11245] do_syscall_64+0x60/0xe0 [ 1724.912571][T11245] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1724.918484][T11245] RIP: 0033:0x45c369 [ 1724.922401][T11245] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1724.942107][T11245] RSP: 002b:00007fc2e0158c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1724.950536][T11245] RAX: ffffffffffffffda RBX: 0000000000038100 RCX: 000000000045c369 [ 1724.958536][T11245] RDX: 000000000000007e RSI: 0000000020000180 RDI: 0000000000000003 [ 1724.966521][T11245] RBP: 00007fc2e0158ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.974508][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 06:07:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x18, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1724.982494][T11245] R13: 00007ffe9863104f R14: 00007fc2e01599c0 R15: 000000000078bf0c 06:07:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x300, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:38 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb}}]}, 0x74}}, 0x0) [ 1725.166654][ T29] audit: type=1800 audit(5890774058.088:141): pid=11246 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16383 res=0 06:07:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xf}}, 0x0) 06:07:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'macvlan1\x00', {0x7, 0x2000, @multicast1}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000005c09000060bc7d94004c2c00fe800000000000409ebeb9d053e000000000000000aaff0200000000000000000000000000012f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) bind$isdn(r7, &(0x7f0000000340)={0x22, 0x82, 0x0, 0x8, 0x80}, 0x6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000200)=""/200) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000100)=0x60) 06:07:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) r4 = socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r7) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x14}}, 0x0) 06:07:39 executing program 3 (fault-call:4 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:39 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) [ 1726.168575][T11307] FAULT_INJECTION: forcing a failure. [ 1726.168575][T11307] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.179654][T11308] FAULT_INJECTION: forcing a failure. [ 1726.179654][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.188598][T11307] CPU: 1 PID: 11307 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 1726.202769][T11307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.212823][T11307] Call Trace: [ 1726.216275][T11307] dump_stack+0x18f/0x20d [ 1726.220611][T11307] should_fail.cold+0x5/0x14 [ 1726.225198][T11307] should_failslab+0x5/0xf [ 1726.229610][T11307] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1726.235430][T11307] __kmalloc_node_track_caller+0x38/0x60 [ 1726.241158][T11307] __alloc_skb+0xae/0x550 [ 1726.245620][T11307] alloc_skb_with_frags+0x92/0x570 [ 1726.250727][T11307] ? __might_fault+0xef/0x1d0 [ 1726.255579][T11307] ? find_held_lock+0x2d/0x110 [ 1726.260358][T11307] sock_alloc_send_pskb+0x72a/0x880 [ 1726.265550][T11307] ? lock_downgrade+0x820/0x820 [ 1726.270524][T11307] ? sock_wmalloc+0x120/0x120 [ 1726.275184][T11307] ? copyin+0x10e/0x140 [ 1726.279658][T11307] ? _copy_from_iter_full+0x247/0x890 [ 1726.285230][T11307] ? iov_iter_advance+0x250/0xea0 [ 1726.290515][T11307] tun_get_user+0x135b/0x35b0 [ 1726.295640][T11307] ? lock_acquire+0x1f1/0xad0 [ 1726.300501][T11307] ? tun_build_skb+0xf30/0xf30 [ 1726.305368][T11307] ? lock_downgrade+0x820/0x820 [ 1726.310395][T11307] ? aa_file_perm+0x5e2/0x1100 [ 1726.315156][T11307] tun_chr_write_iter+0xba/0x151 [ 1726.320086][T11307] new_sync_write+0x422/0x650 [ 1726.324836][T11307] ? new_sync_read+0x6e0/0x6e0 [ 1726.329674][T11307] ? lock_downgrade+0x820/0x820 [ 1726.334507][T11307] ? vfs_write+0x397/0x6b0 [ 1726.339027][T11307] ? apparmor_file_permission+0x26e/0x4e0 [ 1726.344774][T11307] vfs_write+0x59d/0x6b0 [ 1726.349960][T11307] ksys_write+0x12d/0x250 [ 1726.355318][T11307] ? __ia32_sys_read+0xb0/0xb0 [ 1726.360359][T11307] ? lock_is_held_type+0xb0/0xe0 [ 1726.365284][T11307] ? do_syscall_64+0x1c/0xe0 [ 1726.369862][T11307] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1726.375858][T11307] do_syscall_64+0x60/0xe0 [ 1726.380356][T11307] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1726.386235][T11307] RIP: 0033:0x45c369 [ 1726.390172][T11307] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1726.409927][T11307] RSP: 002b:00007fc2e0158c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1726.418512][T11307] RAX: ffffffffffffffda RBX: 0000000000038100 RCX: 000000000045c369 [ 1726.426466][T11307] RDX: 000000000000007e RSI: 0000000020000180 RDI: 0000000000000003 [ 1726.434517][T11307] RBP: 00007fc2e0158ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.442510][T11307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.450479][T11307] R13: 00007ffe9863104f R14: 00007fc2e01599c0 R15: 000000000078bf0c [ 1726.458454][T11308] CPU: 0 PID: 11308 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 1726.467229][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.477321][T11308] Call Trace: [ 1726.480662][T11308] dump_stack+0x18f/0x20d [ 1726.485011][T11308] should_fail.cold+0x5/0x14 [ 1726.489620][T11308] should_failslab+0x5/0xf [ 1726.494052][T11308] kmem_cache_alloc+0x40/0x3b0 [ 1726.498897][T11308] inet_frag_find+0x829/0x20f0 [ 1726.503745][T11308] ? nf_ct_frag6_expire+0x7a0/0x7a0 [ 1726.508964][T11308] ? inet_frag_kill+0x12b0/0x12b0 [ 1726.514006][T11308] ? mark_lock+0xbc/0x1710 [ 1726.518435][T11308] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1726.524530][T11308] ? __lock_acquire+0xc1e/0x56e0 [ 1726.529484][T11308] nf_ct_frag6_gather+0x6d2/0x2180 [ 1726.534626][T11308] ? ip6frag_obj_hashfn+0x260/0x260 [ 1726.540318][T11308] ? lock_release+0x8d0/0x8d0 [ 1726.545030][T11308] ipv6_defrag+0x227/0x4c0 [ 1726.549821][T11308] ? find_held_lock+0x2d/0x110 [ 1726.554847][T11308] nf_hook_slow+0xc5/0x1e0 [ 1726.559513][T11308] nf_hook.constprop.0+0x35b/0x5d0 [ 1726.564644][T11308] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 1726.571700][T11308] ? NF_HOOK_LIST.constprop.0+0x330/0x330 [ 1726.577465][T11308] ? tun_sock_write_space+0xf2/0x1d0 [ 1726.583051][T11308] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 1726.590109][T11308] ? ip6_rcv_core+0xf6c/0x1bb0 [ 1726.595251][T11308] ipv6_rcv+0x9e/0x3c0 [ 1726.599337][T11308] ? ip6_rcv_core+0x1bb0/0x1bb0 [ 1726.604419][T11308] __netif_receive_skb_one_core+0x114/0x180 [ 1726.610425][T11308] ? __netif_receive_skb_core+0x3690/0x3690 [ 1726.616372][T11308] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1726.621598][T11308] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 1726.627939][T11308] ? ktime_get_with_offset+0x130/0x1a0 [ 1726.633419][T11308] __netif_receive_skb+0x27/0x1c0 [ 1726.638494][T11308] netif_receive_skb+0x159/0x990 [ 1726.643533][T11308] ? __netif_receive_skb+0x1c0/0x1c0 [ 1726.648830][T11308] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1726.655008][T11308] tun_rx_batched.isra.0+0x460/0x720 [ 1726.660390][T11308] ? tun_get_user+0x197f/0x35b0 [ 1726.665252][T11308] ? tun_sock_write_space+0x1d0/0x1d0 [ 1726.670633][T11308] ? lock_release+0x8d0/0x8d0 [ 1726.675324][T11308] ? lock_downgrade+0x820/0x820 [ 1726.680191][T11308] ? __local_bh_enable_ip+0x159/0x250 [ 1726.685590][T11308] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1726.691586][T11308] ? tun_get_user+0x231f/0x35b0 [ 1726.696448][T11308] ? trace_hardirqs_on+0x5f/0x220 [ 1726.701978][T11308] tun_get_user+0x23b2/0x35b0 [ 1726.706686][T11308] ? lock_acquire+0x1f1/0xad0 [ 1726.711466][T11308] ? tun_build_skb+0xf30/0xf30 [ 1726.716248][T11308] ? lock_downgrade+0x820/0x820 [ 1726.721116][T11308] ? aa_file_perm+0x5e2/0x1100 [ 1726.725913][T11308] tun_chr_write_iter+0xba/0x151 [ 1726.730976][T11308] new_sync_write+0x422/0x650 [ 1726.735755][T11308] ? new_sync_read+0x6e0/0x6e0 [ 1726.740535][T11308] ? lock_downgrade+0x820/0x820 [ 1726.745570][T11308] ? vfs_write+0x397/0x6b0 [ 1726.750002][T11308] ? apparmor_file_permission+0x26e/0x4e0 [ 1726.755741][T11308] vfs_write+0x59d/0x6b0 [ 1726.760030][T11308] ksys_write+0x12d/0x250 [ 1726.764369][T11308] ? __ia32_sys_read+0xb0/0xb0 [ 1726.769231][T11308] ? lock_is_held_type+0xb0/0xe0 [ 1726.774353][T11308] ? do_syscall_64+0x1c/0xe0 [ 1726.779244][T11308] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1726.785263][T11308] do_syscall_64+0x60/0xe0 [ 1726.789806][T11308] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1726.795709][T11308] RIP: 0033:0x45c369 [ 1726.799619][T11308] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:07:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc0}}, 0x0) [ 1726.819406][T11308] RSP: 002b:00007fa1115efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1726.827850][T11308] RAX: ffffffffffffffda RBX: 0000000000038100 RCX: 000000000045c369 [ 1726.837333][T11308] RDX: 000000000000007e RSI: 0000000020000180 RDI: 0000000000000003 [ 1726.845437][T11308] RBP: 00007fa1115efca0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.853645][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.862323][T11308] R13: 00007ffffee3430f R14: 00007fa1115f09c0 R15: 000000000078bf0c 06:07:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xec0}}, 0x0) 06:07:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x33fe0}}, 0x0) 06:07:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2000006c}}, 0x0) 06:07:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x7}, 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000240)=0xffff8000) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:40 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc}}]}, 0x74}}, 0x0) 06:07:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x7ffff000}}, 0x0) 06:07:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) getpeername$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xfffffdef}}, 0x0) 06:07:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x2}, 0x0) 06:07:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x3}, 0x0) 06:07:41 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:41 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe}}]}, 0x74}}, 0x0) 06:07:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) fcntl$getflags(r4, 0x40a) 06:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x8}, 0x0) 06:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0xa}, 0x0) 06:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x13}, 0x0) 06:07:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x18}, 0x0) 06:07:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000006fb1fe8000000000000000000000000000aacc0200000000000000000000000000012f00"/51], 0x7e) 06:07:42 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf}}]}, 0x74}}, 0x0) 06:07:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x300}, 0x0) 06:07:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0xffffff1f}, 0x0) 06:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x2}, 0x0) 06:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x3}, 0x0) 06:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x4}, 0x0) 06:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x5}, 0x0) 06:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x8}, 0x0) [ 1730.877479][ T29] audit: type=1800 audit(5890774063.788:142): pid=11455 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=16209 res=0 06:07:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) listen(r2, 0x100) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0x7e) 06:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x9}, 0x0) 06:07:44 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10}}]}, 0x74}}, 0x0) 06:07:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000003f84"], 0x7e) 06:07:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendfile(r2, r3, 0x0, 0x2) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/151, 0x97}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x6e01}, 0x3e01) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xe}, 0x0) 06:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf}, 0x0) 06:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x60}, 0x0) 06:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf0}, 0x0) 06:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x300}, 0x0) 06:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x500}, 0x0) 06:07:45 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:45 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11}}]}, 0x74}}, 0x0) 06:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x900}, 0x0) 06:07:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000003f84"], 0x7e) 06:07:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4c00, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, 0x0, 0x917, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PEER_CONN_ID={0x6}, @L2TP_ATTR_MTU={0x0, 0x1c, 0xffff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c1}, 0xc004010) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xe00}, 0x0) [ 1732.556246][T11599] FAULT_INJECTION: forcing a failure. [ 1732.556246][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.628240][T11599] CPU: 1 PID: 11599 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1732.636962][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.647299][T11599] Call Trace: [ 1732.650611][T11599] dump_stack+0x18f/0x20d [ 1732.655005][T11599] should_fail.cold+0x5/0x14 [ 1732.659787][T11599] should_failslab+0x5/0xf [ 1732.664216][T11599] kmem_cache_alloc_node+0x257/0x3c0 [ 1732.669600][T11599] __alloc_skb+0x71/0x550 [ 1732.673974][T11599] netlink_sendmsg+0x94f/0xd90 [ 1732.678757][T11599] ? netlink_unicast+0x7d0/0x7d0 [ 1732.683712][T11599] ? netlink_unicast+0x7d0/0x7d0 [ 1732.688750][T11599] sock_sendmsg+0xcf/0x120 [ 1732.693182][T11599] ____sys_sendmsg+0x6e8/0x810 [ 1732.697964][T11599] ? kernel_sendmsg+0x50/0x50 [ 1732.702734][T11599] ? do_recvmmsg+0x6d0/0x6d0 [ 1732.707426][T11599] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1732.713415][T11599] ? _parse_integer+0x132/0x180 [ 1732.718306][T11599] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1732.724298][T11599] ___sys_sendmsg+0xf3/0x170 06:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf00}, 0x0) 06:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x13a4}, 0x0) [ 1732.728898][T11599] ? sendmsg_copy_msghdr+0x160/0x160 [ 1732.734196][T11599] ? __fget_files+0x272/0x400 [ 1732.738919][T11599] ? lock_downgrade+0x820/0x820 [ 1732.743782][T11599] ? find_held_lock+0x2d/0x110 [ 1732.748668][T11599] ? ksys_write+0x212/0x250 [ 1732.753210][T11599] ? __fget_files+0x294/0x400 [ 1732.757899][T11599] ? __fget_light+0xea/0x280 [ 1732.762511][T11599] __sys_sendmsg+0xe5/0x1b0 [ 1732.767314][T11599] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1732.772360][T11599] ? do_syscall_64+0x1c/0xe0 [ 1732.776970][T11599] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1732.782968][T11599] do_syscall_64+0x60/0xe0 [ 1732.787399][T11599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1732.793298][T11599] RIP: 0033:0x45c369 [ 1732.797286][T11599] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1732.816982][T11599] RSP: 002b:00007f47c69c5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1732.825404][T11599] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c369 [ 1732.833475][T11599] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1732.841458][T11599] RBP: 00007f47c69c5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.849444][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1732.857428][T11599] R13: 00007ffc6659a8ff R14: 00007f47c69c69c0 R15: 000000000078bf0c 06:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x6000}, 0x0) 06:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xa413}, 0x0) 06:07:46 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x12}}]}, 0x74}}, 0x0) 06:07:46 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf000}, 0x0) [ 1733.464126][T11638] FAULT_INJECTION: forcing a failure. [ 1733.464126][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.488044][T11638] CPU: 1 PID: 11638 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1733.496760][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.506914][T11638] Call Trace: [ 1733.510223][T11638] dump_stack+0x18f/0x20d [ 1733.514573][T11638] should_fail.cold+0x5/0x14 [ 1733.519178][T11638] should_failslab+0x5/0xf [ 1733.523607][T11638] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1733.529431][T11638] __kmalloc_node_track_caller+0x38/0x60 [ 1733.535074][T11638] __alloc_skb+0xae/0x550 [ 1733.539519][T11638] netlink_sendmsg+0x94f/0xd90 [ 1733.544305][T11638] ? netlink_unicast+0x7d0/0x7d0 [ 1733.549268][T11638] ? netlink_unicast+0x7d0/0x7d0 [ 1733.554225][T11638] sock_sendmsg+0xcf/0x120 [ 1733.558658][T11638] ____sys_sendmsg+0x6e8/0x810 [ 1733.563443][T11638] ? kernel_sendmsg+0x50/0x50 [ 1733.568657][T11638] ? do_recvmmsg+0x6d0/0x6d0 [ 1733.573420][T11638] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1733.579424][T11638] ? _parse_integer+0x132/0x180 [ 1733.584290][T11638] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1733.590289][T11638] ___sys_sendmsg+0xf3/0x170 [ 1733.594929][T11638] ? sendmsg_copy_msghdr+0x160/0x160 [ 1733.600226][T11638] ? __fget_files+0x272/0x400 [ 1733.604922][T11638] ? lock_downgrade+0x820/0x820 [ 1733.609790][T11638] ? find_held_lock+0x2d/0x110 [ 1733.614566][T11638] ? ksys_write+0x212/0x250 [ 1733.619096][T11638] ? __fget_files+0x294/0x400 [ 1733.623936][T11638] ? __fget_light+0xea/0x280 [ 1733.628888][T11638] __sys_sendmsg+0xe5/0x1b0 [ 1733.633400][T11638] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1733.641052][T11638] ? do_syscall_64+0x1c/0xe0 [ 1733.645653][T11638] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1733.651643][T11638] do_syscall_64+0x60/0xe0 [ 1733.656071][T11638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1733.661969][T11638] RIP: 0033:0x45c369 [ 1733.665869][T11638] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1733.685659][T11638] RSP: 002b:00007f47c69c5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1733.694090][T11638] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c369 [ 1733.702070][T11638] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 06:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x30000}, 0x0) [ 1733.710053][T11638] RBP: 00007f47c69c5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.718044][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1733.726035][T11638] R13: 00007ffc6659a8ff R14: 00007f47c69c69c0 R15: 000000000078bf0c 06:07:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000030084"], 0x7e) 06:07:47 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x34000}, 0x0) 06:07:47 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f0000000240)=""/29, 0x1d, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:47 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13}}]}, 0x74}}, 0x0) 06:07:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x400300}, 0x0) [ 1734.436584][T11679] FAULT_INJECTION: forcing a failure. [ 1734.436584][T11679] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.480273][T11679] CPU: 0 PID: 11679 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1734.488994][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.499053][T11679] Call Trace: [ 1734.502530][T11679] dump_stack+0x18f/0x20d [ 1734.506879][T11679] should_fail.cold+0x5/0x14 [ 1734.511489][T11679] ? genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 1734.518345][T11679] should_failslab+0x5/0xf [ 1734.522771][T11679] __kmalloc+0x27d/0x340 [ 1734.527031][T11679] genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 1734.533718][T11679] genl_rcv_msg+0x4a3/0x980 [ 1734.538262][T11679] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1734.545212][T11679] ? lock_acquire+0x1f1/0xad0 [ 1734.549893][T11679] ? genl_rcv+0x15/0x40 [ 1734.554152][T11679] ? lock_release+0x8d0/0x8d0 [ 1734.558843][T11679] netlink_rcv_skb+0x15a/0x430 [ 1734.563617][T11679] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1734.570654][T11679] ? netlink_ack+0xa10/0xa10 [ 1734.575264][T11679] genl_rcv+0x24/0x40 [ 1734.579260][T11679] netlink_unicast+0x533/0x7d0 [ 1734.584044][T11679] ? netlink_attachskb+0x810/0x810 [ 1734.589255][T11679] ? _copy_from_iter_full+0x247/0x890 [ 1734.594692][T11679] ? __phys_addr+0x9a/0x110 [ 1734.599664][T11679] ? __phys_addr_symbol+0x2c/0x70 [ 1734.604711][T11679] ? __check_object_size+0x171/0x3e4 [ 1734.610019][T11679] netlink_sendmsg+0x856/0xd90 [ 1734.614805][T11679] ? netlink_unicast+0x7d0/0x7d0 [ 1734.619767][T11679] ? netlink_unicast+0x7d0/0x7d0 [ 1734.624722][T11679] sock_sendmsg+0xcf/0x120 [ 1734.629157][T11679] ____sys_sendmsg+0x6e8/0x810 [ 1734.633934][T11679] ? kernel_sendmsg+0x50/0x50 [ 1734.638615][T11679] ? do_recvmmsg+0x6d0/0x6d0 [ 1734.643215][T11679] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1734.649202][T11679] ? _parse_integer+0x132/0x180 [ 1734.654236][T11679] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1734.660229][T11679] ___sys_sendmsg+0xf3/0x170 [ 1734.664838][T11679] ? sendmsg_copy_msghdr+0x160/0x160 [ 1734.670219][T11679] ? __fget_files+0x272/0x400 [ 1734.674997][T11679] ? lock_downgrade+0x820/0x820 [ 1734.679858][T11679] ? find_held_lock+0x2d/0x110 [ 1734.684717][T11679] ? ksys_write+0x212/0x250 [ 1734.689237][T11679] ? __fget_files+0x294/0x400 [ 1734.693928][T11679] ? __fget_light+0xea/0x280 [ 1734.698539][T11679] __sys_sendmsg+0xe5/0x1b0 [ 1734.703060][T11679] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1734.708117][T11679] ? do_syscall_64+0x1c/0xe0 [ 1734.712806][T11679] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1734.718809][T11679] do_syscall_64+0x60/0xe0 [ 1734.723339][T11679] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1734.729293][T11679] RIP: 0033:0x45c369 [ 1734.733197][T11679] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1734.752810][T11679] RSP: 002b:00007f47c69c5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.761229][T11679] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c369 [ 1734.769377][T11679] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1734.777701][T11679] RBP: 00007f47c69c5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.785676][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.793742][T11679] R13: 00007ffc6659a8ff R14: 00007f47c69c69c0 R15: 000000000078bf0c 06:07:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf0ffff}, 0x0) 06:07:47 executing program 2 (fault-call:2 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1734.980769][T11705] FAULT_INJECTION: forcing a failure. [ 1734.980769][T11705] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.994243][T11705] CPU: 0 PID: 11705 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1735.003145][T11705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.013208][T11705] Call Trace: [ 1735.016534][T11705] dump_stack+0x18f/0x20d [ 1735.020887][T11705] should_fail.cold+0x5/0x14 [ 1735.025582][T11705] should_failslab+0x5/0xf [ 1735.030004][T11705] kmem_cache_alloc_node+0x257/0x3c0 [ 1735.035298][T11705] __alloc_skb+0x71/0x550 [ 1735.039727][T11705] tipc_nl_node_get_link+0x205/0x7f0 [ 1735.045015][T11705] ? nla_get_range_signed+0x520/0x520 [ 1735.050405][T11705] ? tipc_nl_node_set_link+0x530/0x530 [ 1735.055878][T11705] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1735.061457][T11705] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1735.068750][T11705] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1735.075692][T11705] genl_rcv_msg+0x61d/0x980 [ 1735.080208][T11705] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1735.087204][T11705] ? lock_release+0x8d0/0x8d0 [ 1735.091978][T11705] netlink_rcv_skb+0x15a/0x430 [ 1735.096849][T11705] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1735.103790][T11705] ? netlink_ack+0xa10/0xa10 [ 1735.108400][T11705] genl_rcv+0x24/0x40 [ 1735.112406][T11705] netlink_unicast+0x533/0x7d0 [ 1735.117239][T11705] ? netlink_attachskb+0x810/0x810 [ 1735.122344][T11705] ? _copy_from_iter_full+0x247/0x890 06:07:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x1000000}, 0x0) [ 1735.127711][T11705] ? __phys_addr+0x9a/0x110 [ 1735.132801][T11705] ? __phys_addr_symbol+0x2c/0x70 [ 1735.138043][T11705] ? __check_object_size+0x171/0x3e4 [ 1735.143430][T11705] netlink_sendmsg+0x856/0xd90 [ 1735.148461][T11705] ? netlink_unicast+0x7d0/0x7d0 [ 1735.153392][T11705] ? netlink_unicast+0x7d0/0x7d0 [ 1735.158433][T11705] sock_sendmsg+0xcf/0x120 [ 1735.162920][T11705] ____sys_sendmsg+0x6e8/0x810 [ 1735.168380][T11705] ? kernel_sendmsg+0x50/0x50 [ 1735.173052][T11705] ? do_recvmmsg+0x6d0/0x6d0 [ 1735.177646][T11705] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1735.183737][T11705] ? _parse_integer+0x132/0x180 [ 1735.188668][T11705] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1735.194644][T11705] ___sys_sendmsg+0xf3/0x170 [ 1735.199314][T11705] ? sendmsg_copy_msghdr+0x160/0x160 [ 1735.204596][T11705] ? __fget_files+0x272/0x400 [ 1735.209268][T11705] ? lock_downgrade+0x820/0x820 [ 1735.214101][T11705] ? find_held_lock+0x2d/0x110 [ 1735.218845][T11705] ? ksys_write+0x212/0x250 [ 1735.223447][T11705] ? __fget_files+0x294/0x400 [ 1735.228124][T11705] ? __fget_light+0xea/0x280 [ 1735.232714][T11705] __sys_sendmsg+0xe5/0x1b0 [ 1735.237220][T11705] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1735.242256][T11705] ? do_syscall_64+0x1c/0xe0 [ 1735.246829][T11705] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1735.252902][T11705] do_syscall_64+0x60/0xe0 [ 1735.257301][T11705] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1735.263277][T11705] RIP: 0033:0x45c369 [ 1735.267179][T11705] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1735.286776][T11705] RSP: 002b:00007f47c69c5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1735.295281][T11705] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c369 [ 1735.303372][T11705] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1735.311422][T11705] RBP: 00007f47c69c5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.319395][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1735.328220][T11705] R13: 00007ffc6659a8ff R14: 00007f47c69c69c0 R15: 000000000078bf0c 06:07:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0x7, 0x1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:48 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x38}}]}, 0x74}}, 0x0) 06:07:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0800000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000003f84"], 0x7e) 06:07:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x2000000}, 0x0) 06:07:49 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x60}}]}, 0x74}}, 0x0) 06:07:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x3000000}, 0x0) 06:07:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), 0x8) socket(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000240)={@any, 0xe9c, 0xd36}) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000002c0)) 06:07:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x4000000}, 0x0) 06:07:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x5000000}, 0x0) 06:07:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x200001fe) 06:07:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x8000000}, 0x0) 06:07:50 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}}, 0x0) 06:07:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x9000000}, 0x0) 06:07:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1737.683871][ T29] audit: type=1800 audit(5890774070.588:143): pid=11780 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpuacct.usage_user" dev="sda1" ino=15888 res=0 06:07:50 executing program 5 (fault-call:9 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xe000000}, 0x0) 06:07:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf000000}, 0x0) [ 1738.231636][T11851] FAULT_INJECTION: forcing a failure. [ 1738.231636][T11851] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.281062][T11851] CPU: 1 PID: 11851 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1738.289787][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.299853][T11851] Call Trace: [ 1738.303161][T11851] dump_stack+0x18f/0x20d [ 1738.307517][T11851] should_fail.cold+0x5/0x14 [ 1738.312131][T11851] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1738.317871][T11851] should_failslab+0x5/0xf [ 1738.322298][T11851] __kmalloc+0x27d/0x340 [ 1738.326550][T11851] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1738.332109][T11851] tomoyo_realpath_from_path+0xc3/0x620 [ 1738.337668][T11851] ? tomoyo_profile+0x42/0x50 [ 1738.343675][T11851] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1738.349146][T11851] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1738.354793][T11851] ? tomoyo_execute_permission+0x470/0x470 [ 1738.360615][T11851] ? lock_acquire+0x1f1/0xad0 [ 1738.365324][T11851] ? delayed_put_pid+0x30/0x30 [ 1738.370106][T11851] ? find_held_lock+0x2d/0x110 [ 1738.374904][T11851] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1738.380549][T11851] ? lock_is_held_type+0xb0/0xe0 [ 1738.385506][T11851] ? __fget_files+0x294/0x400 [ 1738.390199][T11851] security_file_ioctl+0x50/0xb0 [ 1738.395255][T11851] ksys_ioctl+0x50/0x180 [ 1738.399510][T11851] __x64_sys_ioctl+0x6f/0xb0 [ 1738.404111][T11851] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1738.409226][T11851] do_syscall_64+0x60/0xe0 [ 1738.413628][T11851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1738.421209][T11851] RIP: 0033:0x45c369 [ 1738.425293][T11851] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1738.445013][T11851] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.453476][T11851] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1738.461613][T11851] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1738.469937][T11851] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.477906][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1738.485985][T11851] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1738.508968][T11851] ERROR: Out of memory at tomoyo_realpath_from_path. 06:07:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:51 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x74}}, 0x0) 06:07:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x60000000}, 0x0) 06:07:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:51 executing program 5 (fault-call:9 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x9effffff}, 0x0) 06:07:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x40024) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) syz_read_part_table(0x401, 0xa, &(0x7f0000000a00)=[{&(0x7f0000000300)="dd2066c4a4cfd3ff8026949d08984c6729f67d9aa302d3c3189c3c0fdf3368604c6ff6f8a8e557ea7bce52a26c32680fc3f457ee8cae3adb4d5db152dd5c17cfa0a354e424b1fcb315c03378322bd7982c5662975e2b7374b1e28c86608473d3338fcf0a153eefd8b9bd2c037be3d794609dbd064f9d75f27b96a2b2575245a485dbd1799b78d60c6b64b5fde7f506e6ecbc0ab9660e9878f4ec4e", 0x9b, 0x6}, {&(0x7f00000003c0)="60e4fbe496590512160ead87abe4d925b6d7578593d8333d6a2f28f98b7309f37ccf4bd57752d8c7c790fa6d7448298f96da8b03709bf719259c745586b1820c49b7b836687b4e4e2139840cb68d555031f2a2d39854ada9131970914c77a1d43c74b3", 0x63, 0x200}, {&(0x7f0000000440)="1c129dbf5c2e7800edb383d7c52497a625e71b7c7591f607a11cf245a21926c7f3ffacfb833b0136a4", 0x29, 0xfffffffffffffffa}, {&(0x7f0000000480)="a5578062cde2f4c124f8b0b9e382d60e11963995292f4e6872081e5de22f80e43a71cdeb59ec66833d4f1a05762af8440bdebd3619e297420802689c38651d96aa4448d58ccf67", 0x47, 0x4}, {&(0x7f0000000500)="36a5ef564c3c0fb5a9a574da4d6052917496c8920539601aad83318fa303b2ec5f126566c574ff23792541eff67ed2c4c97aecbbeee757283ba053da0c25c18a123b387c7a6cb394c44453f8c402b8afcacd325060c78a9be41cd5fe4680b9da5ac0564d08a0ac0b8a3dde0aa7b564e8e05c44d5b788ef3be45209948fdd2e619f68f064c137f24c6bea3ed4d5ea6dbf44e8acaec72e54c6dab8579c4726d5c9739e173baca48c79b476292a675676e90bc33b79ebeb9899a4963046f54f2471aad36e5d9001347cb3737f9ee2e31ef06f72ec31fcfe3af8034de8999cbc657a7ce80e31ee688e5bbf299cda8b29e5aa9258907ad4b6defe3a", 0xf9, 0x3}, {&(0x7f0000000600)="ce2d599e9c36613b09437b1036205be810054592aa3060c0b15cba350ec6927d680cc21ef59d978b8d2234131b2a6337603345f535d0893d1351dfff1bf9f9b69b5dda8979f536f49e2e1ce97dbf7d13cfb6c0144df3072b6ad1afb8adc2e9adb6b0baee5a192d98335c10", 0x6b, 0x9}, {&(0x7f0000000680)="6bbaaeed9c91a2e442f120b662ec94c5356a8c8ee074cfbc8546ffbf0627ec1371e3e19082c7c4bdc3059c65e4db338c113c44a2b9583775af71c1e49b2a4f25202385635dc3e230c5784ca0da83a098188baadd8d6b31f843d95a0ebfb6bd2174429a04b4e04a5caf54432657480d810fac8e2b773be5b6d0bf5ec0540ca063048ba7805e96fddc1be17ca550ac9e92058cfe0fb815a2e99c9c5104dfcdb27484d901691956fd2e3b2cc91aa331f7229c7f28d35faf292465d992f1f51362a37d90094e89fe0ecb714f1992545b7b6c11032b4eb321801b53489c535f174c45a2225e06c49e2250b3ea6709b8b4", 0xee, 0x1}, {&(0x7f0000000780)="b0d0deabfd18ff545e437e43c028ba33db1c65ebb4c400f5a728f654312ead1015b7e4d43970f37a2b6680812351e3b71b152297926cc04a1863258fec4f9424460c18b588085415afa965dc7103cf3d9d740d73f6f17bbef5eba57229c3316fe700c13a6c2db188bbdfe46ecf149a1971be3b8dd3b7886f5f1fae8636798c5120ca8831843fb1e59b30ba30d6dae3f251f33d5218e63489c8aab79fb03033f9120c27068237f38f", 0xa8, 0xecaf}, {&(0x7f0000000840)="2f91ec767589a121d114db35e5cdca7dcc1e0fe80a12a3e454997e62cb62fc11bd0196f86b71fc71d56cf898aa4927aaa5fd79ff3ce7b40ce7e5b9094deea33df2a753a6be2d44a6e33e59c042cee19e61e90bc2f2c9bafe52b63db11d5a0d8b13bac3ab7dbc6a069c395ec046c1fe507807de283756da6eeb8a02b8eb246696e4ef3269a91588410afa1887d8564a320c1452ead419cf243adcdf57c08f17bcd0634af202cb606454378b316871f985cec1ff399150e45760201660c211cc43b35a23909d1d80154efa5ef50fe92e44828d", 0xd2, 0x5}, {&(0x7f0000000940)="68c6fc5416de8d8dceea248d192842f67478943b29c6a3ae14fc815fd9edcbdb24148df6db43d1a0532312772ff48865b6ce0501da54efab899fac2d33ab16636b1990152f2a79d1104567301794b390e2c4f59db119cdd11cc2ea040bd400fc7cec562ea725438c22a3c9acda7aba98e5f5711ff0d73fda44ac327371a2c880e4a873163ffc1cca2a03aef4e9eb567e7a8a", 0x92, 0xd487}]) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000008300000001"], 0x7e) [ 1738.761836][T11878] FAULT_INJECTION: forcing a failure. [ 1738.761836][T11878] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.801560][T11878] CPU: 0 PID: 11878 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1738.810459][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.820890][T11878] Call Trace: [ 1738.824198][T11878] dump_stack+0x18f/0x20d [ 1738.828547][T11878] should_fail.cold+0x5/0x14 [ 1738.833161][T11878] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1738.838634][T11878] should_failslab+0x5/0xf [ 1738.843061][T11878] __kmalloc+0x27d/0x340 [ 1738.847328][T11878] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1738.852546][T11878] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1738.858292][T11878] tomoyo_encode+0x28/0x50 [ 1738.862726][T11878] tomoyo_realpath_from_path+0x186/0x620 [ 1738.868386][T11878] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1738.873865][T11878] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1738.879519][T11878] ? tomoyo_execute_permission+0x470/0x470 [ 1738.885347][T11878] ? find_held_lock+0x2d/0x110 [ 1738.890148][T11878] ? enqueue_hrtimer+0x152/0x3f0 [ 1738.895241][T11878] ? kvm_sched_clock_read+0x14/0x40 [ 1738.900460][T11878] ? sched_clock+0x2a/0x40 [ 1738.904947][T11878] ? sched_clock_cpu+0x18/0x1b0 [ 1738.910014][T11878] ? clockevents_program_event+0x12b/0x350 [ 1738.915842][T11878] ? __fget_files+0x294/0x400 [ 1738.920551][T11878] security_file_ioctl+0x50/0xb0 [ 1738.925509][T11878] ksys_ioctl+0x50/0x180 [ 1738.929944][T11878] __x64_sys_ioctl+0x6f/0xb0 [ 1738.934656][T11878] do_syscall_64+0x60/0xe0 [ 1738.939090][T11878] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1738.944997][T11878] RIP: 0033:0x45c369 [ 1738.948905][T11878] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1738.968643][T11878] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.977329][T11878] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1738.985310][T11878] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1738.993295][T11878] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.001283][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.009269][T11878] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:07:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xa4130000}, 0x0) 06:07:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1739.166506][T11878] ERROR: Out of memory at tomoyo_realpath_from_path. 06:07:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf0ffffff}, 0x0) 06:07:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xfcffffff}, 0x0) 06:07:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:52 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x74}}, 0x0) 06:07:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xfffff000}, 0x0) 06:07:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1fffffff00005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:52 executing program 5 (fault-call:9 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0) [ 1740.160377][T11968] FAULT_INJECTION: forcing a failure. [ 1740.160377][T11968] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.192843][T11968] CPU: 0 PID: 11968 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 06:07:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x305) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xffffff9e}, 0x0) 06:07:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1740.201561][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.211625][T11968] Call Trace: [ 1740.214931][T11968] dump_stack+0x18f/0x20d [ 1740.219277][T11968] should_fail.cold+0x5/0x14 [ 1740.223884][T11968] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1740.229278][T11968] should_failslab+0x5/0xf [ 1740.233724][T11968] __kmalloc+0x27d/0x340 [ 1740.237993][T11968] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1740.243208][T11968] tomoyo_encode+0x28/0x50 [ 1740.247638][T11968] tomoyo_realpath_from_path+0x186/0x620 [ 1740.253287][T11968] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1740.258763][T11968] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1740.264502][T11968] ? tomoyo_execute_permission+0x470/0x470 [ 1740.270324][T11968] ? find_held_lock+0x2d/0x110 [ 1740.275292][T11968] ? enqueue_hrtimer+0x152/0x3f0 [ 1740.280261][T11968] ? native_apic_msr_write+0x54/0x80 [ 1740.285908][T11968] ? clockevents_program_event+0x12b/0x350 [ 1740.292092][T11968] ? __fget_files+0x294/0x400 [ 1740.296881][T11968] security_file_ioctl+0x50/0xb0 [ 1740.301829][T11968] ksys_ioctl+0x50/0x180 [ 1740.306075][T11968] __x64_sys_ioctl+0x6f/0xb0 [ 1740.310664][T11968] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1740.315952][T11968] do_syscall_64+0x60/0xe0 [ 1740.320385][T11968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1740.326277][T11968] RIP: 0033:0x45c369 [ 1740.330177][T11968] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1740.349783][T11968] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:07:53 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x74}}, 0x0) [ 1740.358199][T11968] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1740.366258][T11968] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1740.374311][T11968] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.382295][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.390276][T11968] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:07:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x18f0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xfffffff0}, 0x0) [ 1740.579718][T11968] ERROR: Out of memory at tomoyo_realpath_from_path. 06:07:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xfffffffc}, 0x0) 06:07:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0102000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:53 executing program 5 (fault-call:9 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x3000000000000}, 0x0) 06:07:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x1, 0x0, 0x1}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={r2, 0x4}, &(0x7f00000003c0)=0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) write$P9_RFSYNC(r3, &(0x7f00000002c0)={0x7, 0x33, 0x1}, 0x7) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000040)={0x1000, 0x3, 0x0, 0x200, 0x4, 0x40, 0xc}) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) bind(r5, &(0x7f00000001c0)=@in={0x2, 0x4e21, @remote}, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) accept4$netrom(0xffffffffffffffff, &(0x7f0000000480)={{0x3, @rose}, [@remote, @null, @bcast, @default, @null, @rose, @remote, @netrom]}, &(0x7f0000000100)=0x48, 0x100800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000200005c00000060bc7d94004c2c00fe800000006116adedf692000000000000000000aaff0600000001000000008000000074f6a9e6a64ce57bc3d636fa12d7e2ad164f40a675efaed1c41a38bbe4fc5bcfee542d63e4bcb2fd2aa9176bed995776280a852a07aa7a2c7253e8d2fdc084038a5a5d61bcd6739c90338aa9ffb88829c9eb176667c9641afdc99024a8d88796768ee0b0c45ce6493ccadc3211"], 0x7e) 06:07:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1740.924228][T12027] FAULT_INJECTION: forcing a failure. [ 1740.924228][T12027] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.959266][T12027] CPU: 1 PID: 12027 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1740.968048][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.978206][T12027] Call Trace: [ 1740.981507][T12027] dump_stack+0x18f/0x20d [ 1740.985854][T12027] should_fail.cold+0x5/0x14 [ 1740.990474][T12027] should_failslab+0x5/0xf [ 1740.994985][T12027] kmem_cache_alloc_trace+0x240/0x2d0 [ 1741.000377][T12027] ? loop_queue_rq+0x590/0x590 [ 1741.005162][T12027] loop_add+0x4e/0x8b0 [ 1741.009247][T12027] loop_control_ioctl+0x16c/0x480 [ 1741.014276][T12027] ? loop_lookup+0x1d0/0x1d0 [ 1741.018884][T12027] ? loop_lookup+0x1d0/0x1d0 [ 1741.023478][T12027] ksys_ioctl+0x11a/0x180 [ 1741.027904][T12027] __x64_sys_ioctl+0x6f/0xb0 [ 1741.032509][T12027] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1741.037629][T12027] do_syscall_64+0x60/0xe0 [ 1741.042051][T12027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1741.047945][T12027] RIP: 0033:0x45c369 [ 1741.051854][T12027] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1741.071462][T12027] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.079880][T12027] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1741.087872][T12027] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1741.095852][T12027] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.103823][T12027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1741.111790][T12027] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:07:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) 06:07:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) 06:07:54 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x74}}, 0x0) 06:07:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf018, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x30000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:54 executing program 5 (fault-call:9 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1741.603384][T12077] FAULT_INJECTION: forcing a failure. [ 1741.603384][T12077] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.643412][T12077] CPU: 0 PID: 12077 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1741.652131][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.662192][T12077] Call Trace: [ 1741.665599][T12077] dump_stack+0x18f/0x20d [ 1741.669955][T12077] should_fail.cold+0x5/0x14 [ 1741.674629][T12077] should_failslab+0x5/0xf [ 1741.679044][T12077] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1741.684936][T12077] __kmalloc_node+0x38/0x60 [ 1741.689444][T12077] blk_mq_realloc_tag_set_tags.part.0+0x81/0x190 [ 1741.695958][T12077] blk_mq_alloc_tag_set+0x613/0xcd0 [ 1741.701274][T12077] loop_add+0x26d/0x8b0 [ 1741.705447][T12077] loop_control_ioctl+0x16c/0x480 [ 1741.710476][T12077] ? loop_lookup+0x1d0/0x1d0 [ 1741.715064][T12077] ? loop_lookup+0x1d0/0x1d0 [ 1741.720001][T12077] ? ksys_ioctl+0xc0/0x180 [ 1741.724442][T12077] ? loop_lookup+0x1d0/0x1d0 [ 1741.729300][T12077] ksys_ioctl+0x11a/0x180 [ 1741.733631][T12077] __x64_sys_ioctl+0x6f/0xb0 [ 1741.738308][T12077] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1741.743423][T12077] do_syscall_64+0x60/0xe0 [ 1741.747855][T12077] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1741.753831][T12077] RIP: 0033:0x45c369 [ 1741.757745][T12077] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1741.777442][T12077] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.785860][T12077] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1741.794288][T12077] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1741.802245][T12077] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.810207][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1741.818170][T12077] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:07:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0103000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x100000000000000}, 0x0) 06:07:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0xf4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:54 executing program 5 (fault-call:9 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0) 06:07:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1742.160232][T12101] FAULT_INJECTION: forcing a failure. [ 1742.160232][T12101] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.173587][T12101] CPU: 0 PID: 12101 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1742.182273][T12101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.192331][T12101] Call Trace: [ 1742.195642][T12101] dump_stack+0x18f/0x20d [ 1742.199982][T12101] should_fail.cold+0x5/0x14 [ 1742.204590][T12101] should_failslab+0x5/0xf [ 1742.209022][T12101] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1742.215882][T12101] __kmalloc_node+0x38/0x60 [ 1742.220485][T12101] blk_mq_alloc_tag_set+0x400/0xcd0 [ 1742.225795][T12101] ? trace_kmalloc+0xfd/0x130 [ 1742.230492][T12101] loop_add+0x26d/0x8b0 [ 1742.234664][T12101] loop_control_ioctl+0x16c/0x480 [ 1742.239707][T12101] ? loop_lookup+0x1d0/0x1d0 [ 1742.244311][T12101] ? loop_lookup+0x1d0/0x1d0 [ 1742.248910][T12101] ksys_ioctl+0x11a/0x180 [ 1742.253250][T12101] __x64_sys_ioctl+0x6f/0xb0 06:07:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x300000000000000}, 0x0) [ 1742.257888][T12101] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1742.263008][T12101] do_syscall_64+0x60/0xe0 [ 1742.267431][T12101] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1742.273330][T12101] RIP: 0033:0x45c369 [ 1742.277233][T12101] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1742.297021][T12101] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1742.307264][T12101] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1742.315250][T12101] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1742.323252][T12101] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.331237][T12101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1742.339210][T12101] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:07:55 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x74}}, 0x0) 06:07:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x400000000000000}, 0x0) 06:07:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0104000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x500000000000000}, 0x0) 06:07:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x430a80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000800000000000000000000000d1a4112b71385ac777612c801d98298ae6ce951722aaff02000000"], 0x7e) 06:07:56 executing program 5 (fault-call:9 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x800000000000000}, 0x0) [ 1743.226691][T12163] FAULT_INJECTION: forcing a failure. [ 1743.226691][T12163] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.257690][T12163] CPU: 1 PID: 12163 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1743.266410][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:07:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1743.276469][T12163] Call Trace: [ 1743.279785][T12163] dump_stack+0x18f/0x20d [ 1743.284131][T12163] should_fail.cold+0x5/0x14 [ 1743.288832][T12163] should_failslab+0x5/0xf [ 1743.293354][T12163] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1743.299373][T12163] blk_mq_init_tags+0x6a/0x2b0 [ 1743.304154][T12163] blk_mq_alloc_rq_map+0x81/0x200 [ 1743.309303][T12163] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 1743.315311][T12163] blk_mq_alloc_tag_set+0x751/0xcd0 [ 1743.320615][T12163] loop_add+0x26d/0x8b0 [ 1743.324796][T12163] loop_control_ioctl+0x16c/0x480 [ 1743.329835][T12163] ? loop_lookup+0x1d0/0x1d0 [ 1743.334443][T12163] ? __fget_files+0x294/0x400 [ 1743.339152][T12163] ? loop_lookup+0x1d0/0x1d0 [ 1743.343751][T12163] ksys_ioctl+0x11a/0x180 [ 1743.348097][T12163] __x64_sys_ioctl+0x6f/0xb0 [ 1743.352700][T12163] do_syscall_64+0x60/0xe0 [ 1743.357131][T12163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1743.363312][T12163] RIP: 0033:0x45c369 [ 1743.367221][T12163] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1743.387370][T12163] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.396059][T12163] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1743.404155][T12163] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1743.412404][T12163] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 06:07:56 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x74}}, 0x0) 06:07:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x900000000000000}, 0x0) [ 1743.420395][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1743.428371][T12163] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:07:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xe00000000000000}, 0x0) 06:07:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf00000000000000}, 0x0) [ 1743.633477][T12163] blk-mq: reduced tag depth (128 -> 64) 06:07:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0105000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x6000000000000000}, 0x0) 06:07:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000005c00000060bc7d94004c2c00fe8000000000000000000000aaff0200000000000000000000002007a06f8bbb98d27d559ccc9900000184000000fec60c1cd1961aa351abfeebdb0778d7b46f8fcd9fa0d900"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0xb) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000001c0)=""/176) 06:07:57 executing program 5 (fault-call:9 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x9effffff00000000}, 0x0) 06:07:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1744.546508][T12231] FAULT_INJECTION: forcing a failure. [ 1744.546508][T12231] name failslab, interval 1, probability 0, space 0, times 0 06:07:57 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x74}}, 0x0) 06:07:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xa413000000000000}, 0x0) [ 1744.590290][T12231] CPU: 0 PID: 12231 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1744.599780][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.609934][T12231] Call Trace: [ 1744.613242][T12231] dump_stack+0x18f/0x20d [ 1744.617604][T12231] should_fail.cold+0x5/0x14 [ 1744.622211][T12231] should_failslab+0x5/0xf [ 1744.626639][T12231] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1744.632463][T12231] sbitmap_queue_init_node+0x29b/0x720 06:07:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf0ffffff00000000}, 0x0) [ 1744.637971][T12231] blk_mq_init_tags+0x10d/0x2b0 [ 1744.642837][T12231] blk_mq_alloc_rq_map+0x81/0x200 [ 1744.647882][T12231] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 1744.653891][T12231] blk_mq_alloc_tag_set+0x751/0xcd0 [ 1744.659107][T12231] loop_add+0x26d/0x8b0 [ 1744.663282][T12231] loop_control_ioctl+0x16c/0x480 [ 1744.668315][T12231] ? loop_lookup+0x1d0/0x1d0 [ 1744.672923][T12231] ? __fget_files+0x294/0x400 [ 1744.677620][T12231] ? loop_lookup+0x1d0/0x1d0 [ 1744.682214][T12231] ksys_ioctl+0x11a/0x180 [ 1744.686556][T12231] __x64_sys_ioctl+0x6f/0xb0 [ 1744.691154][T12231] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1744.696284][T12231] do_syscall_64+0x60/0xe0 [ 1744.700888][T12231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1744.706798][T12231] RIP: 0033:0x45c369 [ 1744.710695][T12231] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1744.730577][T12231] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1744.739084][T12231] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1744.747057][T12231] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1744.755122][T12231] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1744.763094][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1744.772595][T12231] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:07:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x3f000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1744.849166][T12231] blk-mq: reduced tag depth (128 -> 64) 06:07:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0106000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xfcffffff00000000}, 0x0) 06:07:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8080, 0x0) dup2(0xffffffffffffffff, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0xcd) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000a6475c00000060bc7d94dfb2a5e8d9ba67c4b75a6b49004c2c00fe8000000000000000000000000000aaff02000000"], 0x7e) 06:07:58 executing program 5 (fault-call:9 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0) 06:07:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xfffffffffffff000}, 0x0) [ 1745.563473][T12310] FAULT_INJECTION: forcing a failure. [ 1745.563473][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.587465][T12310] CPU: 0 PID: 12310 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1745.596708][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.606782][T12310] Call Trace: [ 1745.610089][T12310] dump_stack+0x18f/0x20d [ 1745.614441][T12310] should_fail.cold+0x5/0x14 [ 1745.619048][T12310] should_failslab+0x5/0xf [ 1745.623478][T12310] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1745.629298][T12310] sbitmap_queue_init_node+0x29b/0x720 [ 1745.634777][T12310] blk_mq_init_tags+0x16f/0x2b0 [ 1745.639648][T12310] blk_mq_alloc_rq_map+0x81/0x200 [ 1745.644697][T12310] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 1745.650873][T12310] blk_mq_alloc_tag_set+0x751/0xcd0 [ 1745.656096][T12310] loop_add+0x26d/0x8b0 [ 1745.660265][T12310] loop_control_ioctl+0x16c/0x480 [ 1745.665295][T12310] ? loop_lookup+0x1d0/0x1d0 [ 1745.669891][T12310] ? __fget_files+0x294/0x400 [ 1745.674584][T12310] ? loop_lookup+0x1d0/0x1d0 [ 1745.679181][T12310] ksys_ioctl+0x11a/0x180 [ 1745.683524][T12310] __x64_sys_ioctl+0x6f/0xb0 [ 1745.688125][T12310] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1745.693247][T12310] do_syscall_64+0x60/0xe0 [ 1745.697688][T12310] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1745.703589][T12310] RIP: 0033:0x45c369 [ 1745.707491][T12310] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1745.727102][T12310] RSP: 002b:00007ffb591dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.735521][T12310] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1745.743492][T12310] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1745.751561][T12310] RBP: 00007ffb591dbca0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.759563][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1745.767546][T12310] R13: 00007ffcd680a66f R14: 00007ffb591dc9c0 R15: 000000000078bfac 06:07:58 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa}}]}, 0x74}}, 0x0) 06:07:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf0180000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0) [ 1745.818375][T12310] blk-mq: reduced tag depth (128 -> 64) 06:07:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0) 06:07:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0107000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0) 06:07:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:07:58 executing program 5 (fault-call:9 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:07:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x5}, 0x0) 06:07:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x8}, 0x0) 06:07:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1746.241692][T12361] FAULT_INJECTION: forcing a failure. [ 1746.241692][T12361] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.275928][T12361] CPU: 0 PID: 12361 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1746.284739][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.294801][T12361] Call Trace: [ 1746.298101][T12361] dump_stack+0x18f/0x20d [ 1746.302440][T12361] should_fail.cold+0x5/0x14 [ 1746.307036][T12361] should_failslab+0x5/0xf [ 1746.311455][T12361] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1746.317271][T12361] __kmalloc_node+0x38/0x60 [ 1746.321781][T12361] blk_mq_alloc_rq_map+0xc3/0x200 [ 1746.326833][T12361] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 1746.333603][T12361] blk_mq_alloc_tag_set+0x751/0xcd0 [ 1746.338827][T12361] loop_add+0x26d/0x8b0 [ 1746.343080][T12361] loop_control_ioctl+0x16c/0x480 [ 1746.348201][T12361] ? loop_lookup+0x1d0/0x1d0 [ 1746.352897][T12361] ? __fget_files+0x294/0x400 [ 1746.357625][T12361] ? loop_lookup+0x1d0/0x1d0 [ 1746.362328][T12361] ksys_ioctl+0x11a/0x180 [ 1746.366669][T12361] __x64_sys_ioctl+0x6f/0xb0 [ 1746.371265][T12361] do_syscall_64+0x60/0xe0 [ 1746.375686][T12361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1746.381585][T12361] RIP: 0033:0x45c369 [ 1746.385950][T12361] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1746.406263][T12361] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.414679][T12361] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1746.422745][T12361] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1746.430734][T12361] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1746.438961][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1746.446964][T12361] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1746.607613][T12361] blk-mq: reduced tag depth (128 -> 64) 06:07:59 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb}}]}, 0x74}}, 0x0) 06:07:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9}, 0x0) 06:07:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:07:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xe}, 0x0) 06:07:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0108000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:07:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:00 executing program 5 (fault-call:9 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf}, 0x0) 06:08:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x60}, 0x0) [ 1747.268445][T12419] FAULT_INJECTION: forcing a failure. [ 1747.268445][T12419] name failslab, interval 1, probability 0, space 0, times 0 06:08:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1800}], 0x5e) semop(0x0, &(0x7f0000000180)=[{0x0, 0x0, 0x1800}, {0x0, 0x1f}, {0x0, 0x6}], 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r9) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x1, r3, r5, r7, r9, 0x54, 0x4}, 0x1000, 0x6}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000d20184"], 0x7e) [ 1747.337292][T12419] CPU: 0 PID: 12419 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1747.346098][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1747.356420][T12419] Call Trace: [ 1747.359741][T12419] dump_stack+0x18f/0x20d [ 1747.364560][T12419] should_fail.cold+0x5/0x14 [ 1747.369170][T12419] should_failslab+0x5/0xf [ 1747.373823][T12419] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1747.379696][T12419] __kmalloc_node+0x38/0x60 [ 1747.384211][T12419] blk_mq_alloc_rq_map+0xc3/0x200 [ 1747.389260][T12419] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 1747.395250][T12419] blk_mq_alloc_tag_set+0x751/0xcd0 [ 1747.400673][T12419] loop_add+0x26d/0x8b0 [ 1747.404941][T12419] loop_control_ioctl+0x16c/0x480 [ 1747.409974][T12419] ? loop_lookup+0x1d0/0x1d0 [ 1747.414567][T12419] ? __sanitizer_cov_trace_pc+0x9/0x60 [ 1747.420046][T12419] ? loop_lookup+0x1d0/0x1d0 [ 1747.424643][T12419] ksys_ioctl+0x11a/0x180 [ 1747.428985][T12419] __x64_sys_ioctl+0x6f/0xb0 [ 1747.433585][T12419] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1747.438702][T12419] do_syscall_64+0x60/0xe0 [ 1747.443125][T12419] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1747.449016][T12419] RIP: 0033:0x45c369 [ 1747.452910][T12419] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1747.472517][T12419] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1747.480958][T12419] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1747.488944][T12419] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1747.496919][T12419] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1747.504894][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1747.512916][T12419] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1747.558221][T12419] blk-mq: reduced tag depth (128 -> 64) 06:08:00 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc}}]}, 0x74}}, 0x0) 06:08:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0}, 0x0) 06:08:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0) 06:08:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x500}, 0x0) 06:08:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="010a000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:01 executing program 5 (fault-call:9 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) recvfrom(r1, &(0x7f0000000300)=""/108, 0x6c, 0x40, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast}, 0x80) socket$netlink(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/17) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000001c0)={'wg0\x00', {0x7, 0x4e23, @multicast2}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000040)={0xff, 0x7, 0x0, 0x1, 0x6, 0xfffffff7}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff020000000000000000c47e5f58e80000"], 0x7e) 06:08:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x900}, 0x0) 06:08:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xf, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1748.280274][T12480] FAULT_INJECTION: forcing a failure. [ 1748.280274][T12480] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.318919][T12480] CPU: 1 PID: 12480 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1748.327813][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1748.337882][T12480] Call Trace: [ 1748.341375][T12480] dump_stack+0x18f/0x20d [ 1748.345730][T12480] should_fail.cold+0x5/0x14 [ 1748.350341][T12480] should_failslab+0x5/0xf [ 1748.354868][T12480] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1748.360699][T12480] __kmalloc_node+0x38/0x60 [ 1748.365575][T12480] blk_mq_alloc_rq_map+0x104/0x200 [ 1748.370713][T12480] __blk_mq_alloc_map_and_request+0xa3/0x3b0 06:08:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xe00}, 0x0) [ 1748.376722][T12480] blk_mq_alloc_tag_set+0x751/0xcd0 [ 1748.382038][T12480] loop_add+0x26d/0x8b0 [ 1748.386315][T12480] loop_control_ioctl+0x16c/0x480 [ 1748.391483][T12480] ? loop_lookup+0x1d0/0x1d0 [ 1748.396082][T12480] ? __fget_files+0x294/0x400 [ 1748.400779][T12480] ? loop_lookup+0x1d0/0x1d0 [ 1748.405388][T12480] ksys_ioctl+0x11a/0x180 [ 1748.409779][T12480] __x64_sys_ioctl+0x6f/0xb0 [ 1748.414383][T12480] do_syscall_64+0x60/0xe0 [ 1748.419075][T12480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1748.424974][T12480] RIP: 0033:0x45c369 [ 1748.428925][T12480] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1748.448537][T12480] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.456958][T12480] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1748.464937][T12480] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1748.472929][T12480] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1748.481785][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 1748.489759][T12480] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1748.524332][T12480] blk-mq: reduced tag depth (128 -> 64) 06:08:01 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xe}}]}, 0x74}}, 0x0) 06:08:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf00}, 0x0) 06:08:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:01 executing program 5 (fault-call:9 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x13a4}, 0x0) 06:08:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1748.992257][T12525] FAULT_INJECTION: forcing a failure. [ 1748.992257][T12525] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.022038][T12525] CPU: 1 PID: 12525 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1749.031360][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1749.041620][T12525] Call Trace: [ 1749.044922][T12525] dump_stack+0x18f/0x20d [ 1749.049442][T12525] should_fail.cold+0x5/0x14 [ 1749.054050][T12525] should_failslab+0x5/0xf [ 1749.058483][T12525] kmem_cache_alloc_node+0x257/0x3c0 [ 1749.063795][T12525] __blk_alloc_queue+0x28/0x700 [ 1749.068660][T12525] blk_mq_init_queue+0x44/0xd0 [ 1749.073426][T12525] loop_add+0x2cb/0x8b0 [ 1749.077586][T12525] loop_control_ioctl+0x16c/0x480 [ 1749.085049][T12525] ? loop_lookup+0x1d0/0x1d0 [ 1749.089759][T12525] ? __fget_files+0x294/0x400 [ 1749.094500][T12525] ? loop_lookup+0x1d0/0x1d0 [ 1749.099097][T12525] ksys_ioctl+0x11a/0x180 [ 1749.103434][T12525] __x64_sys_ioctl+0x6f/0xb0 [ 1749.108027][T12525] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1749.113139][T12525] do_syscall_64+0x60/0xe0 [ 1749.117558][T12525] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1749.123448][T12525] RIP: 0033:0x45c369 06:08:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x6000}, 0x0) [ 1749.127433][T12525] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1749.147872][T12525] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1749.156292][T12525] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1749.164263][T12525] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1749.172240][T12525] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.180205][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1749.188274][T12525] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0111000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60, 0x0, 0x8, {{0x2, 0x7, 0x200000, 0x2, 0x5, 0x4, 0x7, 0x8}}}, 0x60) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xa413}, 0x0) 06:08:02 executing program 5 (fault-call:9 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1749.506335][T12555] FAULT_INJECTION: forcing a failure. [ 1749.506335][T12555] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.561949][T12555] CPU: 1 PID: 12555 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1749.571040][T12555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1749.582339][T12555] Call Trace: [ 1749.585641][T12555] dump_stack+0x18f/0x20d [ 1749.589981][T12555] should_fail.cold+0x5/0x14 [ 1749.594576][T12555] should_failslab+0x5/0xf [ 1749.599004][T12555] kmem_cache_alloc_node+0x257/0x3c0 [ 1749.604383][T12555] __blk_alloc_queue+0x28/0x700 [ 1749.609332][T12555] blk_mq_init_queue+0x44/0xd0 [ 1749.614100][T12555] loop_add+0x2cb/0x8b0 [ 1749.618261][T12555] loop_control_ioctl+0x16c/0x480 [ 1749.623299][T12555] ? loop_lookup+0x1d0/0x1d0 [ 1749.627901][T12555] ? __fget_files+0x294/0x400 [ 1749.636164][T12555] ? loop_lookup+0x1d0/0x1d0 [ 1749.640764][T12555] ksys_ioctl+0x11a/0x180 [ 1749.645099][T12555] __x64_sys_ioctl+0x6f/0xb0 [ 1749.649689][T12555] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1749.654807][T12555] do_syscall_64+0x60/0xe0 [ 1749.659320][T12555] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1749.665205][T12555] RIP: 0033:0x45c369 [ 1749.669098][T12555] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1749.689317][T12555] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1749.697745][T12555] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 06:08:02 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x74}}, 0x0) 06:08:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf000}, 0x0) [ 1749.705803][T12555] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1749.713858][T12555] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.721833][T12555] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 1749.730671][T12555] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:02 executing program 5 (fault-call:9 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x30000}, 0x0) 06:08:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2000006c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1750.013908][T12584] FAULT_INJECTION: forcing a failure. [ 1750.013908][T12584] name failslab, interval 1, probability 0, space 0, times 0 06:08:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1750.056009][T12584] CPU: 0 PID: 12584 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1750.064719][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.074829][T12584] Call Trace: [ 1750.078227][T12584] dump_stack+0x18f/0x20d [ 1750.082575][T12584] should_fail.cold+0x5/0x14 [ 1750.087273][T12584] should_failslab+0x5/0xf [ 1750.091705][T12584] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1750.097538][T12584] __kmalloc_node+0x38/0x60 [ 1750.102048][T12584] ? mempool_alloc+0x350/0x350 [ 1750.106905][T12584] ? mempool_free+0x370/0x370 [ 1750.111584][T12584] mempool_init_node+0x135/0x550 [ 1750.116526][T12584] ? wait_for_completion+0x260/0x260 [ 1750.121814][T12584] ? mempool_alloc+0x350/0x350 [ 1750.126576][T12584] ? mempool_free+0x370/0x370 [ 1750.131377][T12584] mempool_init+0x38/0x50 [ 1750.141878][T12584] bioset_init+0x332/0x810 [ 1750.146307][T12584] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 1750.152122][T12584] __blk_alloc_queue+0xdc/0x700 [ 1750.156978][T12584] blk_mq_init_queue+0x44/0xd0 [ 1750.161744][T12584] loop_add+0x2cb/0x8b0 [ 1750.165930][T12584] loop_control_ioctl+0x16c/0x480 [ 1750.171214][T12584] ? loop_lookup+0x1d0/0x1d0 [ 1750.175809][T12584] ? __fget_files+0x294/0x400 [ 1750.180843][T12584] ? loop_lookup+0x1d0/0x1d0 [ 1750.185432][T12584] ksys_ioctl+0x11a/0x180 [ 1750.189774][T12584] __x64_sys_ioctl+0x6f/0xb0 [ 1750.194358][T12584] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1750.199496][T12584] do_syscall_64+0x60/0xe0 [ 1750.204058][T12584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1750.210024][T12584] RIP: 0033:0x45c369 [ 1750.213910][T12584] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1750.233594][T12584] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.241988][T12584] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1750.249936][T12584] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1750.257890][T12584] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.265854][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1750.273805][T12584] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0144000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x34000}, 0x0) 06:08:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:03 executing program 5 (fault-call:9 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x49, 0x29, 0x2, {0x4, [{{0x10, 0x3, 0x7}, 0x10001, 0x10, 0x7, './file0'}, {{0x20, 0x2, 0x2}, 0xc28, 0x9, 0x7, './file0'}]}}, 0x49) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000100)='nolazytime\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x8, 0x0, 0x6}) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x100) getsockname$netrom(r6, &(0x7f0000000280)={{0x3, @rose}, [@null, @default, @netrom, @null, @bcast, @remote, @rose, @bcast]}, &(0x7f0000000300)=0x48) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:03 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x10}}]}, 0x74}}, 0x0) 06:08:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x400300}, 0x0) [ 1750.779492][T12622] FAULT_INJECTION: forcing a failure. [ 1750.779492][T12622] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.827585][T12622] CPU: 1 PID: 12622 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1750.836473][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.846966][T12622] Call Trace: [ 1750.850269][T12622] dump_stack+0x18f/0x20d [ 1750.854613][T12622] should_fail.cold+0x5/0x14 [ 1750.859228][T12622] should_failslab+0x5/0xf [ 1750.863652][T12622] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1750.869473][T12622] __kmalloc_node+0x38/0x60 [ 1750.873981][T12622] ? mempool_alloc+0x350/0x350 [ 1750.878765][T12622] ? mempool_free+0x370/0x370 [ 1750.883460][T12622] mempool_init_node+0x135/0x550 [ 1750.888408][T12622] ? __free_object+0xdd0/0xdd0 [ 1750.893192][T12622] ? wait_for_completion+0x260/0x260 [ 1750.898491][T12622] ? mempool_alloc+0x350/0x350 [ 1750.903262][T12622] ? mempool_free+0x370/0x370 [ 1750.907949][T12622] mempool_init+0x38/0x50 [ 1750.912295][T12622] bioset_init+0x332/0x810 [ 1750.916804][T12622] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 1750.922265][T12622] __blk_alloc_queue+0xdc/0x700 [ 1750.927124][T12622] blk_mq_init_queue+0x44/0xd0 [ 1750.931897][T12622] loop_add+0x2cb/0x8b0 [ 1750.936059][T12622] loop_control_ioctl+0x16c/0x480 [ 1750.941082][T12622] ? loop_lookup+0x1d0/0x1d0 [ 1750.945695][T12622] ? __fget_files+0x294/0x400 [ 1750.950400][T12622] ? loop_lookup+0x1d0/0x1d0 [ 1750.955010][T12622] ksys_ioctl+0x11a/0x180 [ 1750.959341][T12622] __x64_sys_ioctl+0x6f/0xb0 [ 1750.963942][T12622] do_syscall_64+0x60/0xe0 [ 1750.968380][T12622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1750.974275][T12622] RIP: 0033:0x45c369 [ 1750.978173][T12622] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1750.997956][T12622] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.006371][T12622] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1751.014341][T12622] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 06:08:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0xa, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffff}, 0x0) [ 1751.022307][T12622] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.030278][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 1751.038255][T12622] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:04 executing program 5 (fault-call:9 fault-nth:16): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0) [ 1751.315157][T12653] FAULT_INJECTION: forcing a failure. [ 1751.315157][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.369191][T12653] CPU: 0 PID: 12653 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1751.377926][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.388075][T12653] Call Trace: [ 1751.391372][T12653] dump_stack+0x18f/0x20d [ 1751.395801][T12653] should_fail.cold+0x5/0x14 [ 1751.400405][T12653] should_failslab+0x5/0xf [ 1751.404840][T12653] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1751.410679][T12653] __kmalloc_node+0x38/0x60 [ 1751.415196][T12653] ? mempool_alloc+0x350/0x350 [ 1751.420056][T12653] ? mempool_free+0x370/0x370 [ 1751.424978][T12653] mempool_init_node+0x135/0x550 [ 1751.429949][T12653] ? mempool_alloc+0x350/0x350 [ 1751.434720][T12653] ? mempool_free+0x370/0x370 [ 1751.439752][T12653] mempool_init+0x38/0x50 [ 1751.444185][T12653] bioset_init+0x52f/0x810 [ 1751.448613][T12653] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 1751.454075][T12653] __blk_alloc_queue+0xdc/0x700 [ 1751.458927][T12653] blk_mq_init_queue+0x44/0xd0 [ 1751.463683][T12653] loop_add+0x2cb/0x8b0 [ 1751.467838][T12653] loop_control_ioctl+0x16c/0x480 [ 1751.472854][T12653] ? loop_lookup+0x1d0/0x1d0 [ 1751.477426][T12653] ? __fget_files+0x294/0x400 [ 1751.482255][T12653] ? loop_lookup+0x1d0/0x1d0 [ 1751.486860][T12653] ksys_ioctl+0x11a/0x180 [ 1751.491504][T12653] __x64_sys_ioctl+0x6f/0xb0 [ 1751.496103][T12653] do_syscall_64+0x60/0xe0 [ 1751.500530][T12653] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1751.506439][T12653] RIP: 0033:0x45c369 [ 1751.510328][T12653] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1751.529923][T12653] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.538334][T12653] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1751.546299][T12653] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1751.554456][T12653] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.562428][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 1751.570580][T12653] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="014c000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x13, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0) 06:08:04 executing program 5 (fault-call:9 fault-nth:17): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:04 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x17, 0xa, 0x5}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6, 0x9, 0x4, 0x2, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1967, 0x4, @perf_config_ext={0x5, 0x3}, 0x1, 0x7, 0x7, 0x4, 0x5, 0x0, 0xf69f}, r2, 0x6, r3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:04 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x74}}, 0x0) 06:08:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x18, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3000000}, 0x0) [ 1752.077231][T12674] FAULT_INJECTION: forcing a failure. [ 1752.077231][T12674] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.160802][T12674] CPU: 0 PID: 12674 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1752.169532][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.179611][T12674] Call Trace: [ 1752.182920][T12674] dump_stack+0x18f/0x20d [ 1752.187266][T12674] should_fail.cold+0x5/0x14 [ 1752.191877][T12674] should_failslab+0x5/0xf [ 1752.196412][T12674] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1752.202233][T12674] __kmalloc_node+0x38/0x60 06:08:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0) 06:08:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x300, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1752.206752][T12674] ? mempool_alloc+0x350/0x350 [ 1752.211526][T12674] ? mempool_free+0x370/0x370 [ 1752.216218][T12674] mempool_init_node+0x135/0x550 [ 1752.221222][T12674] ? mempool_alloc+0x350/0x350 [ 1752.226004][T12674] ? mempool_free+0x370/0x370 [ 1752.230723][T12674] mempool_init+0x38/0x50 [ 1752.235068][T12674] bioset_init+0x52f/0x810 [ 1752.239498][T12674] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 1752.244973][T12674] __blk_alloc_queue+0xdc/0x700 [ 1752.250104][T12674] blk_mq_init_queue+0x44/0xd0 [ 1752.254886][T12674] loop_add+0x2cb/0x8b0 [ 1752.259059][T12674] loop_control_ioctl+0x16c/0x480 [ 1752.264093][T12674] ? loop_lookup+0x1d0/0x1d0 [ 1752.268703][T12674] ? loop_lookup+0x1d0/0x1d0 [ 1752.273316][T12674] ksys_ioctl+0x11a/0x180 [ 1752.277659][T12674] __x64_sys_ioctl+0x6f/0xb0 [ 1752.282260][T12674] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1752.287562][T12674] do_syscall_64+0x60/0xe0 [ 1752.292087][T12674] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1752.298076][T12674] RIP: 0033:0x45c369 [ 1752.302006][T12674] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1752.321647][T12674] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.330064][T12674] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1752.338418][T12674] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1752.346396][T12674] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.354543][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 1752.362601][T12674] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x5000000}, 0x0) 06:08:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x8000000}, 0x0) 06:08:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="015e000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:05 executing program 5 (fault-call:9 fault-nth:18): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9000000}, 0x0) [ 1753.006047][T12729] FAULT_INJECTION: forcing a failure. [ 1753.006047][T12729] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.053041][T12729] CPU: 1 PID: 12729 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1753.061763][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.071823][T12729] Call Trace: [ 1753.075132][T12729] dump_stack+0x18f/0x20d [ 1753.079474][T12729] should_fail.cold+0x5/0x14 [ 1753.084074][T12729] should_failslab+0x5/0xf [ 1753.088607][T12729] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1753.094427][T12729] __kmalloc_node+0x38/0x60 [ 1753.098941][T12729] ? mempool_alloc+0x350/0x350 [ 1753.103716][T12729] ? mempool_free+0x370/0x370 [ 1753.108411][T12729] mempool_init_node+0x135/0x550 [ 1753.113365][T12729] ? mempool_alloc+0x350/0x350 [ 1753.118135][T12729] ? mempool_free+0x370/0x370 [ 1753.122820][T12729] mempool_init+0x38/0x50 [ 1753.127168][T12729] bioset_init+0x52f/0x810 [ 1753.131594][T12729] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 1753.137072][T12729] __blk_alloc_queue+0xdc/0x700 [ 1753.141937][T12729] blk_mq_init_queue+0x44/0xd0 [ 1753.146711][T12729] loop_add+0x2cb/0x8b0 [ 1753.150877][T12729] loop_control_ioctl+0x16c/0x480 [ 1753.155921][T12729] ? loop_lookup+0x1d0/0x1d0 [ 1753.160644][T12729] ? __fget_files+0x294/0x400 [ 1753.165341][T12729] ? loop_lookup+0x1d0/0x1d0 [ 1753.169942][T12729] ksys_ioctl+0x11a/0x180 [ 1753.174278][T12729] __x64_sys_ioctl+0x6f/0xb0 [ 1753.178966][T12729] do_syscall_64+0x60/0xe0 [ 1753.183475][T12729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1753.189369][T12729] RIP: 0033:0x45c369 [ 1753.193262][T12729] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1753.212868][T12729] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.221285][T12729] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1753.229257][T12729] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1753.237234][T12729] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.245462][T12729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 1753.253522][T12729] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0xffffff71, 0x9]) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xe000000}, 0x0) 06:08:06 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x12}}]}, 0x74}}, 0x0) 06:08:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x2, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:06 executing program 5 (fault-call:9 fault-nth:19): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1753.641590][T12755] FAULT_INJECTION: forcing a failure. [ 1753.641590][T12755] name failslab, interval 1, probability 0, space 0, times 0 06:08:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf000000}, 0x0) [ 1753.713155][T12755] CPU: 0 PID: 12755 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1753.721881][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.732117][T12755] Call Trace: [ 1753.735423][T12755] dump_stack+0x18f/0x20d [ 1753.739773][T12755] should_fail.cold+0x5/0x14 [ 1753.744388][T12755] should_failslab+0x5/0xf [ 1753.748821][T12755] kmem_cache_alloc+0x2a9/0x3b0 [ 1753.753916][T12755] ? mempool_alloc+0x350/0x350 06:08:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x3, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1753.759911][T12755] ? mempool_free+0x370/0x370 [ 1753.764610][T12755] mempool_init_node+0x2ce/0x550 [ 1753.769772][T12755] ? mempool_alloc+0x350/0x350 [ 1753.774552][T12755] ? mempool_free+0x370/0x370 [ 1753.779251][T12755] mempool_init+0x38/0x50 [ 1753.783599][T12755] bioset_init+0x52f/0x810 [ 1753.788044][T12755] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 1753.793799][T12755] __blk_alloc_queue+0xdc/0x700 [ 1753.799287][T12755] blk_mq_init_queue+0x44/0xd0 [ 1753.804078][T12755] loop_add+0x2cb/0x8b0 [ 1753.808247][T12755] loop_control_ioctl+0x16c/0x480 06:08:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x60000000}, 0x0) [ 1753.813286][T12755] ? loop_lookup+0x1d0/0x1d0 [ 1753.817884][T12755] ? __fget_files+0x294/0x400 [ 1753.822589][T12755] ? loop_lookup+0x1d0/0x1d0 [ 1753.827193][T12755] ksys_ioctl+0x11a/0x180 [ 1753.831542][T12755] __x64_sys_ioctl+0x6f/0xb0 [ 1753.836151][T12755] do_syscall_64+0x60/0xe0 [ 1753.840584][T12755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1753.846685][T12755] RIP: 0033:0x45c369 [ 1753.850588][T12755] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1753.870199][T12755] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.878610][T12755] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1753.886578][T12755] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1753.894556][T12755] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.902528][T12755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 1753.910508][T12755] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100030000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9effffff}, 0x0) 06:08:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:07 executing program 5 (fault-call:9 fault-nth:20): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1754.373663][T12795] FAULT_INJECTION: forcing a failure. [ 1754.373663][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.393211][T12795] CPU: 1 PID: 12795 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1754.402207][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.412262][T12795] Call Trace: [ 1754.415915][T12795] dump_stack+0x18f/0x20d [ 1754.420789][T12795] should_fail.cold+0x5/0x14 [ 1754.425498][T12795] should_failslab+0x5/0xf [ 1754.429921][T12795] kmem_cache_alloc+0x2a9/0x3b0 [ 1754.434780][T12795] ? mempool_alloc+0x350/0x350 [ 1754.439556][T12795] mempool_init_node+0x2ce/0x550 [ 1754.444612][T12795] ? mempool_alloc+0x350/0x350 [ 1754.449377][T12795] ? mempool_free+0x370/0x370 [ 1754.454145][T12795] mempool_init+0x38/0x50 [ 1754.458490][T12795] bioset_init+0x52f/0x810 [ 1754.462919][T12795] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 1754.468422][T12795] __blk_alloc_queue+0xdc/0x700 [ 1754.473285][T12795] blk_mq_init_queue+0x44/0xd0 [ 1754.478171][T12795] loop_add+0x2cb/0x8b0 [ 1754.482341][T12795] loop_control_ioctl+0x16c/0x480 [ 1754.487376][T12795] ? loop_lookup+0x1d0/0x1d0 [ 1754.491976][T12795] ? __fget_files+0x294/0x400 [ 1754.496667][T12795] ? loop_lookup+0x1d0/0x1d0 [ 1754.501257][T12795] ksys_ioctl+0x11a/0x180 [ 1754.505971][T12795] __x64_sys_ioctl+0x6f/0xb0 [ 1754.510587][T12795] do_syscall_64+0x60/0xe0 [ 1754.515016][T12795] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1754.520907][T12795] RIP: 0033:0x45c369 [ 1754.524803][T12795] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1754.544752][T12795] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.553258][T12795] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1754.561445][T12795] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1754.569788][T12795] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.577834][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 1754.585921][T12795] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "5e908eadc0acafca", "9e5c93e79e934cbb878afdfbe37b2592", "00f36561", "8a36be193889d8f3"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:07 executing program 5 (fault-call:9 fault-nth:21): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xa4130000}, 0x0) 06:08:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x5, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:07 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x13}}]}, 0x74}}, 0x0) 06:08:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100050000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) [ 1754.847386][T12827] FAULT_INJECTION: forcing a failure. [ 1754.847386][T12827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1754.860673][T12827] CPU: 1 PID: 12827 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1754.869442][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.879505][T12827] Call Trace: [ 1754.882815][T12827] dump_stack+0x18f/0x20d [ 1754.887165][T12827] should_fail.cold+0x5/0x14 [ 1754.891779][T12827] __alloc_pages_nodemask+0x1a3/0x930 06:08:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x9, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1754.897167][T12827] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1754.903166][T12827] ? mempool_init_node+0x2ce/0x550 [ 1754.908314][T12827] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1754.915221][T12827] ? lock_acquire+0x1f1/0xad0 [ 1754.919910][T12827] ? fs_reclaim_acquire+0xf/0x40 [ 1754.924956][T12827] ? find_held_lock+0x2d/0x110 [ 1754.929735][T12827] cache_grow_begin+0x8c/0xb20 [ 1754.934512][T12827] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1754.940000][T12827] cache_alloc_refill+0x27b/0x340 [ 1754.945035][T12827] ? lockdep_hardirqs_off+0x66/0xa0 [ 1754.950366][T12827] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 1754.956304][T12827] bdi_alloc+0x3f/0x90 [ 1754.960390][T12827] __blk_alloc_queue+0x100/0x700 [ 1754.965346][T12827] blk_mq_init_queue+0x44/0xd0 [ 1754.970247][T12827] loop_add+0x2cb/0x8b0 [ 1754.974423][T12827] loop_control_ioctl+0x16c/0x480 [ 1754.979458][T12827] ? loop_lookup+0x1d0/0x1d0 [ 1754.984064][T12827] ? __fget_files+0x294/0x400 [ 1754.988749][T12827] ? loop_lookup+0x1d0/0x1d0 [ 1754.993347][T12827] ksys_ioctl+0x11a/0x180 [ 1754.997692][T12827] __x64_sys_ioctl+0x6f/0xb0 [ 1755.002478][T12827] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1755.007670][T12827] do_syscall_64+0x60/0xe0 [ 1755.012075][T12827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1755.017960][T12827] RIP: 0033:0x45c369 [ 1755.021900][T12827] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:08:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 1755.041620][T12827] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.050043][T12827] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1755.058025][T12827] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1755.066007][T12827] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.073986][T12827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1755.081967][T12827] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfcffffff}, 0x0) 06:08:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfffff000}, 0x0) 06:08:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x60, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff7f}, 0x0) 06:08:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:09 executing program 5 (fault-call:9 fault-nth:22): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:09 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x38}}]}, 0x74}}, 0x0) 06:08:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x101200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000006000000", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff0000000000000100", @ANYRESOCT, @ANYBLOB="0000000000000100000000000020000000000000", @ANYRES32=r4, @ANYBLOB="0000000000100000000000000080000000000000", @ANYRESOCT=r7, @ANYBLOB="0000000000f0ffff00000000009001f001000000", @ANYRES32=r6, @ANYRESOCT=r6, @ANYRES32=r2, @ANYBLOB="000200000020000000000000000000ecffffff003d1d77655981e19b40781a8eeff91c76144d23cc23af75e0bf8931d679b03eaaa10b60d8e497b15c38ba5a35da5e5eca7194f1b66849e524a531f1a611faa08ae78a35ad80a86f1a9d2b74bae30dd46b9d117318269d1ab91479344734347816b2be46287b98829b46e25212f0f7caebce4b701a66fb7d197aeabb73f8eaf6dfdb147eb22ae30c2438856ddd"]) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, @isdn={0x22, 0xfb, 0x4, 0x8, 0x1f}, @qipcrtr={0x2a, 0x1, 0x7fff}, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc878, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='veth0_to_bridge\x00', 0x8, 0xc13, 0x5}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r2, 0x0, r8, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010102}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7e) 06:08:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100060000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff9e}, 0x0) 06:08:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x300, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 1756.249690][T12894] FAULT_INJECTION: forcing a failure. [ 1756.249690][T12894] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.330207][T12894] CPU: 0 PID: 12894 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1756.341026][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.352130][T12894] Call Trace: [ 1756.355438][T12894] dump_stack+0x18f/0x20d [ 1756.359823][T12894] should_fail.cold+0x5/0x14 [ 1756.364428][T12894] should_failslab+0x5/0xf [ 1756.368856][T12894] kmem_cache_alloc_trace+0x240/0x2d0 [ 1756.374467][T12894] wb_congested_get_create+0x1a3/0x440 [ 1756.379933][T12894] wb_init+0x508/0x880 [ 1756.384004][T12894] bdi_init+0x2af/0x420 [ 1756.388157][T12894] bdi_alloc+0x54/0x90 [ 1756.392233][T12894] __blk_alloc_queue+0x100/0x700 [ 1756.397184][T12894] blk_mq_init_queue+0x44/0xd0 [ 1756.401946][T12894] loop_add+0x2cb/0x8b0 [ 1756.406115][T12894] loop_control_ioctl+0x16c/0x480 [ 1756.412879][T12894] ? loop_lookup+0x1d0/0x1d0 [ 1756.418466][T12894] ? __fget_files+0x294/0x400 [ 1756.423429][T12894] ? loop_lookup+0x1d0/0x1d0 [ 1756.428561][T12894] ksys_ioctl+0x11a/0x180 [ 1756.433451][T12894] __x64_sys_ioctl+0x6f/0xb0 [ 1756.438093][T12894] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1756.443220][T12894] do_syscall_64+0x60/0xe0 [ 1756.447741][T12894] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1756.453641][T12894] RIP: 0033:0x45c369 [ 1756.457543][T12894] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1756.477145][T12894] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.485663][T12894] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1756.493642][T12894] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1756.501883][T12894] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.509853][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1756.517833][T12894] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfffffffc}, 0x0) 06:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3000000000000}, 0x0) 06:08:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x500, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x900, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x40030000000000}, 0x0) 06:08:09 executing program 5 (fault-call:9 fault-nth:23): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1756.968014][T12947] FAULT_INJECTION: forcing a failure. [ 1756.968014][T12947] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.001516][T12947] CPU: 1 PID: 12947 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1757.010232][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.020294][T12947] Call Trace: [ 1757.023597][T12947] dump_stack+0x18f/0x20d [ 1757.027942][T12947] should_fail.cold+0x5/0x14 [ 1757.032549][T12947] should_failslab+0x5/0xf [ 1757.036979][T12947] kmem_cache_alloc_trace+0x240/0x2d0 [ 1757.042370][T12947] blk_iolatency_init+0x47/0x2e0 [ 1757.047317][T12947] blkcg_init_queue+0x15c/0x740 [ 1757.052181][T12947] __blk_alloc_queue+0x4f0/0x700 [ 1757.057229][T12947] blk_mq_init_queue+0x44/0xd0 [ 1757.062093][T12947] loop_add+0x2cb/0x8b0 06:08:09 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x60}}]}, 0x74}}, 0x0) [ 1757.066263][T12947] loop_control_ioctl+0x16c/0x480 [ 1757.071293][T12947] ? loop_lookup+0x1d0/0x1d0 [ 1757.075888][T12947] ? __fget_files+0x294/0x400 [ 1757.080581][T12947] ? loop_lookup+0x1d0/0x1d0 [ 1757.085176][T12947] ksys_ioctl+0x11a/0x180 [ 1757.089515][T12947] __x64_sys_ioctl+0x6f/0xb0 [ 1757.094109][T12947] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1757.099232][T12947] do_syscall_64+0x60/0xe0 [ 1757.103667][T12947] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1757.109590][T12947] RIP: 0033:0x45c369 [ 1757.113485][T12947] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1757.133089][T12947] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.141501][T12947] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1757.149746][T12947] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1757.157716][T12947] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.165697][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1757.173664][T12947] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$vhost_msg(r1, &(0x7f0000000340)={0x1, {&(0x7f0000000200)=""/125, 0x7d, &(0x7f0000000280)=""/140, 0x1, 0x1}}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="f3ffffffffff5b00000060711ca57d94004c5200fe8000000000000004000000297fb6cdbbaaffbdee00000000000000000000080001840a0050905c5520f9794755b422669e92a784ccee379a4c226e96e4d48d5a2f7f6754e161b2a5eb3e797fbd5aa32221a81b32ba362270"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000000)={0x234, 0xfffffffffffffffd, 0x1}) 06:08:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 06:08:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf00, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:10 executing program 5 (fault-call:9 fault-nth:24): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100070000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x18f0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1757.551995][T12976] FAULT_INJECTION: forcing a failure. [ 1757.551995][T12976] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.608174][T12976] CPU: 0 PID: 12976 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1757.616889][T12976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.626932][T12976] Call Trace: [ 1757.630207][T12976] dump_stack+0x18f/0x20d [ 1757.634541][T12976] should_fail.cold+0x5/0x14 [ 1757.639144][T12976] should_failslab+0x5/0xf [ 1757.643574][T12976] kmem_cache_alloc_trace+0x240/0x2d0 [ 1757.648950][T12976] blk_iolatency_init+0x47/0x2e0 [ 1757.653888][T12976] blkcg_init_queue+0x15c/0x740 [ 1757.658995][T12976] ? blkcg_css_offline+0xf0/0xf0 [ 1757.663933][T12976] __blk_alloc_queue+0x4f0/0x700 [ 1757.668880][T12976] blk_mq_init_queue+0x44/0xd0 [ 1757.673653][T12976] loop_add+0x2cb/0x8b0 [ 1757.677861][T12976] loop_control_ioctl+0x16c/0x480 [ 1757.682897][T12976] ? loop_lookup+0x1d0/0x1d0 [ 1757.687502][T12976] ? loop_lookup+0x1d0/0x1d0 [ 1757.692105][T12976] ksys_ioctl+0x11a/0x180 [ 1757.696441][T12976] __x64_sys_ioctl+0x6f/0xb0 [ 1757.701029][T12976] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1757.706147][T12976] do_syscall_64+0x60/0xe0 [ 1757.710568][T12976] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1757.716458][T12976] RIP: 0033:0x45c369 [ 1757.720360][T12976] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1757.740788][T12976] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.749219][T12976] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1757.757200][T12976] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1757.765372][T12976] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.773381][T12976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 1757.781363][T12976] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x200000000000000}, 0x0) 06:08:10 executing program 5 (fault-call:9 fault-nth:25): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x3f00, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000a0000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:10 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0xf}}, 0x0) [ 1758.101766][T13016] FAULT_INJECTION: forcing a failure. [ 1758.101766][T13016] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.137648][T13016] CPU: 1 PID: 13016 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1758.146453][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1758.156504][T13016] Call Trace: [ 1758.159891][T13016] dump_stack+0x18f/0x20d [ 1758.164251][T13016] should_fail.cold+0x5/0x14 [ 1758.168938][T13016] should_failslab+0x5/0xf [ 1758.173348][T13016] kmem_cache_alloc_trace+0x240/0x2d0 [ 1758.178724][T13016] ? __blk_alloc_queue+0x12e/0x700 [ 1758.183853][T13016] blk_alloc_queue_stats+0x3c/0x110 [ 1758.189066][T13016] __blk_alloc_queue+0x138/0x700 [ 1758.194024][T13016] blk_mq_init_queue+0x44/0xd0 [ 1758.198888][T13016] loop_add+0x2cb/0x8b0 [ 1758.203048][T13016] loop_control_ioctl+0x16c/0x480 [ 1758.208078][T13016] ? loop_lookup+0x1d0/0x1d0 [ 1758.212857][T13016] ? __fget_files+0x294/0x400 [ 1758.217761][T13016] ? loop_lookup+0x1d0/0x1d0 [ 1758.222358][T13016] ksys_ioctl+0x11a/0x180 [ 1758.226701][T13016] __x64_sys_ioctl+0x6f/0xb0 [ 1758.231298][T13016] do_syscall_64+0x60/0xe0 [ 1758.235744][T13016] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1758.241641][T13016] RIP: 0033:0x45c369 [ 1758.245545][T13016] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1758.265278][T13016] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.273721][T13016] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1758.281711][T13016] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1758.290068][T13016] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.298204][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 1758.306620][T13016] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r4, 0x3d}}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x300000000000000}, 0x0) 06:08:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x6000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:11 executing program 5 (fault-call:9 fault-nth:26): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:11 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x10}}, 0x0) 06:08:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100110000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 1759.007097][T13046] FAULT_INJECTION: forcing a failure. [ 1759.007097][T13046] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.020199][T13046] CPU: 1 PID: 13046 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1759.028875][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.038951][T13046] Call Trace: [ 1759.042264][T13046] dump_stack+0x18f/0x20d [ 1759.046614][T13046] should_fail.cold+0x5/0x14 [ 1759.051229][T13046] should_failslab+0x5/0xf [ 1759.055665][T13046] kmem_cache_alloc_node_trace+0x58/0x400 [ 1759.061417][T13046] iolatency_pd_alloc+0xaf/0x160 [ 1759.066367][T13046] ? iolat_acquire_inflight+0x50/0x50 [ 1759.071833][T13046] blkcg_activate_policy+0x228/0xee0 [ 1759.077149][T13046] blk_iolatency_init+0x13f/0x2e0 [ 1759.082266][T13046] blkcg_init_queue+0x15c/0x740 [ 1759.087213][T13046] __blk_alloc_queue+0x4f0/0x700 [ 1759.092168][T13046] blk_mq_init_queue+0x44/0xd0 [ 1759.097046][T13046] loop_add+0x2cb/0x8b0 [ 1759.101209][T13046] loop_control_ioctl+0x16c/0x480 06:08:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 1759.106249][T13046] ? loop_lookup+0x1d0/0x1d0 [ 1759.110851][T13046] ? __fget_files+0x294/0x400 [ 1759.115556][T13046] ? loop_lookup+0x1d0/0x1d0 [ 1759.120239][T13046] ksys_ioctl+0x11a/0x180 [ 1759.124578][T13046] __x64_sys_ioctl+0x6f/0xb0 [ 1759.129170][T13046] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1759.134291][T13046] do_syscall_64+0x60/0xe0 [ 1759.138715][T13046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1759.144612][T13046] RIP: 0033:0x45c369 06:08:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 1759.148518][T13046] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1759.168323][T13046] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.177010][T13046] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1759.184994][T13046] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1759.193092][T13046] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1759.201103][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 1759.209093][T13046] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x900000000000000}, 0x0) 06:08:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xe00000000000000}, 0x0) 06:08:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf018, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 06:08:12 executing program 5 (fault-call:9 fault-nth:27): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:12 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x23}}, 0x0) 06:08:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100400000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x30000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1000}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00', {0x7, 0x4e24, @private=0xa010100}}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000e00)={{0x12, 0x1, 0x0, 0x8d, 0x76, 0x6c, 0x0, 0x11d9, 0x1003, 0xae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x1a4, &(0x7f00000001c0)={[{0x9e, 0x4e00, "a509ecf57a8868a9f2c0d9c5ca5d31168806415570c5fa1d60b0041330a73b20547a59b77098a980d7f85e0d5ac493837b1caace3fc6a9b88def72d1a3e52e3082330626f31fa1b6a7d607112b72cb0e97f3cf1c6441ec0eb06ca7e5256446d983b66511c7654dc86a299615cd01f1e88d36848ee1d49b93f066e7eaed18d33bf2a50a97e632d5c0efe6797e70ad21bc5ec4eaa145e0f5bb97a552b17fa7"}, {0x14, 0x4e00, "29db86d1754962ed907103c57288408417b927f1"}, {0xe2, 0x4e00, "e01ed06d767e4725c7e13381594853a0711d101c1142c7995b945fdc1cc59606b0db5094f857643e917ae0f5735a169974fdeedc6b72df340de1ab1a6690824a2b8ad4d593de0d8f6d50f459225f8a2907f1a0d796daa2f98541c319ae616e904e15a1813b5bc5a9916dcea623f8b8d0aad1bed89fc2a83c766778ffe4decd34544f910cd644da541d09bc59239a3901d89b9059c10d7503c25ee06b4b59d5fa4c9e6cc0dfd049bcc8057852cfb317101401d08e0a1a9d99fb409debbc73621e9a6a58752463f1d5f77d5b2f2171eeb47708ab92037792591b2091a4ec6ebb595bcb"}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$UHID_CREATE(r5, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000e40)=""/4096, 0x1000, 0x100, 0x9, 0x200, 0x0, 0x4}}, 0x120) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) [ 1760.100646][T13119] FAULT_INJECTION: forcing a failure. [ 1760.100646][T13119] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.113287][T13119] CPU: 1 PID: 13119 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1760.121963][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1760.132075][T13119] Call Trace: [ 1760.135381][T13119] dump_stack+0x18f/0x20d [ 1760.139749][T13119] should_fail.cold+0x5/0x14 [ 1760.144361][T13119] should_failslab+0x5/0xf 06:08:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x34000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1760.149000][T13119] kmem_cache_alloc_node_trace+0x58/0x400 [ 1760.154738][T13119] iolatency_pd_alloc+0xaf/0x160 [ 1760.160225][T13119] ? iolat_acquire_inflight+0x50/0x50 [ 1760.165613][T13119] blkcg_activate_policy+0x228/0xee0 [ 1760.171014][T13119] blk_iolatency_init+0x13f/0x2e0 [ 1760.176135][T13119] blkcg_init_queue+0x15c/0x740 [ 1760.181004][T13119] __blk_alloc_queue+0x4f0/0x700 [ 1760.186222][T13119] blk_mq_init_queue+0x44/0xd0 [ 1760.191089][T13119] loop_add+0x2cb/0x8b0 [ 1760.195261][T13119] loop_control_ioctl+0x16c/0x480 06:08:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 1760.200302][T13119] ? loop_lookup+0x1d0/0x1d0 [ 1760.204902][T13119] ? __fget_files+0x294/0x400 [ 1760.209614][T13119] ? loop_lookup+0x1d0/0x1d0 [ 1760.214213][T13119] ksys_ioctl+0x11a/0x180 [ 1760.218559][T13119] __x64_sys_ioctl+0x6f/0xb0 [ 1760.223335][T13119] do_syscall_64+0x60/0xe0 [ 1760.227775][T13119] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1760.234020][T13119] RIP: 0033:0x45c369 06:08:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 1760.237925][T13119] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1760.257704][T13119] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.266156][T13119] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1760.274143][T13119] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1760.282123][T13119] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1760.290362][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 1760.298603][T13119] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xa413000000000000}, 0x0) 06:08:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 06:08:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x400300, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1760.554308][T15648] usb 4-1: new high-speed USB device number 73 using dummy_hcd 06:08:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 06:08:13 executing program 5 (fault-call:9 fault-nth:28): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:13 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0xc0}}, 0x0) 06:08:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf0ffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100440000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) [ 1760.854606][T15648] usb 4-1: device descriptor read/64, error 18 [ 1760.871682][T13174] FAULT_INJECTION: forcing a failure. [ 1760.871682][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.884407][T13174] CPU: 0 PID: 13174 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1760.893175][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1760.903322][T13174] Call Trace: [ 1760.908888][T13174] dump_stack+0x18f/0x20d [ 1760.913336][T13174] should_fail.cold+0x5/0x14 [ 1760.917960][T13174] should_failslab+0x5/0xf [ 1760.922593][T13174] kmem_cache_alloc_node_trace+0x58/0x400 [ 1760.928317][T13174] ? throtl_pd_free+0x40/0x40 [ 1760.933184][T13174] throtl_pd_alloc+0xb3/0xa40 [ 1760.937950][T13174] blkcg_activate_policy+0x228/0xee0 [ 1760.943238][T13174] ? lockdep_init_map_waits+0x26a/0x890 [ 1760.948772][T13174] blk_throtl_init+0x43a/0x650 [ 1760.953691][T13174] ? blk_iolatency_init+0x17a/0x2e0 [ 1760.958876][T13174] blkcg_init_queue+0x270/0x740 [ 1760.963727][T13174] __blk_alloc_queue+0x4f0/0x700 [ 1760.968740][T13174] blk_mq_init_queue+0x44/0xd0 [ 1760.973502][T13174] loop_add+0x2cb/0x8b0 [ 1760.977649][T13174] loop_control_ioctl+0x16c/0x480 [ 1760.982656][T13174] ? loop_lookup+0x1d0/0x1d0 [ 1760.987253][T13174] ? loop_lookup+0x1d0/0x1d0 [ 1760.994187][T13174] ? loop_lookup+0x1d0/0x1d0 [ 1760.998763][T13174] ksys_ioctl+0x11a/0x180 [ 1761.003182][T13174] __x64_sys_ioctl+0x6f/0xb0 [ 1761.007769][T13174] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1761.012863][T13174] do_syscall_64+0x60/0xe0 [ 1761.017268][T13174] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1761.023172][T13174] RIP: 0033:0x45c369 [ 1761.027049][T13174] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1761.046959][T13174] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.055395][T13174] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1761.063558][T13174] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1761.071613][T13174] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1761.079857][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 1761.087815][T13174] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1761.484105][T15648] usb 4-1: device descriptor read/64, error 18 [ 1761.754214][T15648] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1762.024082][T15648] usb 4-1: device descriptor read/64, error 18 [ 1762.414078][T15648] usb 4-1: device descriptor read/64, error 18 [ 1762.534231][T15648] usb usb4-port1: attempt power cycle 06:08:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x1000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 06:08:16 executing program 5 (fault-call:9 fault-nth:29): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01004c0000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:16 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0xec0}}, 0x0) 06:08:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400200, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) r6 = dup3(r2, r4, 0x80000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) 06:08:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x2000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 1763.246102][T13221] FAULT_INJECTION: forcing a failure. [ 1763.246102][T13221] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.291677][T13221] CPU: 0 PID: 13221 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1763.300435][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.310586][T13221] Call Trace: [ 1763.313895][T13221] dump_stack+0x18f/0x20d [ 1763.318236][T13221] should_fail.cold+0x5/0x14 [ 1763.322841][T13221] should_failslab+0x5/0xf [ 1763.327267][T13221] kmem_cache_alloc_trace+0x240/0x2d0 [ 1763.332658][T13221] blk_mq_init_allocated_queue+0xfe/0x13f0 06:08:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x3000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1763.338480][T13221] ? blkcg_init_queue+0x183/0x740 [ 1763.343521][T13221] ? blk_queue_dma_alignment+0xc/0x50 [ 1763.348905][T13221] ? blk_set_default_limits+0x9/0x5d0 [ 1763.354294][T13221] ? __blk_alloc_queue+0x527/0x700 [ 1763.359427][T13221] blk_mq_init_queue+0x81/0xd0 [ 1763.364203][T13221] loop_add+0x2cb/0x8b0 [ 1763.368455][T13221] loop_control_ioctl+0x16c/0x480 [ 1763.374115][T13221] ? loop_lookup+0x1d0/0x1d0 [ 1763.378804][T13221] ? loop_lookup+0x1d0/0x1d0 [ 1763.383412][T13221] ? ksys_ioctl+0xc0/0x180 [ 1763.387852][T13221] ? loop_lookup+0x1d0/0x1d0 [ 1763.392509][T13221] ksys_ioctl+0x11a/0x180 [ 1763.396856][T13221] __x64_sys_ioctl+0x6f/0xb0 [ 1763.401457][T13221] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1763.406590][T13221] do_syscall_64+0x60/0xe0 [ 1763.411123][T13221] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1763.417408][T13221] RIP: 0033:0x45c369 [ 1763.421333][T13221] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:08:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 1763.441148][T13221] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.449584][T13221] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1763.457567][T13221] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1763.465808][T13221] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.474061][T13221] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 1763.482131][T13221] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 06:08:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x5000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:16 executing program 5 (fault-call:9 fault-nth:30): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1763.872809][T13268] FAULT_INJECTION: forcing a failure. [ 1763.872809][T13268] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.886366][T13268] CPU: 1 PID: 13268 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1763.895134][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.905378][T13268] Call Trace: [ 1763.908861][T13268] dump_stack+0x18f/0x20d [ 1763.913234][T13268] should_fail.cold+0x5/0x14 [ 1763.917838][T13268] ? blk_mq_has_request+0xb0/0xb0 [ 1763.922874][T13268] ? blk_mq_has_request+0xb0/0xb0 [ 1763.927901][T13268] ? blk_stat_alloc_callback+0x81/0x290 [ 1763.933446][T13268] should_failslab+0x5/0xf [ 1763.937871][T13268] __kmalloc+0x27d/0x340 [ 1763.942145][T13268] ? blk_mq_quiesce_queue+0x1d0/0x1d0 [ 1763.947615][T13268] ? blk_mq_has_request+0xb0/0xb0 [ 1763.952818][T13268] blk_stat_alloc_callback+0x81/0x290 [ 1763.958215][T13268] blk_mq_init_allocated_queue+0x8d/0x13f0 [ 1763.964049][T13268] ? blkcg_init_queue+0x183/0x740 [ 1763.969084][T13268] ? blk_queue_dma_alignment+0xc/0x50 [ 1763.974451][T13268] ? blk_set_default_limits+0x9/0x5d0 [ 1763.979819][T13268] ? __blk_alloc_queue+0x527/0x700 [ 1763.984938][T13268] blk_mq_init_queue+0x81/0xd0 [ 1763.989734][T13268] loop_add+0x2cb/0x8b0 [ 1763.993910][T13268] loop_control_ioctl+0x16c/0x480 [ 1763.998978][T13268] ? loop_lookup+0x1d0/0x1d0 [ 1764.003569][T13268] ? __fget_files+0x294/0x400 [ 1764.008240][T13268] ? loop_lookup+0x1d0/0x1d0 [ 1764.012836][T13268] ksys_ioctl+0x11a/0x180 [ 1764.017154][T13268] __x64_sys_ioctl+0x6f/0xb0 [ 1764.021731][T13268] do_syscall_64+0x60/0xe0 [ 1764.026143][T13268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1764.032014][T13268] RIP: 0033:0x45c369 [ 1764.035894][T13268] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1764.056259][T13268] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.064766][T13268] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1764.072775][T13268] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1764.081040][T13268] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1764.089251][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 1764.097441][T13268] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01005e0000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 06:08:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:17 executing program 5 (fault-call:9 fault-nth:31): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x9000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:17 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x33fe0}}, 0x0) 06:08:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 06:08:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1764.562257][T13300] FAULT_INJECTION: forcing a failure. [ 1764.562257][T13300] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.579320][T13300] CPU: 1 PID: 13300 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1764.588124][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1764.598199][T13300] Call Trace: [ 1764.601505][T13300] dump_stack+0x18f/0x20d [ 1764.605847][T13300] should_fail.cold+0x5/0x14 [ 1764.610458][T13300] should_failslab+0x5/0xf [ 1764.614883][T13300] kmem_cache_alloc_trace+0x240/0x2d0 [ 1764.620273][T13300] blk_mq_init_allocated_queue+0xfe/0x13f0 [ 1764.626182][T13300] ? blkcg_init_queue+0x183/0x740 [ 1764.631465][T13300] ? blk_queue_dma_alignment+0xc/0x50 [ 1764.636850][T13300] ? blk_set_default_limits+0x9/0x5d0 [ 1764.642270][T13300] ? __blk_alloc_queue+0x527/0x700 [ 1764.647403][T13300] blk_mq_init_queue+0x81/0xd0 [ 1764.652184][T13300] loop_add+0x2cb/0x8b0 [ 1764.656454][T13300] loop_control_ioctl+0x16c/0x480 [ 1764.661681][T13300] ? loop_lookup+0x1d0/0x1d0 [ 1764.666287][T13300] ? __fget_files+0x294/0x400 [ 1764.670987][T13300] ? loop_lookup+0x1d0/0x1d0 [ 1764.675600][T13300] ksys_ioctl+0x11a/0x180 [ 1764.679951][T13300] __x64_sys_ioctl+0x6f/0xb0 [ 1764.684553][T13300] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1764.689680][T13300] do_syscall_64+0x60/0xe0 [ 1764.694219][T13300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1764.700114][T13300] RIP: 0033:0x45c369 [ 1764.704009][T13300] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1764.723796][T13300] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.732827][T13300] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1764.740805][T13300] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1764.748784][T13300] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1764.756755][T13300] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 1764.764825][T13300] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 06:08:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x3f000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:17 executing program 5 (fault-call:9 fault-nth:32): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1765.087928][T13330] FAULT_INJECTION: forcing a failure. [ 1765.087928][T13330] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.114367][T13330] CPU: 0 PID: 13330 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1765.123085][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.133155][T13330] Call Trace: [ 1765.136462][T13330] dump_stack+0x18f/0x20d [ 1765.140822][T13330] should_fail.cold+0x5/0x14 [ 1765.145433][T13330] should_failslab+0x5/0xf [ 1765.149850][T13330] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1765.155763][T13330] __kmalloc_node+0x38/0x60 [ 1765.160394][T13330] blk_mq_realloc_hw_ctxs+0x92d/0x1540 [ 1765.165961][T13330] ? lockdep_init_map_waits+0x26a/0x890 [ 1765.171517][T13330] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1765.177430][T13330] ? blkcg_init_queue+0x183/0x740 [ 1765.182455][T13330] ? blk_queue_dma_alignment+0xc/0x50 [ 1765.187959][T13330] ? blk_set_default_limits+0x9/0x5d0 [ 1765.193338][T13330] blk_mq_init_queue+0x81/0xd0 [ 1765.198135][T13330] loop_add+0x2cb/0x8b0 [ 1765.202335][T13330] loop_control_ioctl+0x16c/0x480 [ 1765.207361][T13330] ? loop_lookup+0x1d0/0x1d0 [ 1765.211949][T13330] ? __fget_files+0x294/0x400 [ 1765.216634][T13330] ? loop_lookup+0x1d0/0x1d0 [ 1765.221223][T13330] ksys_ioctl+0x11a/0x180 [ 1765.225560][T13330] __x64_sys_ioctl+0x6f/0xb0 [ 1765.230256][T13330] do_syscall_64+0x60/0xe0 [ 1765.234682][T13330] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1765.240569][T13330] RIP: 0033:0x45c369 [ 1765.244462][T13330] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1765.264621][T13330] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.273034][T13330] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1765.281100][T13330] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1765.289260][T13330] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.297795][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 1765.306238][T13330] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100ff0000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x60000000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000100)={'veth1_to_hsr\x00', {0x2, 0x4e24, @private=0xa010101}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) getpeername$tipc(r5, &(0x7f0000000200)=@id, &(0x7f0000000000)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe2, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7], 0x7e) 06:08:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe}, 0x0) 06:08:18 executing program 5 (fault-call:9 fault-nth:33): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:18 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x20000574}}, 0x0) 06:08:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x9effffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 1765.803366][T13365] FAULT_INJECTION: forcing a failure. [ 1765.803366][T13365] name failslab, interval 1, probability 0, space 0, times 0 06:08:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf0180000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1765.862202][T13365] CPU: 0 PID: 13365 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1765.871112][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.882742][T13365] Call Trace: [ 1765.886133][T13365] dump_stack+0x18f/0x20d [ 1765.890780][T13365] should_fail.cold+0x5/0x14 [ 1765.895399][T13365] should_failslab+0x5/0xf [ 1765.899839][T13365] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1765.905669][T13365] __kmalloc_node+0x38/0x60 [ 1765.910194][T13365] blk_mq_realloc_hw_ctxs+0xbe4/0x1540 [ 1765.915770][T13365] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1765.921690][T13365] ? blkcg_init_queue+0x183/0x740 [ 1765.926743][T13365] ? blk_queue_dma_alignment+0xc/0x50 [ 1765.932128][T13365] ? blk_set_default_limits+0x9/0x5d0 [ 1765.937622][T13365] blk_mq_init_queue+0x81/0xd0 [ 1765.942402][T13365] loop_add+0x2cb/0x8b0 [ 1765.946701][T13365] loop_control_ioctl+0x16c/0x480 [ 1765.951922][T13365] ? loop_lookup+0x1d0/0x1d0 [ 1765.956880][T13365] ? __fget_files+0x294/0x400 [ 1765.961672][T13365] ? loop_lookup+0x1d0/0x1d0 [ 1765.966275][T13365] ksys_ioctl+0x11a/0x180 [ 1765.970615][T13365] __x64_sys_ioctl+0x6f/0xb0 [ 1765.975230][T13365] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1765.980433][T13365] do_syscall_64+0x60/0xe0 [ 1765.984958][T13365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1765.990855][T13365] RIP: 0033:0x45c369 [ 1765.994957][T13365] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1766.015186][T13365] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.023947][T13365] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1766.031937][T13365] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1766.039914][T13365] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.047975][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 1766.055954][T13365] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 06:08:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:19 executing program 5 (fault-call:9 fault-nth:34): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1766.375879][T13399] FAULT_INJECTION: forcing a failure. [ 1766.375879][T13399] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.406639][T13399] CPU: 0 PID: 13399 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1766.415619][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1766.425680][T13399] Call Trace: [ 1766.429009][T13399] dump_stack+0x18f/0x20d [ 1766.433683][T13399] should_fail.cold+0x5/0x14 [ 1766.438376][T13399] should_failslab+0x5/0xf [ 1766.442784][T13399] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1766.448748][T13399] __kmalloc_node+0x38/0x60 [ 1766.453498][T13399] sbitmap_init_node+0x28e/0x4f0 [ 1766.458432][T13399] ? kasan_unpoison_shadow+0x33/0x40 [ 1766.463726][T13399] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1766.469547][T13399] blk_mq_realloc_hw_ctxs+0xc56/0x1540 [ 1766.475018][T13399] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1766.480928][T13399] ? blkcg_init_queue+0x183/0x740 [ 1766.485951][T13399] ? blk_queue_dma_alignment+0xc/0x50 [ 1766.491388][T13399] ? blk_set_default_limits+0x9/0x5d0 [ 1766.496790][T13399] blk_mq_init_queue+0x81/0xd0 [ 1766.501728][T13399] loop_add+0x2cb/0x8b0 [ 1766.505887][T13399] loop_control_ioctl+0x16c/0x480 [ 1766.511191][T13399] ? loop_lookup+0x1d0/0x1d0 [ 1766.515899][T13399] ? __fget_files+0x294/0x400 [ 1766.520672][T13399] ? loop_lookup+0x1d0/0x1d0 [ 1766.525259][T13399] ksys_ioctl+0x11a/0x180 [ 1766.529758][T13399] __x64_sys_ioctl+0x6f/0xb0 [ 1766.534453][T13399] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1766.539568][T13399] do_syscall_64+0x60/0xe0 [ 1766.544156][T13399] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1766.550126][T13399] RIP: 0033:0x45c369 [ 1766.554224][T13399] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1766.575157][T13399] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.583684][T13399] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1766.592015][T13399] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1766.600010][T13399] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.607973][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 1766.616313][T13399] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfcffffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 06:08:19 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x7ffff000}}, 0x0) 06:08:19 executing program 5 (fault-call:9 fault-nth:35): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000100)) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe3, 0x0) accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) 06:08:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100004000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 1766.896071][T13415] FAULT_INJECTION: forcing a failure. [ 1766.896071][T13415] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.928218][T13415] CPU: 0 PID: 13415 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 06:08:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffff000, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1766.936948][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1766.947487][T13415] Call Trace: [ 1766.950800][T13415] dump_stack+0x18f/0x20d [ 1766.955155][T13415] should_fail.cold+0x5/0x14 [ 1766.959857][T13415] should_failslab+0x5/0xf [ 1766.964292][T13415] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1766.970123][T13415] __kmalloc_node+0x38/0x60 [ 1766.974647][T13415] blk_mq_realloc_hw_ctxs+0xbe4/0x1540 [ 1766.980148][T13415] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1766.986154][T13415] ? blkcg_init_queue+0x183/0x740 [ 1766.991195][T13415] ? blk_queue_dma_alignment+0xc/0x50 [ 1766.996579][T13415] ? blk_set_default_limits+0x9/0x5d0 [ 1767.001999][T13415] blk_mq_init_queue+0x81/0xd0 [ 1767.006878][T13415] loop_add+0x2cb/0x8b0 [ 1767.011059][T13415] loop_control_ioctl+0x16c/0x480 [ 1767.016102][T13415] ? loop_lookup+0x1d0/0x1d0 [ 1767.020707][T13415] ? __fget_files+0x294/0x400 [ 1767.025414][T13415] ? loop_lookup+0x1d0/0x1d0 [ 1767.030017][T13415] ksys_ioctl+0x11a/0x180 [ 1767.034360][T13415] __x64_sys_ioctl+0x6f/0xb0 [ 1767.039043][T13415] ? lockdep_hardirqs_on+0x6a/0xe0 06:08:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 1767.044164][T13415] do_syscall_64+0x60/0xe0 [ 1767.048599][T13415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1767.054501][T13415] RIP: 0033:0x45c369 [ 1767.058402][T13415] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1767.078010][T13415] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.087473][T13415] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1767.095541][T13415] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1767.103517][T13415] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.111498][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 1767.119564][T13415] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 06:08:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 06:08:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 06:08:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:20 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0xfffffdef}}, 0x0) 06:08:20 executing program 5 (fault-call:9 fault-nth:36): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1767.744723][T13466] FAULT_INJECTION: forcing a failure. [ 1767.744723][T13466] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.761479][T13466] CPU: 1 PID: 13466 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1767.770478][T13466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.780721][T13466] Call Trace: [ 1767.784019][T13466] dump_stack+0x18f/0x20d [ 1767.788383][T13466] should_fail.cold+0x5/0x14 [ 1767.794449][T13466] should_failslab+0x5/0xf [ 1767.799546][T13466] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1767.805889][T13466] __kmalloc_node+0x38/0x60 [ 1767.811267][T13466] blk_alloc_flush_queue+0x116/0x370 [ 1767.817692][T13466] blk_mq_realloc_hw_ctxs+0xdc1/0x1540 [ 1767.824032][T13466] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1767.830450][T13466] ? blkcg_init_queue+0x183/0x740 [ 1767.836425][T13466] ? blk_queue_dma_alignment+0xc/0x50 [ 1767.842074][T13466] ? blk_set_default_limits+0x9/0x5d0 [ 1767.847548][T13466] blk_mq_init_queue+0x81/0xd0 [ 1767.852574][T13466] loop_add+0x2cb/0x8b0 [ 1767.857035][T13466] loop_control_ioctl+0x16c/0x480 [ 1767.862573][T13466] ? loop_lookup+0x1d0/0x1d0 [ 1767.867167][T13466] ? __fget_files+0x294/0x400 [ 1767.871939][T13466] ? loop_lookup+0x1d0/0x1d0 [ 1767.877140][T13466] ksys_ioctl+0x11a/0x180 [ 1767.881591][T13466] __x64_sys_ioctl+0x6f/0xb0 [ 1767.886273][T13466] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1767.891825][T13466] do_syscall_64+0x60/0xe0 [ 1767.897066][T13466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1767.903598][T13466] RIP: 0033:0x45c369 [ 1767.907599][T13466] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1767.928611][T13466] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.937022][T13466] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1767.945379][T13466] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1767.953766][T13466] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.962431][T13466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 1767.970645][T13466] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_KVMCLOCK_CTRL(r7, 0xaead) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r6], 0x7e) 06:08:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x13a4}, 0x0) 06:08:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:21 executing program 5 (fault-call:9 fault-nth:37): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffffffc, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 1768.322557][T13496] FAULT_INJECTION: forcing a failure. [ 1768.322557][T13496] name failslab, interval 1, probability 0, space 0, times 0 06:08:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1768.376489][T13496] CPU: 0 PID: 13496 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1768.386339][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.397120][T13496] Call Trace: [ 1768.401135][T13496] dump_stack+0x18f/0x20d [ 1768.405596][T13496] should_fail.cold+0x5/0x14 [ 1768.410834][T13496] should_failslab+0x5/0xf [ 1768.415362][T13496] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1768.421321][T13496] __kmalloc_node+0x38/0x60 06:08:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa413}, 0x0) [ 1768.427131][T13496] blk_alloc_flush_queue+0x116/0x370 [ 1768.433124][T13496] blk_mq_realloc_hw_ctxs+0xdc1/0x1540 [ 1768.438971][T13496] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1768.445351][T13496] ? blkcg_init_queue+0x183/0x740 [ 1768.451534][T13496] ? blk_queue_dma_alignment+0xc/0x50 [ 1768.457274][T13496] ? blk_set_default_limits+0x9/0x5d0 [ 1768.464427][T13496] blk_mq_init_queue+0x81/0xd0 [ 1768.470190][T13496] loop_add+0x2cb/0x8b0 [ 1768.474978][T13496] loop_control_ioctl+0x16c/0x480 [ 1768.480379][T13496] ? loop_lookup+0x1d0/0x1d0 [ 1768.485499][T13496] ? __fget_files+0x294/0x400 [ 1768.491612][T13496] ? loop_lookup+0x1d0/0x1d0 [ 1768.496882][T13496] ksys_ioctl+0x11a/0x180 [ 1768.502352][T13496] __x64_sys_ioctl+0x6f/0xb0 [ 1768.507359][T13496] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1768.514107][T13496] do_syscall_64+0x60/0xe0 [ 1768.519991][T13496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1768.526941][T13496] RIP: 0033:0x45c369 [ 1768.531320][T13496] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1768.552720][T13496] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.561842][T13496] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 06:08:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1768.571303][T13496] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1768.580604][T13496] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.589501][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 1768.599375][T13496] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:21 executing program 5 (fault-call:9 fault-nth:38): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000}, 0x0) [ 1768.875793][T13531] FAULT_INJECTION: forcing a failure. [ 1768.875793][T13531] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.895192][T13531] CPU: 1 PID: 13531 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1768.905539][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.916771][T13531] Call Trace: [ 1768.920402][T13531] dump_stack+0x18f/0x20d [ 1768.926367][T13531] should_fail.cold+0x5/0x14 [ 1768.931501][T13531] should_failslab+0x5/0xf [ 1768.936288][T13531] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1768.942873][T13531] __kmalloc_node+0x38/0x60 [ 1768.948243][T13531] disk_expand_part_tbl+0x181/0x3a0 [ 1768.954056][T13531] ? __raw_spin_lock_init+0x34/0x100 [ 1768.960021][T13531] __alloc_disk_node+0x112/0x3a0 [ 1768.965672][T13531] loop_add+0x388/0x8b0 [ 1768.970552][T13531] loop_control_ioctl+0x16c/0x480 [ 1768.976134][T13531] ? loop_lookup+0x1d0/0x1d0 [ 1768.981265][T13531] ? __fget_files+0x294/0x400 [ 1768.986764][T13531] ? loop_lookup+0x1d0/0x1d0 [ 1768.992218][T13531] ksys_ioctl+0x11a/0x180 [ 1768.997282][T13531] __x64_sys_ioctl+0x6f/0xb0 [ 1769.003513][T13531] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1769.010134][T13531] do_syscall_64+0x60/0xe0 [ 1769.015132][T13531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1769.021654][T13531] RIP: 0033:0x45c369 [ 1769.025554][T13531] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1769.046788][T13531] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.055451][T13531] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1769.064189][T13531] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1769.072879][T13531] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1769.082089][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 1769.091137][T13531] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:22 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x2}, 0x0) 06:08:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000002005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 06:08:22 executing program 5 (fault-call:9 fault-nth:39): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe2, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=r5, @ANYRESHEX=r0, @ANYBLOB="3b2184a8c0a4df2344c2220195cbd58bd8a03ea75717902cf71517b8694500885d815d00a250889e17f99b16a094c722d9479f8cde96fbc368c049618cac12d657e394bc47a27e4a81e16b472a9f0e7a827884af5b05a81b98f69afb10df3995facc5b8fe4d76eea15de1f9448d855a1e0faff64dd6141e227f8af94", @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r6, @ANYRES32], 0x7e) 06:08:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 1769.506966][T13549] FAULT_INJECTION: forcing a failure. [ 1769.506966][T13549] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.536350][T13549] CPU: 0 PID: 13549 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1769.547722][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1769.558987][T13549] Call Trace: [ 1769.562658][T13549] dump_stack+0x18f/0x20d [ 1769.567326][T13549] should_fail.cold+0x5/0x14 [ 1769.572817][T13549] should_failslab+0x5/0xf [ 1769.577654][T13549] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1769.584771][T13549] __kmalloc_node+0x38/0x60 [ 1769.590014][T13549] blk_alloc_flush_queue+0x116/0x370 [ 1769.598034][T13549] blk_mq_realloc_hw_ctxs+0xdc1/0x1540 06:08:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 1769.605166][T13549] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1769.611563][T13549] ? blkcg_init_queue+0x183/0x740 [ 1769.616848][T13549] ? blk_queue_dma_alignment+0xc/0x50 [ 1769.623012][T13549] ? blk_set_default_limits+0x9/0x5d0 [ 1769.630447][T13549] blk_mq_init_queue+0x81/0xd0 [ 1769.636237][T13549] loop_add+0x2cb/0x8b0 [ 1769.641768][T13549] loop_control_ioctl+0x16c/0x480 [ 1769.647505][T13549] ? loop_lookup+0x1d0/0x1d0 [ 1769.652810][T13549] ? __fget_files+0x294/0x400 [ 1769.658197][T13549] ? loop_lookup+0x1d0/0x1d0 [ 1769.663144][T13549] ksys_ioctl+0x11a/0x180 [ 1769.668735][T13549] __x64_sys_ioctl+0x6f/0xb0 [ 1769.673806][T13549] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1769.681988][T13549] do_syscall_64+0x60/0xe0 [ 1769.687081][T13549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1769.694700][T13549] RIP: 0033:0x45c369 06:08:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 1769.699234][T13549] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1769.721121][T13549] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.730691][T13549] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1769.740396][T13549] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1769.748933][T13549] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1769.758604][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 1769.767145][T13549] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 06:08:22 executing program 5 (fault-call:9 fault-nth:40): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1770.028058][T13583] FAULT_INJECTION: forcing a failure. [ 1770.028058][T13583] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.052536][T13583] CPU: 0 PID: 13583 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1770.062173][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.073314][T13583] Call Trace: [ 1770.076728][T13583] dump_stack+0x18f/0x20d [ 1770.081663][T13583] should_fail.cold+0x5/0x14 [ 1770.086507][T13583] should_failslab+0x5/0xf [ 1770.091312][T13583] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1770.097494][T13583] __kmalloc_node+0x38/0x60 [ 1770.102548][T13583] blk_alloc_flush_queue+0x116/0x370 [ 1770.109035][T13583] blk_mq_realloc_hw_ctxs+0xdc1/0x1540 [ 1770.114898][T13583] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 1770.121460][T13583] ? blkcg_init_queue+0x183/0x740 [ 1770.126614][T13583] ? blk_queue_dma_alignment+0xc/0x50 [ 1770.132963][T13583] ? blk_set_default_limits+0x9/0x5d0 [ 1770.140836][T13583] blk_mq_init_queue+0x81/0xd0 [ 1770.146918][T13583] loop_add+0x2cb/0x8b0 [ 1770.152092][T13583] loop_control_ioctl+0x16c/0x480 [ 1770.157240][T13583] ? loop_lookup+0x1d0/0x1d0 [ 1770.162897][T13583] ? __fget_files+0x294/0x400 [ 1770.168397][T13583] ? loop_lookup+0x1d0/0x1d0 [ 1770.174030][T13583] ksys_ioctl+0x11a/0x180 [ 1770.178579][T13583] __x64_sys_ioctl+0x6f/0xb0 [ 1770.184094][T13583] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1770.190046][T13583] do_syscall_64+0x60/0xe0 [ 1770.194744][T13583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1770.201341][T13583] RIP: 0033:0x45c369 [ 1770.205535][T13583] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:08:23 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x3}, 0x0) [ 1770.226097][T13583] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.235300][T13583] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1770.243923][T13583] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1770.252474][T13583] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.260699][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 1770.269733][T13583] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000003005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 06:08:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x4, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x100) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:23 executing program 5 (fault-call:9 fault-nth:41): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x5, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1770.557132][T13611] FAULT_INJECTION: forcing a failure. [ 1770.557132][T13611] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.594502][T13611] CPU: 0 PID: 13611 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1770.603474][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.614324][T13611] Call Trace: [ 1770.617862][T13611] dump_stack+0x18f/0x20d [ 1770.622218][T13611] should_fail.cold+0x5/0x14 [ 1770.626831][T13611] should_failslab+0x5/0xf [ 1770.631362][T13611] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1770.637815][T13611] __alloc_disk_node+0x69/0x3a0 [ 1770.643494][T13611] loop_add+0x388/0x8b0 [ 1770.648696][T13611] loop_control_ioctl+0x16c/0x480 [ 1770.654061][T13611] ? loop_lookup+0x1d0/0x1d0 [ 1770.658695][T13611] ? security_file_ioctl+0x83/0xb0 [ 1770.663829][T13611] ? loop_lookup+0x1d0/0x1d0 [ 1770.668727][T13611] ksys_ioctl+0x11a/0x180 [ 1770.673183][T13611] __x64_sys_ioctl+0x6f/0xb0 [ 1770.677902][T13611] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1770.683648][T13611] do_syscall_64+0x60/0xe0 [ 1770.688623][T13611] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1770.694911][T13611] RIP: 0033:0x45c369 [ 1770.699175][T13611] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1770.720538][T13611] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.729833][T13611] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1770.738692][T13611] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1770.746873][T13611] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 06:08:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x9, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 1770.755384][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 1770.763961][T13611] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 06:08:23 executing program 5 (fault-call:9 fault-nth:42): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) [ 1771.033997][T13637] FAULT_INJECTION: forcing a failure. [ 1771.033997][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.056706][T13637] CPU: 0 PID: 13637 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1771.065907][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.077964][T13637] Call Trace: [ 1771.081271][T13637] dump_stack+0x18f/0x20d [ 1771.086011][T13637] should_fail.cold+0x5/0x14 [ 1771.090624][T13637] should_failslab+0x5/0xf [ 1771.095155][T13637] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1771.101102][T13637] blk_mq_init_tags+0x6a/0x2b0 [ 1771.106288][T13637] blk_mq_alloc_rq_map+0x81/0x200 [ 1771.111330][T13637] blk_mq_init_sched+0x20a/0xb50 [ 1771.116272][T13637] elevator_init_mq+0x2e2/0x400 [ 1771.122101][T13637] __device_add_disk+0x985/0x1200 [ 1771.127328][T13637] ? sprintf+0xc0/0x100 [ 1771.131777][T13637] ? blk_alloc_devt+0x4b0/0x4b0 [ 1771.137836][T13637] ? __init_waitqueue_head+0x97/0x110 [ 1771.144692][T13637] ? pm_runtime_init+0x2cf/0x3b0 [ 1771.150407][T13637] ? lockdep_init_map_waits+0x26a/0x890 [ 1771.156431][T13637] loop_add+0x616/0x8b0 [ 1771.161260][T13637] loop_control_ioctl+0x16c/0x480 [ 1771.167206][T13637] ? loop_lookup+0x1d0/0x1d0 [ 1771.172604][T13637] ? loop_lookup+0x1d0/0x1d0 [ 1771.177654][T13637] ? loop_lookup+0x1d0/0x1d0 [ 1771.182530][T13637] ksys_ioctl+0x11a/0x180 [ 1771.187056][T13637] __x64_sys_ioctl+0x6f/0xb0 [ 1771.191767][T13637] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1771.196902][T13637] do_syscall_64+0x60/0xe0 [ 1771.201486][T13637] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1771.207641][T13637] RIP: 0033:0x45c369 [ 1771.211788][T13637] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1771.232680][T13637] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1771.243599][T13637] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1771.252690][T13637] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1771.262545][T13637] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1771.271441][T13637] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a 06:08:24 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x8}, 0x0) [ 1771.280362][T13637] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1771.339477][T13637] "mq-deadline" elevator initialization failed, falling back to "none" 06:08:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 06:08:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:24 executing program 5 (fault-call:9 fault-nth:43): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x60, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 06:08:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1771.914096][T13661] FAULT_INJECTION: forcing a failure. [ 1771.914096][T13661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1771.927875][T13661] CPU: 1 PID: 13661 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1771.937071][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.947514][T13661] Call Trace: [ 1771.950925][T13661] dump_stack+0x18f/0x20d [ 1771.955282][T13661] should_fail.cold+0x5/0x14 [ 1771.960097][T13661] __alloc_pages_nodemask+0x1a3/0x930 [ 1771.966255][T13661] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1771.972516][T13661] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1771.979850][T13661] ? lock_acquire+0x1f1/0xad0 [ 1771.985029][T13661] ? fs_reclaim_acquire+0xf/0x40 [ 1771.990790][T13661] ? find_held_lock+0x2d/0x110 [ 1771.996042][T13661] cache_grow_begin+0x8c/0xb20 [ 1772.001196][T13661] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1772.007031][T13661] cache_alloc_refill+0x27b/0x340 [ 1772.013224][T13661] ? lockdep_hardirqs_off+0x66/0xa0 [ 1772.018631][T13661] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 1772.024970][T13661] sbitmap_queue_init_node+0x29b/0x720 [ 1772.031688][T13661] blk_mq_init_tags+0x10d/0x2b0 [ 1772.037025][T13661] blk_mq_alloc_rq_map+0x81/0x200 [ 1772.042614][T13661] blk_mq_init_sched+0x20a/0xb50 [ 1772.047772][T13661] elevator_init_mq+0x2e2/0x400 [ 1772.052820][T13661] __device_add_disk+0x985/0x1200 [ 1772.057876][T13661] ? sprintf+0xc0/0x100 06:08:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 06:08:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 1772.062637][T13661] ? blk_alloc_devt+0x4b0/0x4b0 [ 1772.068651][T13661] ? lockdep_init_map_waits+0x298/0x890 [ 1772.074399][T13661] loop_add+0x616/0x8b0 [ 1772.078826][T13661] loop_control_ioctl+0x16c/0x480 [ 1772.084297][T13661] ? loop_lookup+0x1d0/0x1d0 [ 1772.089697][T13661] ? __fget_files+0x294/0x400 [ 1772.095375][T13661] ? loop_lookup+0x1d0/0x1d0 [ 1772.100079][T13661] ksys_ioctl+0x11a/0x180 [ 1772.104438][T13661] __x64_sys_ioctl+0x6f/0xb0 [ 1772.109315][T13661] ? lockdep_hardirqs_on+0x6a/0xe0 06:08:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 1772.114849][T13661] do_syscall_64+0x60/0xe0 [ 1772.119303][T13661] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1772.126614][T13661] RIP: 0033:0x45c369 [ 1772.130616][T13661] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1772.152952][T13661] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1772.161934][T13661] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1772.170362][T13661] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1772.179227][T13661] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.189297][T13661] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 1772.197387][T13661] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:25 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0xf}, 0x0) 06:08:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000005005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa4130000}, 0x0) 06:08:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x300, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xec944, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000000)='THAWED\x00', 0x7) 06:08:25 executing program 5 (fault-call:9 fault-nth:44): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x500, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 06:08:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x900, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) [ 1772.964372][T13736] FAULT_INJECTION: forcing a failure. [ 1772.964372][T13736] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.003904][T13736] CPU: 1 PID: 13736 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1773.013788][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.024308][T13736] Call Trace: [ 1773.027643][T13736] dump_stack+0x18f/0x20d [ 1773.032432][T13736] should_fail.cold+0x5/0x14 [ 1773.037817][T13736] should_failslab+0x5/0xf [ 1773.042346][T13736] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1773.048548][T13736] sbitmap_queue_init_node+0x29b/0x720 [ 1773.054431][T13736] blk_mq_init_tags+0x16f/0x2b0 [ 1773.059530][T13736] blk_mq_alloc_rq_map+0x81/0x200 [ 1773.064690][T13736] blk_mq_init_sched+0x20a/0xb50 [ 1773.069852][T13736] elevator_init_mq+0x2e2/0x400 [ 1773.075904][T13736] __device_add_disk+0x985/0x1200 [ 1773.081712][T13736] ? sprintf+0xc0/0x100 [ 1773.086313][T13736] ? blk_alloc_devt+0x4b0/0x4b0 [ 1773.091646][T13736] ? lockdep_init_map_waits+0x26a/0x890 [ 1773.098008][T13736] loop_add+0x616/0x8b0 [ 1773.102946][T13736] loop_control_ioctl+0x16c/0x480 [ 1773.108510][T13736] ? loop_lookup+0x1d0/0x1d0 [ 1773.113513][T13736] ? __fget_files+0x294/0x400 [ 1773.118507][T13736] ? loop_lookup+0x1d0/0x1d0 [ 1773.123314][T13736] ksys_ioctl+0x11a/0x180 [ 1773.127677][T13736] __x64_sys_ioctl+0x6f/0xb0 [ 1773.132378][T13736] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1773.137840][T13736] do_syscall_64+0x60/0xe0 [ 1773.142509][T13736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1773.148614][T13736] RIP: 0033:0x45c369 [ 1773.152521][T13736] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1773.173346][T13736] RSP: 002b:00007ffb591dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1773.182932][T13736] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1773.194558][T13736] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1773.203911][T13736] RBP: 00007ffb591dbca0 R08: 0000000000000000 R09: 0000000000000000 06:08:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1773.215148][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 1773.224207][T13736] R13: 00007ffcd680a66f R14: 00007ffb591dc9c0 R15: 000000000078bfac [ 1773.237396][T13736] "mq-deadline" elevator initialization failed, falling back to "none" 06:08:26 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0xffffff1f}, 0x0) 06:08:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000007d94404c2c00fe930000000000000000c06d9d65b54a4f0000000000aaff020f00000000000000000000000001840000000000000000a7a1838e510d623306431445218395618d442e46fd87c8dcfa99809d2084d7fe0f0f72f56fd48a4046bdf2ab7eeb60f4deb49a2b6fd75406dcf36835ef792998a2731e547e1d7891128a951992e1b1feb141cb8c00ab068a05955f"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000000000)=0x80000001, 0x4) 06:08:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000006005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:26 executing program 5 (fault-call:9 fault-nth:45): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 06:08:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf00, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 06:08:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x18f0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1774.025809][T13788] FAULT_INJECTION: forcing a failure. [ 1774.025809][T13788] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.061909][T13788] CPU: 1 PID: 13788 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1774.071457][T13788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1774.081893][T13788] Call Trace: [ 1774.085212][T13788] dump_stack+0x18f/0x20d [ 1774.089653][T13788] should_fail.cold+0x5/0x14 [ 1774.094745][T13788] should_failslab+0x5/0xf [ 1774.099446][T13788] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1774.105299][T13788] __kmalloc_node+0x38/0x60 [ 1774.110133][T13788] blk_mq_alloc_rq_map+0xc3/0x200 [ 1774.115513][T13788] blk_mq_init_sched+0x20a/0xb50 [ 1774.120651][T13788] elevator_init_mq+0x2e2/0x400 [ 1774.125616][T13788] __device_add_disk+0x985/0x1200 [ 1774.130960][T13788] ? sprintf+0xc0/0x100 [ 1774.135412][T13788] ? blk_alloc_devt+0x4b0/0x4b0 [ 1774.140465][T13788] ? device_initialize+0x319/0x5c0 [ 1774.145954][T13788] ? lockdep_init_map_waits+0x26a/0x890 [ 1774.152972][T13788] loop_add+0x616/0x8b0 [ 1774.157696][T13788] loop_control_ioctl+0x16c/0x480 [ 1774.164070][T13788] ? loop_lookup+0x1d0/0x1d0 [ 1774.168768][T13788] ? __fget_files+0x294/0x400 [ 1774.173466][T13788] ? loop_lookup+0x1d0/0x1d0 [ 1774.178330][T13788] ksys_ioctl+0x11a/0x180 [ 1774.182788][T13788] __x64_sys_ioctl+0x6f/0xb0 [ 1774.187602][T13788] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1774.196827][T13788] do_syscall_64+0x60/0xe0 [ 1774.202695][T13788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1774.209186][T13788] RIP: 0033:0x45c369 [ 1774.213190][T13788] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1774.234391][T13788] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1774.244404][T13788] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1774.253582][T13788] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1774.263783][T13788] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 06:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 1774.272343][T13788] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 1774.281211][T13788] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 06:08:27 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x1, 0x2}, 0x0) 06:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 1774.361575][T13788] "mq-deadline" elevator initialization failed, falling back to "none" 06:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x2) 06:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x3) 06:08:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x3f00, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ubi_ctrl\x00', 0x200200, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x61c, @fixed={[], 0x12}, 0x2}, 0xe) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="9c0000005ccbb2c797a15f4b84a7d72568559cd59374cde67ec348e7aa96ec36dfa979a39349098cff0397ac011d5a320662c5bceb68d5c222df4e73d310c78152e00aae2f632f2e52db7e93f06325857c353e1aebf6495da2a1055a0b92a59e01bb10c6369933fd9606463d044711c1faa50d4ec30bd17d41ff1341e82bea7bde710b0e53ee60a6a409ac4b2f61adc2b02866f236b4642b81df6b8f6b515069a1ddae01d94d4a"], &(0x7f0000001680)=0xa4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000016c0)={0x3ff, 0x201, 0xba4, 0x626, r6}, &(0x7f0000001700)=0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r8 = socket$netlink(0x10, 0x3, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x7fffffff, 0x7f}]}, 0xc, 0x1) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c6c00fe8000000000000000000000000000aafffb438e83158a4c11cb544b5585495eaca42fd1b20200a04ab6d7000000000000000001844c8cac950437109c5674dd20fee67f987e1f0a4a4bcd4dedce17ca9c63ae5e8762962dfa7830560fc621f127c17e24097f075bd5654a1b5c75f6296d0c549adf15736b6fe81548e62aeb7f93d65568c892b395c6af95bd"], 0x7e) 06:08:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:27 executing program 5 (fault-call:9 fault-nth:46): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x4) 06:08:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x6000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x5) 06:08:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1775.096333][T13860] FAULT_INJECTION: forcing a failure. [ 1775.096333][T13860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1775.131289][T13860] CPU: 0 PID: 13860 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1775.141216][T13860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.152057][T13860] Call Trace: [ 1775.155644][T13860] dump_stack+0x18f/0x20d [ 1775.160362][T13860] should_fail.cold+0x5/0x14 [ 1775.164999][T13860] __alloc_pages_nodemask+0x1a3/0x930 [ 1775.170538][T13860] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1775.176716][T13860] ? trace_hardirqs_on+0x5f/0x220 [ 1775.182119][T13860] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1775.189005][T13860] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1775.196861][T13860] blk_mq_alloc_rqs+0x235/0x790 [ 1775.202501][T13860] blk_mq_init_sched+0x25d/0xb50 [ 1775.208090][T13860] elevator_init_mq+0x2e2/0x400 [ 1775.213642][T13860] __device_add_disk+0x985/0x1200 [ 1775.221347][T13860] ? sprintf+0xc0/0x100 [ 1775.225933][T13860] ? blk_alloc_devt+0x4b0/0x4b0 [ 1775.231171][T13860] ? __init_waitqueue_head+0x97/0x110 [ 1775.237012][T13860] ? pm_runtime_init+0x2cf/0x3b0 [ 1775.242266][T13860] ? lockdep_init_map_waits+0x26a/0x890 [ 1775.248356][T13860] loop_add+0x616/0x8b0 [ 1775.253095][T13860] loop_control_ioctl+0x16c/0x480 [ 1775.258650][T13860] ? loop_lookup+0x1d0/0x1d0 [ 1775.263290][T13860] ? __fget_files+0x294/0x400 [ 1775.268651][T13860] ? loop_lookup+0x1d0/0x1d0 [ 1775.273256][T13860] ksys_ioctl+0x11a/0x180 [ 1775.278066][T13860] __x64_sys_ioctl+0x6f/0xb0 [ 1775.282831][T13860] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1775.288619][T13860] do_syscall_64+0x60/0xe0 [ 1775.293640][T13860] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1775.301930][T13860] RIP: 0033:0x45c369 [ 1775.308284][T13860] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1775.333708][T13860] RSP: 002b:00007ffb591dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:08:28 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x1, 0x3}, 0x0) [ 1775.343062][T13860] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1775.351420][T13860] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1775.360275][T13860] RBP: 00007ffb591dbca0 R08: 0000000000000000 R09: 0000000000000000 [ 1775.368909][T13860] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 1775.377306][T13860] R13: 00007ffcd680a66f R14: 00007ffb591dc9c0 R15: 000000000078bfac 06:08:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x8) 06:08:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf018, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:28 executing program 5 (fault-call:9 fault-nth:47): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x9) [ 1775.864950][T13896] FAULT_INJECTION: forcing a failure. [ 1775.864950][T13896] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.879782][T13896] CPU: 0 PID: 13896 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1775.889124][T13896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.899808][T13896] Call Trace: [ 1775.904175][T13896] dump_stack+0x18f/0x20d [ 1775.908544][T13896] should_fail.cold+0x5/0x14 [ 1775.913241][T13896] should_failslab+0x5/0xf [ 1775.917671][T13896] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1775.923626][T13896] elevator_alloc+0x78/0x170 [ 1775.928531][T13896] dd_init_queue+0x20/0x440 [ 1775.933389][T13896] blk_mq_init_sched+0x5b0/0xb50 [ 1775.938563][T13896] elevator_init_mq+0x2e2/0x400 [ 1775.943668][T13896] __device_add_disk+0x985/0x1200 [ 1775.949045][T13896] ? sprintf+0xc0/0x100 [ 1775.953755][T13896] ? blk_alloc_devt+0x4b0/0x4b0 [ 1775.958822][T13896] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1775.965210][T13896] loop_add+0x616/0x8b0 [ 1775.970067][T13896] loop_control_ioctl+0x16c/0x480 [ 1775.975674][T13896] ? loop_lookup+0x1d0/0x1d0 [ 1775.980910][T13896] ? __fget_files+0x294/0x400 [ 1775.987172][T13896] ? loop_lookup+0x1d0/0x1d0 [ 1775.992979][T13896] ksys_ioctl+0x11a/0x180 [ 1775.997569][T13896] __x64_sys_ioctl+0x6f/0xb0 [ 1776.002177][T13896] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1776.008147][T13896] do_syscall_64+0x60/0xe0 [ 1776.013128][T13896] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1776.019215][T13896] RIP: 0033:0x45c369 [ 1776.023195][T13896] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1776.045358][T13896] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.054815][T13896] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1776.063034][T13896] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1776.071281][T13896] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1776.080329][T13896] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f [ 1776.088388][T13896] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1776.118048][T13896] "mq-deadline" elevator initialization failed, falling back to "none" 06:08:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'caif0\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00000000000000aaff02000000000000000000000000040184"], 0x7e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x10000}) 06:08:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xe) 06:08:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x30000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:29 executing program 5 (fault-call:9 fault-nth:48): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000008005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xf) 06:08:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x34000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:29 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x1, 0x4}, 0x0) 06:08:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x60) [ 1776.505127][T13929] FAULT_INJECTION: forcing a failure. [ 1776.505127][T13929] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.556521][T13929] CPU: 1 PID: 13929 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1776.566988][T13929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.579995][T13929] Call Trace: [ 1776.583323][T13929] dump_stack+0x18f/0x20d [ 1776.588205][T13929] should_fail.cold+0x5/0x14 [ 1776.592818][T13929] should_failslab+0x5/0xf [ 1776.597620][T13929] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1776.604240][T13929] dd_init_queue+0x94/0x440 [ 1776.609281][T13929] blk_mq_init_sched+0x5b0/0xb50 [ 1776.614253][T13929] elevator_init_mq+0x2e2/0x400 [ 1776.619124][T13929] __device_add_disk+0x985/0x1200 [ 1776.624350][T13929] ? sprintf+0xc0/0x100 [ 1776.628813][T13929] ? blk_alloc_devt+0x4b0/0x4b0 [ 1776.633712][T13929] ? __init_waitqueue_head+0x97/0x110 [ 1776.640132][T13929] ? pm_runtime_init+0x2cf/0x3b0 [ 1776.645442][T13929] ? lockdep_init_map_waits+0x26a/0x890 [ 1776.651183][T13929] loop_add+0x616/0x8b0 [ 1776.655983][T13929] loop_control_ioctl+0x16c/0x480 [ 1776.661204][T13929] ? loop_lookup+0x1d0/0x1d0 [ 1776.666001][T13929] ? __fget_files+0x294/0x400 [ 1776.671063][T13929] ? loop_lookup+0x1d0/0x1d0 [ 1776.675692][T13929] ksys_ioctl+0x11a/0x180 [ 1776.680214][T13929] __x64_sys_ioctl+0x6f/0xb0 [ 1776.685082][T13929] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1776.690801][T13929] do_syscall_64+0x60/0xe0 [ 1776.696963][T13929] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1776.703936][T13929] RIP: 0033:0x45c369 [ 1776.708047][T13929] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1776.730674][T13929] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.740827][T13929] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 06:08:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xf0) 06:08:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x300) 06:08:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x400300, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1776.749547][T13929] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1776.760113][T13929] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1776.768726][T13929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 1776.777332][T13929] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1776.826871][T13929] "mq-deadline" elevator initialization failed, falling back to "none" 06:08:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0x7e) 06:08:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x500) 06:08:30 executing program 5 (fault-call:9 fault-nth:49): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0xf0ffff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000a005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:30 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x1, 0x5}, 0x0) 06:08:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x1000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x900) [ 1777.579861][T13996] FAULT_INJECTION: forcing a failure. [ 1777.579861][T13996] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.619417][T13996] CPU: 1 PID: 13996 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1777.628240][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1777.638755][T13996] Call Trace: [ 1777.642240][T13996] dump_stack+0x18f/0x20d [ 1777.646604][T13996] should_fail.cold+0x5/0x14 [ 1777.651591][T13996] should_failslab+0x5/0xf [ 1777.657124][T13996] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1777.663395][T13996] dd_init_queue+0x94/0x440 [ 1777.668158][T13996] blk_mq_init_sched+0x5b0/0xb50 [ 1777.673598][T13996] elevator_init_mq+0x2e2/0x400 [ 1777.678563][T13996] __device_add_disk+0x985/0x1200 [ 1777.684002][T13996] ? sprintf+0xc0/0x100 [ 1777.688276][T13996] ? blk_alloc_devt+0x4b0/0x4b0 [ 1777.693237][T13996] ? lockdep_init_map_waits+0x294/0x890 [ 1777.699945][T13996] loop_add+0x616/0x8b0 [ 1777.704848][T13996] loop_control_ioctl+0x16c/0x480 [ 1777.710382][T13996] ? loop_lookup+0x1d0/0x1d0 [ 1777.716368][T13996] ? __fget_files+0x294/0x400 [ 1777.722678][T13996] ? loop_lookup+0x1d0/0x1d0 [ 1777.727466][T13996] ksys_ioctl+0x11a/0x180 [ 1777.731809][T13996] __x64_sys_ioctl+0x6f/0xb0 [ 1777.736421][T13996] do_syscall_64+0x60/0xe0 [ 1777.741038][T13996] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1777.747025][T13996] RIP: 0033:0x45c369 [ 1777.751143][T13996] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:08:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xe00) 06:08:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x2000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1777.775436][T13996] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1777.784503][T13996] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1777.793747][T13996] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1777.801909][T13996] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1777.809999][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 1777.819141][T13996] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c 06:08:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xf00) [ 1777.895398][T13996] "mq-deadline" elevator initialization failed, falling back to "none" 06:08:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x13a4) 06:08:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e20, @private=0xa010101}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000005c00000060bc7d94004c2c00fe8000000000000000010000000000aaff02000000000000000000000000000184"], 0x7e) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 06:08:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x3000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:08:31 executing program 5 (fault-call:9 fault-nth:50): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92c, 0x0) 06:08:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x6000) 06:08:31 executing program 1: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x74, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x1, 0x6}, 0x0) 06:08:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000011005c00000060bc7d94004c2c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0x7e) 06:08:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xa413) 06:08:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x4000000, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 1778.814540][T14061] FAULT_INJECTION: forcing a failure. [ 1778.814540][T14061] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.847686][T14061] CPU: 0 PID: 14061 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1778.856657][T14061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1778.866718][T14061] Call Trace: [ 1778.870029][T14061] dump_stack+0x18f/0x20d [ 1778.874569][T14061] should_fail.cold+0x5/0x14 [ 1778.879174][T14061] should_failslab+0x5/0xf [ 1778.883643][T14061] kmem_cache_alloc_trace+0x240/0x2d0 [ 1778.889046][T14061] device_create_groups_vargs+0x8a/0x280 [ 1778.894693][T14061] device_create+0xdf/0x120 [ 1778.899212][T14061] ? device_create_groups_vargs+0x280/0x280 [ 1778.905208][T14061] ? pointer+0x970/0x970 [ 1778.909489][T14061] bdi_register_va.part.0+0x9c/0x860 [ 1778.914888][T14061] ? cgwb_kill+0x450/0x450 [ 1778.919485][T14061] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 1778.925303][T14061] ? __wake_up_common_lock+0xde/0x130 [ 1778.930692][T14061] bdi_register+0x12a/0x140 [ 1778.935234][T14061] ? bdi_register_va.part.0+0x860/0x860 [ 1778.940809][T14061] __device_add_disk+0xdf7/0x1200 [ 1778.945856][T14061] ? sprintf+0xc0/0x100 [ 1778.950726][T14061] ? blk_alloc_devt+0x4b0/0x4b0 [ 1778.955683][T14061] ? __init_waitqueue_head+0x97/0x110 [ 1778.961514][T14061] ? pm_runtime_init+0x2cf/0x3b0 [ 1778.966549][T14061] ? lockdep_init_map_waits+0x26a/0x890 [ 1778.974675][T14061] loop_add+0x616/0x8b0 [ 1778.978863][T14061] loop_control_ioctl+0x16c/0x480 [ 1778.983933][T14061] ? loop_lookup+0x1d0/0x1d0 [ 1778.988539][T14061] ? loop_lookup+0x1d0/0x1d0 [ 1778.993137][T14061] ksys_ioctl+0x11a/0x180 [ 1778.997563][T14061] __x64_sys_ioctl+0x6f/0xb0 [ 1779.002261][T14061] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1779.007385][T14061] do_syscall_64+0x60/0xe0 [ 1779.012080][T14061] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1779.017984][T14061] RIP: 0033:0x45c369 [ 1779.021880][T14061] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1779.041487][T14061] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1779.049989][T14061] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1779.057963][T14061] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 06:08:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xf000) [ 1779.065944][T14061] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1779.073922][T14061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 1779.081925][T14061] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1779.106956][T14061] ------------[ cut here ]------------ [ 1779.112748][T14061] WARNING: CPU: 0 PID: 14061 at block/genhd.c:827 __device_add_disk+0xf7e/0x1200 [ 1779.122959][T14061] Kernel panic - not syncing: panic_on_warn set ... [ 1779.129657][T14061] CPU: 0 PID: 14061 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 1779.138333][T14061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.148430][T14061] Call Trace: [ 1779.152092][T14061] dump_stack+0x18f/0x20d [ 1779.156436][T14061] panic+0x2e3/0x75c [ 1779.160344][T14061] ? __warn_printk+0xf3/0xf3 [ 1779.164946][T14061] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1779.171123][T14061] ? __device_add_disk+0xf7e/0x1200 [ 1779.176338][T14061] ? __warn.cold+0x5/0x45 [ 1779.180680][T14061] ? __device_add_disk+0xf7e/0x1200 [ 1779.185888][T14061] __warn.cold+0x20/0x45 [ 1779.190143][T14061] ? __device_add_disk+0xf7e/0x1200 [ 1779.195783][T14061] report_bug+0x1bd/0x210 [ 1779.200143][T14061] handle_bug+0x38/0x90 06:08:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x30000) [ 1779.204322][T14061] exc_invalid_op+0x13/0x40 [ 1779.208836][T14061] asm_exc_invalid_op+0x12/0x20 [ 1779.213698][T14061] RIP: 0010:__device_add_disk+0xf7e/0x1200 [ 1779.219506][T14061] Code: f1 ff ff e8 04 f9 eb fd 0f 0b e9 9f f8 ff ff 48 89 7c 24 10 e8 f3 f8 eb fd 0f 0b 48 8b 7c 24 10 e9 f3 f4 ff ff e8 e2 f8 eb fd <0f> 0b e9 8b fe ff ff 4c 89 ef e8 13 5e 2b fe e9 dc f1 ff ff e8 f9 [ 1779.239168][T14061] RSP: 0018:ffffc900080e7cd0 EFLAGS: 00010246 [ 1779.245258][T14061] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90013ff6000 06:08:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x34000) [ 1779.253676][T14061] RDX: 0000000000040000 RSI: ffffffff8387c3ee RDI: 0000000000000005 [ 1779.261652][T14061] RBP: ffff88809510a000 R08: 0000000000000dc0 R09: ffffffff89c7daf3 [ 1779.269716][T14061] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200101cfa3 [ 1779.277803][T14061] R13: ffff88809510a638 R14: ffff88809510a0a0 R15: ffff88809ff32000 [ 1779.285984][T14061] ? __device_add_disk+0xf7e/0x1200 [ 1779.291208][T14061] ? sprintf+0xc0/0x100 [ 1779.295388][T14061] ? blk_alloc_devt+0x4b0/0x4b0 [ 1779.300441][T14061] ? __init_waitqueue_head+0x97/0x110 06:08:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x400300) [ 1779.305822][T14061] ? pm_runtime_init+0x2cf/0x3b0 [ 1779.310777][T14061] ? lockdep_init_map_waits+0x26a/0x890 [ 1779.316870][T14061] loop_add+0x616/0x8b0 [ 1779.321148][T14061] loop_control_ioctl+0x16c/0x480 [ 1779.326533][T14061] ? loop_lookup+0x1d0/0x1d0 [ 1779.331145][T14061] ? loop_lookup+0x1d0/0x1d0 [ 1779.335745][T14061] ksys_ioctl+0x11a/0x180 [ 1779.340195][T14061] __x64_sys_ioctl+0x6f/0xb0 [ 1779.344795][T14061] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1779.349928][T14061] do_syscall_64+0x60/0xe0 [ 1779.354360][T14061] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1779.360268][T14061] RIP: 0033:0x45c369 [ 1779.364171][T14061] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1779.383793][T14061] RSP: 002b:00007ffb591fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1779.392591][T14061] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 1779.400570][T14061] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1779.408553][T14061] RBP: 00007ffb591fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1779.416793][T14061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 1779.424767][T14061] R13: 00007ffcd680a66f R14: 00007ffb591fd9c0 R15: 000000000078bf0c [ 1779.434464][T14061] Kernel Offset: disabled [ 1779.438981][T14061] Rebooting in 86400 seconds..