454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbb3bbbbbbaaaaaaaaaaaa8101000086dd60163dac00183204fe80eaffffff000000000000000000000100"/58], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0xd0262, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendfile(r2, r0, 0x0, 0xa) [ 809.153847] FAULT_INJECTION: forcing a failure. [ 809.153847] name failslab, interval 1, probability 0, space 0, times 0 [ 809.195875] CPU: 0 PID: 11051 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 809.203797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.213364] Call Trace: [ 809.215963] dump_stack+0x1b2/0x283 [ 809.219606] should_fail.cold+0x10a/0x154 [ 809.223822] should_failslab+0xd6/0x130 [ 809.227803] kmem_cache_alloc_node_trace+0x25a/0x400 [ 809.232916] __kmalloc_node_track_caller+0x38/0x70 [ 809.237854] __kmalloc_reserve.isra.0+0x35/0xd0 [ 809.242536] __alloc_skb+0xca/0x4c0 [ 809.246177] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 809.251016] ? lock_downgrade+0x6e0/0x6e0 [ 809.255160] alloc_skb_with_frags+0x85/0x500 [ 809.259569] ? check_preemption_disabled+0x35/0x240 [ 809.264594] ? perf_trace_lock+0x109/0x4b0 [ 809.268838] sock_alloc_send_pskb+0x57b/0x6d0 [ 809.273357] ? sock_kzfree_s+0x50/0x50 [ 809.277255] ? _copy_from_iter_full+0x1c7/0x680 [ 809.281931] ? __lock_acquire+0x655/0x42a0 [ 809.286178] tun_get_user+0x5d9/0x4190 [ 809.290074] ? tun_rx_batched.isra.0+0x740/0x740 [ 809.294830] ? perf_trace_lock+0x109/0x4b0 [ 809.299091] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 809.304028] ? HARDIRQ_verbose+0x10/0x10 [ 809.308106] ? __tun_get+0x11c/0x220 [ 809.311829] ? lock_acquire+0x170/0x3f0 [ 809.315804] ? lock_downgrade+0x6e0/0x6e0 [ 809.319969] tun_chr_write_iter+0xcf/0x180 [ 809.324206] __vfs_write+0x44e/0x630 [ 809.327920] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 809.333153] ? kernel_read+0x110/0x110 [ 809.337057] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 809.342186] __kernel_write+0xf5/0x330 [ 809.346083] write_pipe_buf+0x143/0x1b0 [ 809.350058] ? default_file_splice_read+0x870/0x870 [ 809.355077] ? __put_page+0xb9/0x2f0 [ 809.358794] ? anon_pipe_buf_release+0x237/0x2e0 [ 809.363557] __splice_from_pipe+0x332/0x740 [ 809.367888] ? default_file_splice_read+0x870/0x870 [ 809.372909] ? default_file_splice_read+0x870/0x870 [ 809.378053] splice_from_pipe+0xc6/0x120 [ 809.382126] ? splice_shrink_spd+0xb0/0xb0 [ 809.386372] ? __inode_security_revalidate+0xcf/0x120 [ 809.391574] ? security_file_permission+0x82/0x1e0 [ 809.396526] default_file_splice_write+0x37/0x80 [ 809.401290] ? generic_splice_sendpage+0x40/0x40 [ 809.406080] SyS_splice+0xca0/0x1230 [ 809.409810] ? SyS_write+0x14d/0x210 [ 809.413526] ? compat_SyS_vmsplice+0x150/0x150 [ 809.418111] ? SyS_clock_settime+0x1a0/0x1a0 [ 809.422650] ? do_syscall_64+0x4c/0x640 [ 809.426750] ? compat_SyS_vmsplice+0x150/0x150 [ 809.431340] do_syscall_64+0x1d5/0x640 [ 809.435243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 809.440441] RIP: 0033:0x45c1d9 [ 809.443748] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 809.451470] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 809.458746] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 809.466019] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 809.473311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 809.480584] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000000)=0xfffffffa) sendfile(r0, r0, 0x0, 0x10000000) 15:42:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) fcntl$addseals(r1, 0x409, 0x0) sendfile(r0, r0, 0x0, 0x10000000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) 15:42:16 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESHEX=r7, @ANYRES16=r6, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT=r5, @ANYRESHEX=r4], 0x1}, 0x8, 0x0, 0x0, 0x4}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x44080}, 0x1) splice(r0, 0x0, r2, 0x0, 0x4, 0xd) 15:42:16 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64=r1], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0xc]}) r4 = dup(r3) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x83b, 0x68880, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x63, 0x1000000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) read$FUSE(r8, &(0x7f0000003140), 0x5e3) write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000140)={0xa, {0x4, 0x9, 0x80}}, 0xa) timerfd_create(0x0, 0x41000) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x8000, 0x5, 0x8001}) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) write$6lowpan_control(r6, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 15:42:16 executing program 0 (fault-call:12 fault-nth:24): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003140), 0x5e3) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x430200, 0x1) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000040)) 15:42:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x3ff) [ 810.125081] FAULT_INJECTION: forcing a failure. [ 810.125081] name failslab, interval 1, probability 0, space 0, times 0 [ 810.163703] CPU: 1 PID: 11098 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 810.171622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.180984] Call Trace: [ 810.183594] dump_stack+0x1b2/0x283 [ 810.187243] should_fail.cold+0x10a/0x154 [ 810.191407] should_failslab+0xd6/0x130 [ 810.195409] kmem_cache_alloc_node+0x25f/0x400 [ 810.200008] __alloc_skb+0x9a/0x4c0 [ 810.203649] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 810.208503] ? lock_downgrade+0x6e0/0x6e0 [ 810.212664] alloc_skb_with_frags+0x85/0x500 [ 810.217078] ? check_preemption_disabled+0x35/0x240 [ 810.222357] ? perf_trace_lock+0x109/0x4b0 [ 810.226607] sock_alloc_send_pskb+0x57b/0x6d0 [ 810.231122] ? sock_kzfree_s+0x50/0x50 [ 810.235019] ? _copy_from_iter_full+0x1c7/0x680 [ 810.239707] ? __lock_acquire+0x655/0x42a0 [ 810.243948] tun_get_user+0x5d9/0x4190 [ 810.247848] ? tun_rx_batched.isra.0+0x740/0x740 [ 810.252602] ? perf_trace_lock+0x109/0x4b0 [ 810.256840] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 810.261774] ? HARDIRQ_verbose+0x10/0x10 [ 810.265841] ? __tun_get+0x11c/0x220 [ 810.269570] ? lock_acquire+0x170/0x3f0 [ 810.273544] ? lock_downgrade+0x6e0/0x6e0 [ 810.277713] tun_chr_write_iter+0xcf/0x180 [ 810.281952] __vfs_write+0x44e/0x630 [ 810.285667] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 810.290768] ? kernel_read+0x110/0x110 [ 810.294767] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 810.299888] __kernel_write+0xf5/0x330 [ 810.303783] write_pipe_buf+0x143/0x1b0 [ 810.307762] ? default_file_splice_read+0x870/0x870 [ 810.312777] ? __put_page+0xb9/0x2f0 [ 810.316496] ? anon_pipe_buf_release+0x237/0x2e0 [ 810.321257] __splice_from_pipe+0x332/0x740 [ 810.325598] ? default_file_splice_read+0x870/0x870 [ 810.330620] ? default_file_splice_read+0x870/0x870 [ 810.335636] splice_from_pipe+0xc6/0x120 [ 810.339701] ? splice_shrink_spd+0xb0/0xb0 [ 810.343938] ? __inode_security_revalidate+0xcf/0x120 [ 810.349139] ? security_file_permission+0x82/0x1e0 [ 810.354077] default_file_splice_write+0x37/0x80 [ 810.358842] ? generic_splice_sendpage+0x40/0x40 [ 810.363604] SyS_splice+0xca0/0x1230 [ 810.367331] ? SyS_write+0x14d/0x210 [ 810.371049] ? compat_SyS_vmsplice+0x150/0x150 [ 810.375632] ? SyS_clock_settime+0x1a0/0x1a0 [ 810.380044] ? do_syscall_64+0x4c/0x640 [ 810.384076] ? compat_SyS_vmsplice+0x150/0x150 [ 810.388669] do_syscall_64+0x1d5/0x640 [ 810.392584] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 810.397775] RIP: 0033:0x45c1d9 [ 810.401136] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 810.408844] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 810.416119] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.423376] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 810.430637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 810.437894] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:17 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) r2 = socket(0x25, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r4, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, [], 0x2e}, 0x400}}, 0x4, 0x400, 0x8, 0x5, 0x31, 0x8, 0x1}, &(0x7f0000000140)=0x9c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r5 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev\x00') sendfile(r5, r5, 0x0, 0x10000000) 15:42:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r1, r1, 0x0, 0x10000000) 15:42:17 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x41) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x28001) write$binfmt_elf32(r4, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x81, 0x9, 0x0, 0x1ff, 0x3, 0x6, 0x2, 0x12, 0x38, 0x8d, 0xffffff81, 0x9, 0x20, 0x2, 0x3, 0x401, 0x4}, [{0x2, 0x7, 0x3, 0x9, 0x4, 0x0, 0x2, 0x8}], "b52517159b4f05ced595fb196c2ce0b0748ed3edea2dc244", [[], [], [], [], [], [], []]}, 0x770) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(r3, r5, 0x0, 0x100000006) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:17 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)={0x0, 0x0, 0xcaf5, 0x7}) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1}, 0x8, 0x0, 0x0, 0x1c10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xfffffffffffffffe, 0x4) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L+', 0x5}, 0x16, 0x1) 15:42:17 executing program 3: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x402, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000040)=0xbb42) socket$isdn_base(0x22, 0x3, 0x0) 15:42:17 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendfile(r1, r0, 0x0, 0xfffffffffffff439) 15:42:17 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='attr/current\x00') sendfile(r2, r2, 0x0, 0x10000000) 15:42:17 executing program 0 (fault-call:12 fault-nth:25): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x128, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29a6}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x67, 0x3, "7ea459e0408a739d8f7fb5a7bc2f999756b37c0d80631785d13108a589f7cddfff53c138392e5463d6fe664be1eda0ac6db3101a8d1462124e13433f7a84c5ce0818e9f62b47829bd7a73b12a175e50767fcdcf8d09ada27d2e60d919001ddd8b19583"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000104010300000000000000000a00010105000100010000001df37c5c2132a9900b0a91d700ff0201cc80b9e52a5815dfc249f099cce1c10400d9d770f73b867f3d290203ca010073391777c37791886fc6ff6ab39a3ae6ce68b1d737613efceca040b06816c104fb4c86d93a2e4132d20e542322f909666cf5fe746e4b534962a18523612cc14535e60afe967e00"], 0x6c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x11, 0x4) 15:42:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) sendfile(r0, r0, 0x0, 0x10000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x30082, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x113000, 0x0) getsockname$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x20) [ 811.023791] FAULT_INJECTION: forcing a failure. [ 811.023791] name failslab, interval 1, probability 0, space 0, times 0 [ 811.058125] CPU: 1 PID: 11136 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 15:42:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0x5, "05190283ae665811d9bec3e03217fbf84e74edaae1f35f8267fec8b81817b0f1", 0x0, 0x5, 0x800, 0x8, 0x1}) setsockopt$inet_group_source_req(r0, 0x0, 0xef75521ff3c3f90b, &(0x7f0000000200)={0x10000, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) sendfile(r0, r0, 0x0, 0x10000000) [ 811.066043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.075403] Call Trace: [ 811.078007] dump_stack+0x1b2/0x283 [ 811.081650] should_fail.cold+0x10a/0x154 [ 811.085816] should_failslab+0xd6/0x130 [ 811.089798] kmem_cache_alloc_node_trace+0x25a/0x400 [ 811.095023] __kmalloc_node_track_caller+0x38/0x70 [ 811.099956] __kmalloc_reserve.isra.0+0x35/0xd0 [ 811.104630] __alloc_skb+0xca/0x4c0 [ 811.108265] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 811.113109] ? lock_downgrade+0x6e0/0x6e0 [ 811.117262] alloc_skb_with_frags+0x85/0x500 [ 811.121675] ? check_preemption_disabled+0x35/0x240 [ 811.126697] ? perf_trace_lock+0x109/0x4b0 [ 811.130935] sock_alloc_send_pskb+0x57b/0x6d0 [ 811.135444] ? sock_kzfree_s+0x50/0x50 [ 811.139445] ? _copy_from_iter_full+0x1c7/0x680 [ 811.144120] ? __lock_acquire+0x655/0x42a0 [ 811.148364] tun_get_user+0x5d9/0x4190 [ 811.152265] ? tun_rx_batched.isra.0+0x740/0x740 [ 811.157129] ? perf_trace_lock+0x109/0x4b0 [ 811.161378] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 811.166314] ? HARDIRQ_verbose+0x10/0x10 [ 811.170382] ? __tun_get+0x11c/0x220 [ 811.174113] ? lock_acquire+0x170/0x3f0 [ 811.178096] ? lock_downgrade+0x6e0/0x6e0 [ 811.182260] tun_chr_write_iter+0xcf/0x180 [ 811.186507] __vfs_write+0x44e/0x630 [ 811.190227] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 811.195332] ? kernel_read+0x110/0x110 [ 811.199312] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 811.204529] __kernel_write+0xf5/0x330 [ 811.208428] write_pipe_buf+0x143/0x1b0 [ 811.212411] ? default_file_splice_read+0x870/0x870 [ 811.217430] ? __put_page+0xb9/0x2f0 [ 811.221146] ? anon_pipe_buf_release+0x237/0x2e0 [ 811.225911] __splice_from_pipe+0x332/0x740 [ 811.230242] ? default_file_splice_read+0x870/0x870 [ 811.235263] ? default_file_splice_read+0x870/0x870 [ 811.240279] splice_from_pipe+0xc6/0x120 [ 811.244345] ? splice_shrink_spd+0xb0/0xb0 [ 811.248580] ? __inode_security_revalidate+0xcf/0x120 [ 811.253790] ? security_file_permission+0x82/0x1e0 [ 811.258728] default_file_splice_write+0x37/0x80 [ 811.263499] ? generic_splice_sendpage+0x40/0x40 [ 811.268263] SyS_splice+0xca0/0x1230 15:42:18 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0xfffffffffffffff9, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000200)={0x3, r7}) r8 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = dup(r8) read$FUSE(r9, &(0x7f0000003140), 0x5e3) renameat2(r4, &(0x7f0000000040)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00', 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 811.271994] ? SyS_write+0x14d/0x210 [ 811.275713] ? compat_SyS_vmsplice+0x150/0x150 [ 811.280298] ? SyS_clock_settime+0x1a0/0x1a0 [ 811.284711] ? do_syscall_64+0x4c/0x640 [ 811.288690] ? compat_SyS_vmsplice+0x150/0x150 [ 811.293278] do_syscall_64+0x1d5/0x640 [ 811.297181] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 811.302376] RIP: 0033:0x45c1d9 [ 811.305565] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 811.313276] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 811.320649] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 811.327930] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 811.335203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 811.342485] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:18 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000000007e00000065e8273302c0060120010000000000000000000000000000ff02000000000000000000000000000116007f116700000016060436f9"], 0x2f2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r1, 0x0, 0x84ffe1, 0x0) 15:42:18 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61701b781d24000005000400000000000900020073797a3000000000240007800c00028008000140000000000c000180082845a4400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000001c0)={0x1, @sliced={0x1, [0x6, 0x2, 0x1, 0xff, 0x6, 0x8, 0x1, 0x1ff, 0x9, 0x9, 0x1, 0x89c7, 0x3, 0x3, 0xf8b, 0x5, 0x40, 0xf5, 0x9, 0x4, 0x8, 0x4, 0xc0, 0x3, 0xbc52, 0x77, 0x5, 0x0, 0x3, 0x4, 0x9, 0xff, 0x80, 0x3, 0x5, 0x0, 0x1, 0x7ff, 0x400, 0x4, 0x9, 0xfffd, 0xfffb, 0x4, 0x0, 0x738, 0x1ff, 0x5], 0x9}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:18 executing program 0 (fault-call:12 fault-nth:26): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 811.994525] FAULT_INJECTION: forcing a failure. [ 811.994525] name failslab, interval 1, probability 0, space 0, times 0 [ 812.025204] CPU: 0 PID: 11162 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 812.033129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.042489] Call Trace: [ 812.045089] dump_stack+0x1b2/0x283 [ 812.048730] should_fail.cold+0x10a/0x154 [ 812.052893] should_failslab+0xd6/0x130 [ 812.056877] kmem_cache_alloc_node+0x25f/0x400 [ 812.061470] __alloc_skb+0x9a/0x4c0 [ 812.065103] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 812.069958] ? lock_downgrade+0x6e0/0x6e0 [ 812.074112] alloc_skb_with_frags+0x85/0x500 [ 812.078522] ? check_preemption_disabled+0x35/0x240 [ 812.083547] ? perf_trace_lock+0x109/0x4b0 [ 812.087793] sock_alloc_send_pskb+0x57b/0x6d0 [ 812.092306] ? sock_kzfree_s+0x50/0x50 [ 812.096204] ? _copy_from_iter_full+0x1c7/0x680 [ 812.100881] ? __lock_acquire+0x655/0x42a0 [ 812.106339] tun_get_user+0x5d9/0x4190 [ 812.110242] ? tun_rx_batched.isra.0+0x740/0x740 [ 812.115004] ? perf_trace_lock+0x109/0x4b0 [ 812.119256] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 812.124190] ? HARDIRQ_verbose+0x10/0x10 [ 812.128258] ? __tun_get+0x11c/0x220 [ 812.131978] ? lock_acquire+0x170/0x3f0 [ 812.135967] ? lock_downgrade+0x6e0/0x6e0 [ 812.140127] tun_chr_write_iter+0xcf/0x180 [ 812.144889] __vfs_write+0x44e/0x630 [ 812.148613] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 812.153722] ? kernel_read+0x110/0x110 [ 812.157624] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 812.163802] __kernel_write+0xf5/0x330 [ 812.167705] write_pipe_buf+0x143/0x1b0 [ 812.171691] ? default_file_splice_read+0x870/0x870 [ 812.176713] ? __put_page+0xb9/0x2f0 [ 812.180429] ? anon_pipe_buf_release+0x237/0x2e0 [ 812.185187] __splice_from_pipe+0x332/0x740 [ 812.189517] ? default_file_splice_read+0x870/0x870 [ 812.194653] ? default_file_splice_read+0x870/0x870 [ 812.199677] splice_from_pipe+0xc6/0x120 [ 812.203746] ? splice_shrink_spd+0xb0/0xb0 [ 812.207988] ? __inode_security_revalidate+0xcf/0x120 [ 812.213185] ? security_file_permission+0x82/0x1e0 [ 812.218123] default_file_splice_write+0x37/0x80 [ 812.222880] ? generic_splice_sendpage+0x40/0x40 [ 812.227635] SyS_splice+0xca0/0x1230 [ 812.231357] ? SyS_write+0x14d/0x210 [ 812.235091] ? compat_SyS_vmsplice+0x150/0x150 [ 812.239673] ? SyS_clock_settime+0x1a0/0x1a0 [ 812.244080] ? do_syscall_64+0x4c/0x640 [ 812.248142] ? compat_SyS_vmsplice+0x150/0x150 [ 812.252731] do_syscall_64+0x1d5/0x640 [ 812.256631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 812.261822] RIP: 0033:0x45c1d9 [ 812.265010] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 812.272835] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 812.280108] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 812.287904] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 15:42:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x80000001}, 0x10, 0x0, r3}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @jmp={0x5, 0x1, 0x0, 0x7, 0x7, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x3a}, @generic={0x8, 0x8, 0x2, 0x9acd, 0x1ff}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x80000001, 0x6}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x1c, 0x1ff}, 0x10, 0x0, r5}, 0x78) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) read$FUSE(r8, &(0x7f0000003140), 0x5e3) ioctl$RTC_PLL_GET(r8, 0x80207011, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaf57a000000c9aa70f1f00000000086dd601648a6f10b9bf46eb600000000000000000000000000aaff02000000000000000000"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:19 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003140), 0x5e3) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000040)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_SREGS(r6, 0x8138ae83, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 812.295285] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 812.302564] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:19 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) semget(0x2, 0x3, 0xa4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:19 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_ENDIAN(0x14, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000130000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x225ce332) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) r7 = dup3(r6, r4, 0x80000) ioctl$UI_SET_KEYBIT(r7, 0x40045565, 0x27d) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 15:42:19 executing program 0 (fault-call:12 fault-nth:27): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 812.824472] FAULT_INJECTION: forcing a failure. [ 812.824472] name failslab, interval 1, probability 0, space 0, times 0 [ 812.844684] CPU: 1 PID: 11192 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 812.852606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.861974] Call Trace: [ 812.864587] dump_stack+0x1b2/0x283 [ 812.868236] should_fail.cold+0x10a/0x154 [ 812.872408] should_failslab+0xd6/0x130 [ 812.876401] kmem_cache_alloc_node_trace+0x25a/0x400 [ 812.881532] __kmalloc_node_track_caller+0x38/0x70 [ 812.886478] __kmalloc_reserve.isra.0+0x35/0xd0 [ 812.891165] __alloc_skb+0xca/0x4c0 [ 812.894808] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 812.899660] ? lock_downgrade+0x6e0/0x6e0 [ 812.903818] alloc_skb_with_frags+0x85/0x500 [ 812.908236] ? check_preemption_disabled+0x35/0x240 [ 812.913263] ? perf_trace_lock+0x109/0x4b0 [ 812.917511] sock_alloc_send_pskb+0x57b/0x6d0 [ 812.922028] ? sock_kzfree_s+0x50/0x50 [ 812.925921] ? _copy_from_iter_full+0x1c7/0x680 [ 812.930598] ? __lock_acquire+0x655/0x42a0 [ 812.934841] tun_get_user+0x5d9/0x4190 [ 812.938753] ? tun_rx_batched.isra.0+0x740/0x740 [ 812.943518] ? perf_trace_lock+0x109/0x4b0 [ 812.947766] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 812.952709] ? HARDIRQ_verbose+0x10/0x10 [ 812.956781] ? __tun_get+0x11c/0x220 [ 812.960502] ? lock_acquire+0x170/0x3f0 [ 812.964482] ? lock_downgrade+0x6e0/0x6e0 [ 812.968648] tun_chr_write_iter+0xcf/0x180 [ 812.972893] __vfs_write+0x44e/0x630 [ 812.976616] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 812.981728] ? kernel_read+0x110/0x110 [ 812.985622] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 812.990789] __kernel_write+0xf5/0x330 [ 812.994688] write_pipe_buf+0x143/0x1b0 [ 812.998673] ? default_file_splice_read+0x870/0x870 [ 813.003693] ? __put_page+0xb9/0x2f0 [ 813.007414] ? anon_pipe_buf_release+0x237/0x2e0 [ 813.012184] __splice_from_pipe+0x332/0x740 [ 813.016524] ? default_file_splice_read+0x870/0x870 [ 813.021556] ? default_file_splice_read+0x870/0x870 [ 813.026583] splice_from_pipe+0xc6/0x120 [ 813.030658] ? splice_shrink_spd+0xb0/0xb0 [ 813.034902] ? __inode_security_revalidate+0xcf/0x120 [ 813.040109] ? security_file_permission+0x82/0x1e0 [ 813.045053] default_file_splice_write+0x37/0x80 [ 813.049825] ? generic_splice_sendpage+0x40/0x40 [ 813.054595] SyS_splice+0xca0/0x1230 [ 813.058330] ? SyS_write+0x14d/0x210 [ 813.062059] ? compat_SyS_vmsplice+0x150/0x150 [ 813.066645] ? SyS_clock_settime+0x1a0/0x1a0 [ 813.071065] ? do_syscall_64+0x4c/0x640 [ 813.075047] ? compat_SyS_vmsplice+0x150/0x150 [ 813.079643] do_syscall_64+0x1d5/0x640 [ 813.083548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 813.088741] RIP: 0033:0x45c1d9 [ 813.091932] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 813.099648] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 813.106926] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 813.114318] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 15:42:20 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18100, 0x0) [ 813.121603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 813.128884] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:20 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000002c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x400, 0x1017, 0x1}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400fdffffff0800020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000000005050005000f89a078549b9aaa06"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000200)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80) r5 = dup(0xffffffffffffffff) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f00000000c0)={0xd, 0xa}) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:20 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$ax25(r4, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @default, @netrom, @default, @bcast, @remote, @default]}, &(0x7f0000000040)=0x48, 0x800) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) r1 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x4c4) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5528fe4412", @ANYRES16=r2, @ANYBLOB="100025bd7000ffdbdf250300000074000c8044000b8008000a0035b7000008000a0039b7000008000a00194a0000080009008bb7cd6b080009003bb82b0308000a0040e1000008000a0011cb000008000a008c3a00002c000b800800090065bfd03e08000900ec12c37a08000a00d98c00000800090036da177708000a00c6fc0000080002000100000008000100ffffffff"], 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x50) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x260, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ac95ea8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7468d56}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ecb1df6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e25385c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96b3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacba}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4020d1d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2841}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xafa8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39475886}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e702b16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1730afb8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd508}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7936f87d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x253b1215}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21e6cbe5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x235b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ff}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25b77566}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57fdd662}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57f4455f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x777b1f2c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x169dc0e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6377}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4eca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a640eba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f351baf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x341d93e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdf0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdc0f0c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67a2b43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63988f0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11b57ed7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ddb89cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fe73f32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c26}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x386b872d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72a49199}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1282b89d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3883831d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1277}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcfd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x121c}]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0xc1}, 0x800) 15:42:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0)=0x5ce4099c, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'macsec0\x00', 0x200}) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) fchmodat(r4, &(0x7f0000000280)='./file0\x00', 0x40) sendfile(r0, r0, 0x0, 0x10000000) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000200)={0x2, 0x45, 0x9}) 15:42:20 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000) 15:42:20 executing program 0 (fault-call:12 fault-nth:28): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udplite6\x00') sendfile(r0, r0, 0x0, 0x10000000) 15:42:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x2, 0x400, 0x3ff, 0x6a, 0x19, "b766ed92d89abcc4"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200040, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x100) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000140)={0x1, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$fb(r5, &(0x7f0000000180)="7f82131fe0f61b1be80d4cfad3aad234054d250e122016d98cc1092067a8f2d72ac867a0fbbaf7038e4181e756878132a890130d8c4983b9d5d2b58c1fd28159d561657e26959042319aee234b83bb8c4396b2ef50fddf01230bdc99cff18636c4aad805f583a647bd2176f23bc19a133d48aac3862d637341c4ab4344d7312b72908fd632a9dc3e3862f9b031e8d4f63ec2c50a8c80cc3504cc1238e93baa12928fb1a58015", 0xa6) sendfile(0xffffffffffffffff, r2, 0x0, 0x200000010002000) [ 813.778427] FAULT_INJECTION: forcing a failure. [ 813.778427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 813.791217] CPU: 0 PID: 11230 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 813.799107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.808467] Call Trace: [ 813.811067] dump_stack+0x1b2/0x283 [ 813.814706] should_fail.cold+0x10a/0x154 [ 813.818866] __alloc_pages_nodemask+0x22b/0x2730 [ 813.823624] ? kernel_text_address+0x6e/0xe0 [ 813.828038] ? __kernel_text_address+0x9/0x30 [ 813.832533] ? unwind_get_return_address+0x51/0x90 [ 813.837472] ? __lock_acquire+0x655/0x42a0 [ 813.841713] ? depot_save_stack+0x10d/0x401 [ 813.846043] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 813.850542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 813.855384] ? check_preemption_disabled+0x35/0x240 [ 813.860412] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 813.865350] ? HARDIRQ_verbose+0x10/0x10 [ 813.869421] cache_grow_begin+0x91/0x410 [ 813.873491] cache_alloc_refill+0x28c/0x360 [ 813.877826] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 813.882937] __kmalloc_node_track_caller+0x38/0x70 [ 813.887884] __kmalloc_reserve.isra.0+0x35/0xd0 [ 813.892556] __alloc_skb+0xca/0x4c0 [ 813.896186] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 813.901057] alloc_skb_with_frags+0x85/0x500 [ 813.905474] ? check_preemption_disabled+0x35/0x240 [ 813.910498] ? perf_trace_lock+0x109/0x4b0 [ 813.914745] sock_alloc_send_pskb+0x57b/0x6d0 [ 813.919268] ? sock_kzfree_s+0x50/0x50 [ 813.923162] ? _copy_from_iter_full+0x1c7/0x680 [ 813.927838] ? __lock_acquire+0x655/0x42a0 [ 813.932080] tun_get_user+0x5d9/0x4190 [ 813.935984] ? tun_rx_batched.isra.0+0x740/0x740 [ 813.940851] ? perf_trace_lock+0x109/0x4b0 [ 813.945092] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 813.950023] ? HARDIRQ_verbose+0x10/0x10 [ 813.954088] ? __tun_get+0x11c/0x220 [ 813.957829] ? lock_acquire+0x170/0x3f0 [ 813.961801] ? lock_downgrade+0x6e0/0x6e0 [ 813.965957] tun_chr_write_iter+0xcf/0x180 [ 813.970194] __vfs_write+0x44e/0x630 [ 813.973909] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 813.979028] ? kernel_read+0x110/0x110 [ 813.982916] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 813.988036] __kernel_write+0xf5/0x330 [ 813.991925] write_pipe_buf+0x143/0x1b0 [ 813.995900] ? default_file_splice_read+0x870/0x870 [ 814.000919] ? __put_page+0xb9/0x2f0 [ 814.004638] ? anon_pipe_buf_release+0x237/0x2e0 [ 814.009399] __splice_from_pipe+0x332/0x740 [ 814.013731] ? default_file_splice_read+0x870/0x870 [ 814.018757] ? default_file_splice_read+0x870/0x870 [ 814.023775] splice_from_pipe+0xc6/0x120 [ 814.027842] ? splice_shrink_spd+0xb0/0xb0 [ 814.032062] ? __inode_security_revalidate+0xcf/0x120 [ 814.037251] ? security_file_permission+0x82/0x1e0 [ 814.042176] default_file_splice_write+0x37/0x80 [ 814.046912] ? generic_splice_sendpage+0x40/0x40 [ 814.051650] SyS_splice+0xca0/0x1230 [ 814.055373] ? SyS_write+0x14d/0x210 [ 814.059088] ? compat_SyS_vmsplice+0x150/0x150 [ 814.063670] ? SyS_clock_settime+0x1a0/0x1a0 [ 814.068078] ? do_syscall_64+0x4c/0x640 [ 814.072051] ? compat_SyS_vmsplice+0x150/0x150 [ 814.076634] do_syscall_64+0x1d5/0x640 [ 814.080524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 814.085715] RIP: 0033:0x45c1d9 [ 814.088899] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 814.096602] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 814.103870] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 814.111138] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 814.118392] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 814.125641] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:21 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000000c0)={0x4, 0x10000, 0x4, 0x53, 0x20}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800004028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x14e, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, &(0x7f0000000200), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x3d6744abe2cda1ee}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x2, 0x17, 'wg0\x00', 'wg2\x00', 'wg0\x00', 'veth1_to_hsr\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x6, "8ff44f02ecb8c84e11ec18348af835b69d49985f9f6362892cd89c1b00b9", 0x1}}}}]}]}, 0x1c6) r4 = accept$ax25(r1, 0x0, &(0x7f0000000440)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = dup(r3) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000001c0)={0x4, 0x401, 0x1}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x5, 0x0) 15:42:21 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d6170eeff0005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:21 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c000180080001400000000008000640000000050500050002000000050001000628692c1f5ada78593cb0552a969e69adf0e402cac848627011"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x20010, r4, 0xc000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88282, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa8e138eb2d1ea8820e0a98886aaaaaa8101000086dd60163dac00183200fe8000000004000000000000000000aaff020000"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = socket(0x25, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r6, 0xb9, "9ce02232b2bab814e1ff90e3dc0e1edd48e44ac21bee92f74b119977bb59df34fd50fac8100b9ab5be987ff23fc3f7f4d40554940be2405a7dceb3af6ea1c4385612aa2f56d77ce41aa5a6cd383c15b7f3b92d6abea6d04f102d1b5802e443a80f8f44551ffe4ed50ba28e89a58e62b565bcda7783d142385fee8571bf9663f351c13a21371ac857963f67424e2a2ce2f357457607022f901725035516848650909b0ecd314db1eb19c4f76d2c6d0331a528b85b9a29297475"}, &(0x7f0000000000)=0xc1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r7, r7, 0x0, 0x10000000) [ 814.298551] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x404200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x88c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x6, 0x1, 0x4, 0x7f002, 0xffff, {0x0, 0xea60}, {0x5, 0xc, 0x9, 0x0, 0x6, 0x5, "e46cb9fa"}, 0x108001, 0x4, @fd=r3, 0xc85, 0x0, r5}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='schedstat\x00') ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, &(0x7f0000000180)=0x80000000) sendfile(r0, r0, 0x0, 0x10000000) 15:42:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r2) sendfile(r0, r2, 0x0, 0x10000000) 15:42:21 executing program 0 (fault-call:12 fault-nth:29): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:21 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x40, 0x0, 0x83, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fa, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000080)={0x0, 0x4, 0x0, 0xffffffff}) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000100)) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000100)={0x1}) r9 = dup(r4) read$FUSE(r9, &(0x7f0000003140), 0x5e3) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x3, 0x5, 0x0, 0x0, r9}) sendfile(r1, r10, 0x0, 0x1ff) [ 814.674335] FAULT_INJECTION: forcing a failure. [ 814.674335] name failslab, interval 1, probability 0, space 0, times 0 [ 814.691189] CPU: 0 PID: 11273 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 814.699100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.708464] Call Trace: [ 814.711068] dump_stack+0x1b2/0x283 [ 814.715153] should_fail.cold+0x10a/0x154 [ 814.719318] should_failslab+0xd6/0x130 [ 814.723305] kmem_cache_alloc_node_trace+0x25a/0x400 [ 814.728430] __kmalloc_node_track_caller+0x38/0x70 [ 814.733540] __kmalloc_reserve.isra.0+0x35/0xd0 [ 814.738215] __alloc_skb+0xca/0x4c0 [ 814.741848] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 814.746702] ? lock_downgrade+0x6e0/0x6e0 [ 814.750856] alloc_skb_with_frags+0x85/0x500 [ 814.755264] ? check_preemption_disabled+0x35/0x240 [ 814.760276] ? perf_trace_lock+0x109/0x4b0 [ 814.764505] sock_alloc_send_pskb+0x57b/0x6d0 [ 814.768995] ? sock_kzfree_s+0x50/0x50 15:42:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003140), 0x5e3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000001400020062725886004488e1c44976655f310000090001"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x41}]}, 0x24}, 0x1, 0x0, 0x0, 0x40808c0}, 0x90) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000180), 0x1) sendfile(r0, r0, 0x0, 0x10000000) [ 814.772878] ? _copy_from_iter_full+0x1c7/0x680 [ 814.777547] ? __lock_acquire+0x655/0x42a0 [ 814.781793] tun_get_user+0x5d9/0x4190 [ 814.785811] ? tun_rx_batched.isra.0+0x740/0x740 [ 814.790559] ? perf_trace_lock+0x109/0x4b0 [ 814.794780] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 814.799702] ? HARDIRQ_verbose+0x10/0x10 [ 814.803756] ? __tun_get+0x11c/0x220 [ 814.807464] ? lock_acquire+0x170/0x3f0 [ 814.811436] ? lock_downgrade+0x6e0/0x6e0 [ 814.815595] tun_chr_write_iter+0xcf/0x180 [ 814.819824] __vfs_write+0x44e/0x630 [ 814.823522] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 814.828652] ? kernel_read+0x110/0x110 [ 814.832535] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 814.837662] __kernel_write+0xf5/0x330 [ 814.841549] write_pipe_buf+0x143/0x1b0 [ 814.845523] ? default_file_splice_read+0x870/0x870 [ 814.850635] ? __put_page+0xb9/0x2f0 [ 814.854348] ? anon_pipe_buf_release+0x237/0x2e0 [ 814.859102] __splice_from_pipe+0x332/0x740 [ 814.863420] ? default_file_splice_read+0x870/0x870 [ 814.868547] ? default_file_splice_read+0x870/0x870 [ 814.873567] splice_from_pipe+0xc6/0x120 [ 814.877810] ? splice_shrink_spd+0xb0/0xb0 [ 814.882036] ? __inode_security_revalidate+0xcf/0x120 [ 814.887223] ? security_file_permission+0x82/0x1e0 [ 814.892138] default_file_splice_write+0x37/0x80 [ 814.896886] ? generic_splice_sendpage+0x40/0x40 [ 814.901642] SyS_splice+0xca0/0x1230 [ 814.905366] ? SyS_write+0x14d/0x210 [ 814.909070] ? compat_SyS_vmsplice+0x150/0x150 [ 814.913643] ? SyS_clock_settime+0x1a0/0x1a0 [ 814.918052] ? do_syscall_64+0x4c/0x640 [ 814.922019] ? compat_SyS_vmsplice+0x150/0x150 [ 814.926583] do_syscall_64+0x1d5/0x640 [ 814.930486] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 814.935967] RIP: 0033:0x45c1d9 [ 814.939147] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 814.946839] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 814.954092] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 814.961353] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 15:42:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) [ 814.968661] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 814.975914] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:22 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:22 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0010000000000000000000000e0003006269746d61703a697004001405000400000000004900020073797a3000000000240007800c000280080001400000080006400000000505000500020000000500010006"], 0x1}, 0x8, 0x0, 0x0, 0x4044004}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:22 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0x1000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3f}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x4c}}, 0x140) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3f}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x4c}}, 0x140) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="300826bd7000fddbdf250200000008000c0003000000080002000700000008000200060000003799263d0f37e82604dbf79f9b7a20ef3f4c917a45be3b74ca73a36043e60ef10c6be67e3994a88bb5fe6838e715f6cde35ba9648bd3c7df42b24d99b96a1db010a7beb0327341b5580e06ccca1dfb32bcfe79601f24a905ea961586f0af5ecb252a022f0cbf8c04f7098d1b79a52cd464be5cfdacc88d64e5a2e0be8570c4e9fb36742a972d3268faa3a6bbf29fa46f43f3958a460918b8f0014acf356bf808adc3ad35e6f12e2b591fec3a58850913"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = socket(0x25, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000100)={0x2, 0x1, {0x1, 0x2, 0x9, 0x2, 0x75}, 0xefb}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r6, 0x4f84, 0x20}, &(0x7f0000000040)=0xc) 15:42:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r0, 0x0, 0x10000000) setregid(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000880)=0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$fuseblk(&(0x7f0000000500)='/dev/loop0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x10000, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}, {@fsmagic={'fsmagic', 0x3d, 0x7cc}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r1}}, {@euid_lt={'euid<', r3}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000001400020062725886004488e1c44976655f310000090001"], 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x8c, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000080) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, r8, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1f}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x12}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000040) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000004c0)) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000400)="6fcd2be3f49bbee818cfc54634cd0dab423eee530fe0775d41fbbb5e7983a980f8b6b699c519aa8b5978ca5034bb732db81fb23b06b339a7a715b301f9a87adb329858029a99b63f381d1743d56f9835519477dde88be6e8f55ff3075bc59af5bc7931179619a8aa183dccb282a69ec91f2f62c30a65ba5ef6bcc8", 0x7b, 0x8000, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 15:42:22 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003140), 0x5e3) accept4$llc(r1, 0x0, &(0x7f0000000040), 0x800) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='attr/current\x00') r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendfile(r4, r3, 0x0, 0x10000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000080)) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x1ff, 0x8, 0xed, 0x1, 0x8]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_ro(r6, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x81, 0x122) setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85) 15:42:22 executing program 0 (fault-call:12 fault-nth:30): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1427) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x9}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) r2 = semget(0x2, 0x4, 0x0) semctl$SEM_INFO(r2, 0x4, 0x13, &(0x7f0000000180)=""/126) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ustat(0x2000000b40a, &(0x7f0000000140)) sendfile(r1, r0, 0x0, 0xffffffe) 15:42:22 executing program 3: syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003140), 0x5e3) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:vhost_device_t:s0\x00', 0x24) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x139d82d365e2573, &(0x7f0000000100)=0x1, 0x4) sendfile(r2, r2, 0x0, 0x10000000) [ 815.555300] FAULT_INJECTION: forcing a failure. [ 815.555300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 815.567131] CPU: 0 PID: 11323 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 815.575022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.584366] Call Trace: [ 815.586948] dump_stack+0x1b2/0x283 [ 815.590561] should_fail.cold+0x10a/0x154 [ 815.594716] __alloc_pages_nodemask+0x22b/0x2730 [ 815.599458] ? kernel_text_address+0x6e/0xe0 [ 815.603847] ? __kernel_text_address+0x9/0x30 [ 815.608323] ? unwind_get_return_address+0x51/0x90 [ 815.613237] ? __lock_acquire+0x655/0x42a0 [ 815.617452] ? depot_save_stack+0x10d/0x401 [ 815.621762] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 815.626239] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 815.631062] ? check_preemption_disabled+0x35/0x240 [ 815.636066] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 815.640974] ? HARDIRQ_verbose+0x10/0x10 [ 815.645022] cache_grow_begin+0x91/0x410 [ 815.649067] cache_alloc_refill+0x28c/0x360 [ 815.653373] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 815.658463] __kmalloc_node_track_caller+0x38/0x70 [ 815.663378] __kmalloc_reserve.isra.0+0x35/0xd0 [ 815.668047] __alloc_skb+0xca/0x4c0 [ 815.671659] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 815.676483] ? lock_downgrade+0x6e0/0x6e0 [ 815.680616] alloc_skb_with_frags+0x85/0x500 [ 815.685008] ? check_preemption_disabled+0x35/0x240 [ 815.690006] ? perf_trace_lock+0x109/0x4b0 [ 815.694225] sock_alloc_send_pskb+0x57b/0x6d0 [ 815.698828] ? sock_kzfree_s+0x50/0x50 [ 815.702698] ? _copy_from_iter_full+0x1c7/0x680 [ 815.707348] ? __lock_acquire+0x655/0x42a0 [ 815.711658] tun_get_user+0x5d9/0x4190 [ 815.715533] ? tun_rx_batched.isra.0+0x740/0x740 [ 815.720265] ? perf_trace_lock+0x109/0x4b0 [ 815.724483] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 815.729393] ? HARDIRQ_verbose+0x10/0x10 [ 815.733437] ? __tun_get+0x11c/0x220 [ 815.737134] ? lock_acquire+0x170/0x3f0 [ 815.741088] ? lock_downgrade+0x6e0/0x6e0 [ 815.745222] tun_chr_write_iter+0xcf/0x180 [ 815.749457] __vfs_write+0x44e/0x630 [ 815.753153] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 815.758237] ? kernel_read+0x110/0x110 [ 815.762106] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 815.767205] __kernel_write+0xf5/0x330 [ 815.771077] write_pipe_buf+0x143/0x1b0 [ 815.775035] ? default_file_splice_read+0x870/0x870 [ 815.780048] ? __put_page+0xb9/0x2f0 [ 815.783743] ? anon_pipe_buf_release+0x237/0x2e0 [ 815.788483] __splice_from_pipe+0x332/0x740 [ 815.792790] ? default_file_splice_read+0x870/0x870 [ 815.797808] ? default_file_splice_read+0x870/0x870 [ 815.802808] splice_from_pipe+0xc6/0x120 [ 815.806851] ? splice_shrink_spd+0xb0/0xb0 [ 815.811065] ? __inode_security_revalidate+0xcf/0x120 [ 815.816242] ? security_file_permission+0x82/0x1e0 [ 815.821156] default_file_splice_write+0x37/0x80 [ 815.825892] ? generic_splice_sendpage+0x40/0x40 [ 815.830628] SyS_splice+0xca0/0x1230 [ 815.834329] ? SyS_write+0x14d/0x210 [ 815.838024] ? compat_SyS_vmsplice+0x150/0x150 [ 815.842589] ? SyS_clock_settime+0x1a0/0x1a0 [ 815.846980] ? do_syscall_64+0x4c/0x640 [ 815.850934] ? compat_SyS_vmsplice+0x150/0x150 [ 815.855499] do_syscall_64+0x1d5/0x640 [ 815.859387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 815.864558] RIP: 0033:0x45c1d9 [ 815.867730] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 815.875420] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 815.882674] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 815.889925] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 815.897175] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 815.904424] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:22 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x225ce332) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000001c0)=0x480) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) 15:42:22 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x0, 0xa0363159, 0x2, @stepwise={0x0, 0xffff, 0xffff, 0xfffffb93, 0x2, 0xfffff800}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000180)={0x800, 0x280, 0x780, 0x20, 0x9, 0x3, 0x20, 0x0, {0xc7b, 0x627d}, {0x6, 0x72a, 0x1}, {0x8001, 0x60}, {0x3, 0x2, 0x1}, 0x2, 0x10, 0x2, 0x8, 0x0, 0x7, 0x0, 0x1ff, 0x1, 0x2, 0x1b8d, 0x4, 0x20, 0x200, 0x0, 0x6}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:23 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003140), 0x5e3) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000180)={{0x7, 0x5, 0x7f, 0x80000000, 'syz0\x00'}, 0x2, 0x20000000, 0x2, r3, 0xa, 0x8c6, 'syz1\x00', &(0x7f0000000100)=['\x00', 'attr/current\x00', 'attr/current\x00', 'attr/current\x00', '$\\}^[\x00', '/dev/loop#\x00', 'attr/current\x00', 'attr/current\x00', '/dev/loop#\x00', '/dev/loop#\x00'], 0x69, [], [0x1ff, 0x4, 0x3, 0x101]}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendfile(r4, r0, 0x0, 0x10000000) move_pages(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000300)=[0x5, 0x7df58c1e], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) 15:42:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000140)={0x4, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}]}) sendfile(r0, r0, 0x0, 0x10000000) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xc4, 0x1}) 15:42:23 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x41) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x28001) write$binfmt_elf32(r4, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x81, 0x9, 0x0, 0x1ff, 0x3, 0x6, 0x2, 0x12, 0x38, 0x8d, 0xffffff81, 0x9, 0x20, 0x2, 0x3, 0x401, 0x4}, [{0x2, 0x7, 0x3, 0x9, 0x4, 0x0, 0x2, 0x8}], "b52517159b4f05ced595fb196c2ce0b0748ed3edea2dc244", [[], [], [], [], [], [], []]}, 0x770) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(r3, r5, 0x0, 0x100000006) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:23 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x2, 0x3}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000000053fd0000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024000705000000e2c424f30005000000a4d5ef3ca02a800b7c7fd23915e88948e9b51a584b056b0e291bf0e16b647811ad26cc32", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="34e5ffff2b00270d00000000d1dde4ed85d2b5de0000000000000000e32d8a4c0b5d90c1d18e266fa87c94242331bfd6d3ba86a837eb428385f9cb100a07000000d2cb16c5ee9ce0030ac041f6df79392eef049273", @ANYRES32, @ANYRES64=r5, @ANYBLOB="ca1e3011741629948e6e86a99eb7c7e2687fa1c3153f4f0841580e3888705bb7", @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x34}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000bc0)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000001b80)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000000740)=ANY=[@ANYBLOB="001c", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf250f00000014000180080003010200000008000300030000003c00018008000100", @ANYRES32, @ANYBLOB="080003000000000008000300000000000800030000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="80000180140002006e657464657673696d300000000000001400020062726964676530000000000000000000140002007866726d3000000000000000000000001400020076657468315f766972745f776966690008000100", @ANYRESDEC=r8, @ANYBLOB="0800a700", @ANYRES32, @ANYBLOB="14000200627269a8003df6736c6176655f3100000859a9fed4000000040001801c00018008000310000000000800010043469441b8f0c0e0b26eafe35b2dae51c6d4ac780093795a539d97536d2367bed267b55016c0be349fe3f0520b5ef5ccea308189edd186cf51225abb8d04c781353f864fee0fbfc77ec3a8a77b1ce3b09de1f90a8ed7b67c892ac86657ebf959ebe3e0f2", @ANYRES32=r7, @ANYBLOB="0800030002000000"], 0x104}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) [ 816.193227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:23 executing program 0 (fault-call:12 fault-nth:31): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 816.412929] FAULT_INJECTION: forcing a failure. [ 816.412929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 816.424843] CPU: 1 PID: 11360 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 816.432713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.442065] Call Trace: [ 816.444656] dump_stack+0x1b2/0x283 [ 816.448277] should_fail.cold+0x10a/0x154 [ 816.452414] __alloc_pages_nodemask+0x22b/0x2730 [ 816.457273] ? kernel_text_address+0x6e/0xe0 [ 816.461684] ? __kernel_text_address+0x9/0x30 [ 816.466183] ? unwind_get_return_address+0x51/0x90 [ 816.471115] ? __lock_acquire+0x655/0x42a0 [ 816.475341] ? depot_save_stack+0x10d/0x401 [ 816.479673] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 816.484170] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 816.489014] ? check_preemption_disabled+0x35/0x240 [ 816.494034] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 816.498962] ? HARDIRQ_verbose+0x10/0x10 [ 816.503033] cache_grow_begin+0x91/0x410 [ 816.507100] cache_alloc_refill+0x28c/0x360 [ 816.511430] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 816.516538] __kmalloc_node_track_caller+0x38/0x70 [ 816.521515] __kmalloc_reserve.isra.0+0x35/0xd0 [ 816.526200] __alloc_skb+0xca/0x4c0 [ 816.529833] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 816.534672] ? lock_downgrade+0x6e0/0x6e0 [ 816.538836] alloc_skb_with_frags+0x85/0x500 [ 816.543506] ? check_preemption_disabled+0x35/0x240 [ 816.548543] ? perf_trace_lock+0x109/0x4b0 [ 816.552971] sock_alloc_send_pskb+0x57b/0x6d0 [ 816.557486] ? sock_kzfree_s+0x50/0x50 [ 816.561376] ? _copy_from_iter_full+0x1c7/0x680 [ 816.566042] ? __lock_acquire+0x655/0x42a0 [ 816.570262] tun_get_user+0x5d9/0x4190 [ 816.574152] ? tun_rx_batched.isra.0+0x740/0x740 [ 816.578907] ? perf_trace_lock+0x109/0x4b0 [ 816.583152] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 816.588185] ? HARDIRQ_verbose+0x10/0x10 [ 816.592232] ? __tun_get+0x11c/0x220 [ 816.595943] ? lock_acquire+0x170/0x3f0 [ 816.599919] ? lock_downgrade+0x6e0/0x6e0 [ 816.604079] tun_chr_write_iter+0xcf/0x180 [ 816.608307] __vfs_write+0x44e/0x630 [ 816.612016] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 816.617122] ? kernel_read+0x110/0x110 [ 816.621013] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 816.626137] __kernel_write+0xf5/0x330 [ 816.630013] write_pipe_buf+0x143/0x1b0 [ 816.633973] ? default_file_splice_read+0x870/0x870 [ 816.638981] ? __put_page+0xb9/0x2f0 [ 816.642701] ? anon_pipe_buf_release+0x237/0x2e0 [ 816.647462] __splice_from_pipe+0x332/0x740 [ 816.651785] ? default_file_splice_read+0x870/0x870 [ 816.656805] ? default_file_splice_read+0x870/0x870 [ 816.661936] splice_from_pipe+0xc6/0x120 [ 816.665995] ? splice_shrink_spd+0xb0/0xb0 [ 816.670220] ? __inode_security_revalidate+0xcf/0x120 [ 816.675419] ? security_file_permission+0x82/0x1e0 [ 816.680351] default_file_splice_write+0x37/0x80 [ 816.685113] ? generic_splice_sendpage+0x40/0x40 [ 816.689872] SyS_splice+0xca0/0x1230 [ 816.693596] ? SyS_write+0x14d/0x210 [ 816.697305] ? compat_SyS_vmsplice+0x150/0x150 [ 816.701894] ? SyS_clock_settime+0x1a0/0x1a0 [ 816.706301] ? do_syscall_64+0x4c/0x640 [ 816.710269] ? compat_SyS_vmsplice+0x150/0x150 [ 816.714846] do_syscall_64+0x1d5/0x640 [ 816.718749] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 816.723948] RIP: 0033:0x45c1d9 [ 816.727128] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 816.734818] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 816.742076] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 816.749338] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 816.756606] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f 15:42:23 executing program 1: clock_adjtime(0x3, &(0x7f00000001c0)={0x7fff, 0x1000, 0x4, 0x7, 0x8001, 0xc00000000000000, 0x0, 0x2, 0x6c, 0x3a3e, 0x5, 0x2, 0x2, 0x101, 0x9, 0xffffffffffffff5f, 0x3, 0x1ff, 0x305a000000000, 0xc, 0x7fff, 0x7ff, 0x1, 0x3, 0x0, 0x1}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x84, 0x6, 0x2, 0xee, 0x0, [@mcast1, @private2, @ipv4={[], [], @remote}]}, 0x38) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000bf69ac58a676051900000008000640000000050500050002"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 816.763960] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000180)='security.ima\x00', &(0x7f00000002c0)=@v2={0x3, 0x2, 0x7, 0x1, 0x98, "0bb4e389acd21f3f8265c55e39a02da5114603aafb2341ea3bdfbeaea4631972c1b41ed02282455f6e42bd098c0013623560363012f6e269f66e785e0a3dc781ad63ab819f31941017854f360af560f96e4b4cda7667b990be3be3d2268f5f36a60c48f7bea5259193624a2600fe0abd7a3a1553f17f142ee7529cf58012f3faac4f04db659d0d7cd8c2b22897b5520cad2b857de57574d8"}, 0xa1, 0x3) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) 15:42:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0xa, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedb5f271500000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff010000040000000800010004000000"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4040071) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) kexec_load(0x1, 0x7, &(0x7f0000000480)=[{&(0x7f0000000180)="ed02921ad328c28674d95a45edc1ff7f547f17b01f363d7b28404c3e23ab7eedc1fc267e1b6e9baf4e63a296c0d0009dc06396816385943b217d68b08af27a761c", 0x41, 0x1, 0x7}, {&(0x7f0000000200)="05c92e6b6d038ca14f3b442e9a57dc36ff7833d4a691e19d5f63169a9ec88338010642484e4dff0dc81e4f70d3f4a77c0d2e985c4a6a68017ce70a258646dffd669a28ad3be1b5cf5e0d74fb125222aaf84ec729e8a06dabe2afb98226855740fb70b5447b896e3e950c71f20ff030b91a79823422db49d71fe5", 0x7a, 0x3ff, 0x8000}, {&(0x7f0000000280)="f66d0832ec5b631fa5c82dab970df812d135fd34412287dfd5915fd5dc0515e4b5bbeaddb3e27297184fd2083e77a0a327b1f8d75f689845a8b85d9c11ec72fa69b9cd8c5e80c0f0d7f5df16230a9b1ab3306c121c79c1b0007264bf873344fafdfcb302f0ff13e5f7b5d3a453b52a5a5bd3133e917d136437ee3c5406a54af1ae71a436b012b0bca4f50722ade7ac4d1e0de9", 0x93, 0xbcb, 0x9}, {&(0x7f0000000340)="7b4b7f01859e39789a5d929f01347e99bcf31ed8684076f6a7a026f18951ecd4d7d7e07a28d1e9d65e105da8f330f281537ab0a4c06c55e9c0760202fb6c9e7575c40a17e6a2d4f9d64dc1eb6ce2e2a04459779a89867d4cd711acbd0b0d7dc88514ba2b1fadccfad3843c0e94cece258e25a30b8aa9e8a55eadeb9b6ea4c3d65032fbe63cd8e389377fe2ecb8be3c89eb31fc6c44b9206989efff0bde", 0x9d, 0x80000000, 0x10001}, {&(0x7f00000000c0)="ed", 0x1, 0x772, 0xeaf}, {&(0x7f0000000400)="f16b9d45804e6d76bb8a1d42e5ca3f0046df5209b89e661a27dbe4d036e3918895f2", 0x22, 0x80000000}, {&(0x7f0000000440)="7973b434e57e90f50071bc244987395e07e28b9a362919899216d61f513dc8e5", 0x20, 0x1a, 0x3}], 0x1e0000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x18100, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x200, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f00000005c0)='syzkaller1\x00') 15:42:24 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x109000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) splice(r3, 0x0, r1, 0x0, 0x22, 0x8) [ 817.028550] Unknown ioctl 1090549505 15:42:24 executing program 0 (fault-call:12 fault-nth:32): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 817.347474] FAULT_INJECTION: forcing a failure. [ 817.347474] name failslab, interval 1, probability 0, space 0, times 0 [ 817.374981] CPU: 0 PID: 11385 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 817.382906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.392268] Call Trace: [ 817.394873] dump_stack+0x1b2/0x283 [ 817.398517] should_fail.cold+0x10a/0x154 [ 817.402676] should_failslab+0xd6/0x130 [ 817.406661] kmem_cache_alloc_node+0x25f/0x400 [ 817.411259] __alloc_skb+0x9a/0x4c0 [ 817.414897] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 817.419746] ? lock_downgrade+0x6e0/0x6e0 [ 817.423905] alloc_skb_with_frags+0x85/0x500 [ 817.428324] ? check_preemption_disabled+0x35/0x240 [ 817.433354] ? perf_trace_lock+0x109/0x4b0 [ 817.437603] sock_alloc_send_pskb+0x57b/0x6d0 [ 817.442125] ? sock_kzfree_s+0x50/0x50 [ 817.446029] ? _copy_from_iter_full+0x1c7/0x680 [ 817.450712] ? __lock_acquire+0x655/0x42a0 [ 817.454955] tun_get_user+0x5d9/0x4190 [ 817.458860] ? tun_rx_batched.isra.0+0x740/0x740 [ 817.463620] ? perf_trace_lock+0x109/0x4b0 [ 817.467862] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 817.472808] ? HARDIRQ_verbose+0x10/0x10 [ 817.476885] ? __tun_get+0x11c/0x220 [ 817.480613] ? lock_acquire+0x170/0x3f0 [ 817.484593] ? lock_downgrade+0x6e0/0x6e0 [ 817.488759] tun_chr_write_iter+0xcf/0x180 [ 817.493006] __vfs_write+0x44e/0x630 [ 817.496730] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 817.501842] ? kernel_read+0x110/0x110 [ 817.505743] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 817.510875] __kernel_write+0xf5/0x330 [ 817.514809] write_pipe_buf+0x143/0x1b0 [ 817.518794] ? default_file_splice_read+0x870/0x870 [ 817.523814] ? __put_page+0xb9/0x2f0 [ 817.527533] ? anon_pipe_buf_release+0x237/0x2e0 [ 817.532303] __splice_from_pipe+0x332/0x740 [ 817.536637] ? default_file_splice_read+0x870/0x870 [ 817.541665] ? default_file_splice_read+0x870/0x870 [ 817.546695] splice_from_pipe+0xc6/0x120 [ 817.550765] ? splice_shrink_spd+0xb0/0xb0 [ 817.555002] ? __inode_security_revalidate+0xcf/0x120 [ 817.560202] ? security_file_permission+0x82/0x1e0 [ 817.565156] default_file_splice_write+0x37/0x80 [ 817.569919] ? generic_splice_sendpage+0x40/0x40 [ 817.574675] SyS_splice+0xca0/0x1230 [ 817.578402] ? SyS_write+0x14d/0x210 [ 817.582119] ? compat_SyS_vmsplice+0x150/0x150 [ 817.586700] ? SyS_clock_settime+0x1a0/0x1a0 [ 817.591110] ? do_syscall_64+0x4c/0x640 [ 817.595098] ? compat_SyS_vmsplice+0x150/0x150 [ 817.599684] do_syscall_64+0x1d5/0x640 [ 817.603606] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 817.608799] RIP: 0033:0x45c1d9 [ 817.611985] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 817.619698] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 817.626974] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 817.634256] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 817.641535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 817.648811] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:24 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x1, 0x1f, 0xffff5633, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:24 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statx(r4, &(0x7f0000000040)='./file0\x00', 0x400, 0x40, &(0x7f00000001c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x401) 15:42:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xf6ec8205496034ed, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg(r2, &(0x7f0000007b40)=[{{&(0x7f0000000280)=@xdp={0x2c, 0xc, 0x0, 0xc}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="bcdfbe6da4e393e4d066a42bf4e9eb5911a1e518cb19b482c72a6dca7245a26bce46645e752047f7dc6e57014b4628491fb987d0bba7ab282c49f6b667913678267d5d7241a59f9565ad3765987c44f84de31a8a39d7a786cabce8d2e51997f8ecf6fa23f6308b2e57fa8e36765744e664", 0x71}, {&(0x7f0000001480)="0c591a", 0x3}, {&(0x7f00000014c0)="370818c63be323ce376670346d7580e979e3a20ff5f67369ee605a6836053bfe5b15eaeb055b9c34ed963462d91ffdb36bffc1c5fba11d69c0b2c57e7499dc53debe6c5ffac0a6d9d0a4f0ff55740557c396552f3cf6d85ea8fdbda10451f7fc0a154917c73759716eae6f297ef1d2bb269941ab40388e1d52ec10a6ee70790175c6db62dcfe13b21f479b3688d94c25677ae5fca1c7d1444905ee2242045536c415e9221cd07bab4ec0e855f3790fd3316dbd2703f7afe0a358796c9be65e09d110579c64387d9aaea8cc63a7b6a603", 0xd0}], 0x5, &(0x7f0000007c40)=ANY=[@ANYBLOB="c0000000000000001701000006000000b5bb479c04a0266419f72515c0622cb1d106a6e44c4fe93bee2a319e0de0276606bb037375f3494a45b73c98fc1379b9b3e2bace5c32aa04e9036063be0ebaa2a764f8af6f2e4e3efdbe93a5dd7308e96ebfae28f2790d82ae08a35e12673b067fc2c159072a72a14d6a8eca9566f1e7552fbb5ffe8388f180f224475b5ac2552146a99ed4d270b13022913d2bc0ff12be7724fcd9a71a2bb3f9dada86fd5036cb36ef51e62131ca113234f200000000101000000000000015010000ff010000327e4447b7f78c33490baefb80eb27f32be68d45c5787f24212ee169b24f0f749b8b11e866ff0e9e5b5e28aac74cb57de7e445409f23d432cbc920f196d702286b0e564b8d7fb30338f0abd2d597ee0013ba10a31988c5c67d1b607290ed8c7f75bbdc3de0da17ae79fb74705692f2540a348e90132d281e42741305bfbc1b9269ff3e0d54a3bea2e6fcd97136ed68222b6660d3a464ae4f07559b5d48ec73468ce0d81ddfb51a8eb42aa7810d0c11056ea403c65443f3695e7950f7cf5e6f590525b292d7ee801b982666c477c5be6b144f298bb890c737d60ac08d40e4c767249a10f29893f7054ebdd339e6c5ad75c7e8e6a6cac2d5566727a9700ee9d670347fa2ee13ac1cd3e77bf3e6b8513756cae6f64799f725ef750b4ee937b74d0038a0cf4451af281dcc8a8f8b02677cd01b1d38f6b2ca1747ce0cfac058907e00711784c1eb728ced0b05363150451244abcd3ee7cdf8b4013b1e2e9de7c4078d4f5e5725b7d138b5d1570315923bcbc91cb3df755cb3095cfa21099d2636cd90bd4d2de12e7e95e904ebd8e70980c90f7c4c45245c5b21541003ade7dab84b7449ea2b4564c544437461db05058610630b4ff19ffe6e508c3eb1f598800b67ec955a0ef4d0f748ff2f9f4310a77ca9f92461edc6ea19a8b51041beafa551a834fe53f4c3f621caa76f75b2e89a72326f9ccec530bb8f23c525b83fee65a07d66c4fde5c5b3f3475b7e6b46f9d84aef5632f5d8a919864d6a3e7645884caa398c858545f5cb22e8a6e19953aa44fa0c6e47e13fa316c26158405ec8ba4c017a3b483f19129ecdf5cb40a8e780bea8c6493660686be21d3d9e203ff70af30c32a55d34fbd612fcc6e67f8065e69573f75099fe59d811dec5649c5e9cc98e115fecf8fd1d92c56b28a5e80c09709c35d429eee6f7f42de4fb7ccd492b770bdeb295d89d3ddcfb5e838d63664f3b668dbb8365f5bc00dd53c557fd8505f48ecb4c8e7e6cc2828d8beec6471aeed67297bae0e809cb6586c34c5334bd30563ecf9aec6e3866ac8306ac12b44f4f125264f48e30d7c42bb15f44f50dd048574c48c23ac4372c021c2ed5afa5fdd51fa3802f31916c7ef3d2c4f9b50081329b3ccbb34dd082eda80889df5290f1081d77cdc5d1b2eb49bc2c6123a5e04ece225991bb898dfdf50b250b3a0c31e379076f8088de2a85f25050604d4407c8f81b7900d74c42bcb32719f66a9518fbc9d94f7c18fff025191325af5c2a62fd8b537c95ce37ec3cf2cd6a9d9de2742ff06842ab873afc92ee2cea9f310ae17b0931f4cf5cdcb2f6b1e2cc61001b35454073a8e267bad107a1047b7cbd1e225d6217850bd4af60beab910437ff6d1b0ae1bc1b74d2150996af019b9730599568425ee21e3697e8e8e851b8150c4027782d15eafae41bac503e0ca439d708de1738b45cc307a45bbc16613629ca9dd93d795c1d29f0f5a2b957e9d54edd5daccd89b5d72b706dbb14609b96562b0a6cc48ca0604fea1bc328554392d917e5c5d8afbd49d8c1b03eef944fa0ae6e1f02c424a7ae40de8531fd72a7f3bf7e6d7bceb133372a0faba34f3d323eb601cbaacbc6dee12cf41fa8c028fa20f24059eb4af0a1826802656a2e9b5e9c725995b7e882d04947b7b6ddced64678ae98aa51bb11300b596ee9923df0b7e636a1ab4629ba2343929d51a8f39f98638a09c7646ca6a9df8affa458f146780f6f89efc37f925eee97089b96e03f107899aaf7beb4083b942d53987aa5f54bca29a990458d655ff0a78a5e3cd1f5f1c1554ae169155f240a18dee0977a9a6a84b017899db7b5759058228b31bf23669d9db785213e32355dfa7cb54da03e5ddd631929ec2b3a4b3765b65f34032e4f7209ede5eb54ce5706e612366ef7e6859ad0a9b2d134111669ccde6dc3f23fe461f21262ae339be9d25f9f227b3fcdbaff400840a73f06dd365459e55b494d1351e23630fc3b3844d1b3f1edd5a8425a955dbdf4a7bbcdde4a8af2e1b8fa1fa47c13401f666ad3cc8d04d145b4d3d9fb51b3bac98dcac380b09437986e858d4117347aa8743e4534241bdfdf0e5b1ab98ecd1f22c22d45f525f78af0ca72056c286b9aeced4ed30ff3bccff4d789aea9ae157c1e26af1c4be71c67502a68d2dfebfc348b0b4fbe592f4d843d55edb3c253c1708027aa89070771d3b0e7197e15e641ce3ae700ce3b816507824adc51279d9c0bd29003fa4daa2f10864cfca1d9f50ebdae922e891c696efc9f471c55e6647f4a155e1869b852ea01be87ac048bbf71d887ca0ae96dd971703a2ad954760d2c90eca0278fb812c25542dbd328a208dc9eb40e31f5de08a7c115f9bbe4e4697ceda2f588dc9993bcceb5162aecd433ad4383cc577816b60c3b30d14d49bf52ea3342e38b11820c6b8a0342267bcdbbcf2036983efefaabbf3fdae7acb8ccf7190024743a1c2661193b87a036553baccf270b6cb3cfc75e275cf41e65d1a1df810051d4701f1c57aa72adc3adcf265746c0cdd938df28a45505f98d1a1fb8168ca87ab4c67302eccc9e2c30f586174d5d89d4eccd54685ebcd28a009d6289edc9c14793c987993f8f7afdc78a2b41486c029e9e023bf78d79c3f3cc38703d0e163baf60b32bbd3d74d130cb99382116893bd7fb763f80807ac5fcfca1fa4d40f113c5b2b12ad25decb38f78a2e21a30060622068adf487c2d43bf06f619280b57ed5762d9f7c3e0e27fa6f33dadfdb087a5dc6015b7dd6ee2e39579ff231031abb2644de2757e74e4e1ac8e05420fe17a0ec310c8769e1c344f05a59b2435c00aaf2d49fc60ac7feeda5206102fe291eb986ac3cec63a911a52500814ef3d094db51fa067bca73cad2128ef27809ca820d912104d979db98fbcdced747f1b5b37ed90341cb8f9fb971ecbabad874baf15e46d7f4b0231c2795f1cf7e09ea79bbaf91f5b1fe08d895178a27fd82610329bdf3d66ba78a3e527abe14df1f3fd2133683729aa52fa51bcc64730222623ff61d8ab2f875eb4c445e6a4e0b3b3b737fdcb0912e2760dbb01dfcd7e467e4b74dd8e1f9843b52520071cc315c49e84f32614c3d098b86964e69b3f5e4e126e0f70d6376cc0f1617c32cc81657ae9b18870f87d642b1fa04b485453cfa3d977863fd84250ed09053787a736ee69d86ab2ea57ac781ef96b7c6ee4111a9e5609192a879cd03f853d4513aaa9081d3b1cb7c498dced90263f5047268e80d96139fc5b38e86283f3cd294918ab2c324dfb6a64f0fa48a88c9597644ffcb7d52138e85350edb5a857d5205cb059534ce4dd875be40c78ebfed2f921a1bb1115466f497a3bfa712f8f00aae0fceb4f4285f6378ae29f0a3ff358cc897cb0dbdb0c12b637bf10b1de70c5fd3e8865746118ad3a4dbe61801c54b21c564cfcd083e24545bc6cfd9bcc5cd4ca8e8bdf6be1d06b14362522e81fdcf5b49b05e44d4106e7f0f6c4b3c60c9045e328da6878ce8b20844b2036eb977d2fd54e63981b9e9c003bc447f4f4a3ab9f1a104450f5c9f119699a048af47bc067f1ea171fd9d0840971b90c5e3758677699bfe3e10733c762600781e975c702651fc5b99ee6b51aeba35ca1f9f1a56d942234dc9f8da4ea93e4afc085cad80268b20bf5a7b16e422e76782700c2bf46a8c9e769f597db0ae14297809aea1654d6c3faafb769832f75c820c5a8db3f2590ec4b71aad0005350bcfe9adc622dd7cbadcc09ec12d0de2e16109df2eda1dcace888666a255bf6684aa4c7f42d6ad86c5d1c0a3413fcadc8c21fba3dad834d172c7b7343dd6f2b7dff3fdcc81c7b5ae62643300ab892f20307f4738bdc61c2c11c607c52d6403f271a592dee5d1807e202aa700b8b9ff28b825df750be494b4274bbf2444bce55d3fd07cd5ad76ab166a0fadec397741566f7f7ba9ccda9a0e16e0ead2ce37755772f867cdcf6efc1cb5d35ff42301aa1d6d2363feeaa67287f98ec471e19cf67a35b9cda06241046b9dc7687ac43661c71d2bcf11173d4dd3aef5942e31189d9f418cd24a01fbc2bc3cda5f88494eee4240bc93451d96f539ae96da3b7d5a59fe63a61fcb338017e76d712d9f284323950abf4e7fd6055fb0114c578351e60cc4892070ae69b7a37741038851d404693debb9a927d9c843ff8c80d765d80f8d93423a72b3329ac564639cd37845924de74f83b394ef7ab7b05c6232f804c3d88298ee9937dcbcfba8f4b9910582de253f65eda6adfcdcede04208a0fe46ca34c2dd940bf786c13fc6898c1b8c3c72d139b906a056826343f7cf42cda49a467df2a9c1d1aa2bcaa9e557c74f2fb6eea5f456ef33943e98735a4f3379d7811bb3a2621f26c2b852897fecdfb8462bcb5d0a267a391cea9cfaf61ca20c67d76357f850cd647e58d343ccf2406781bb495924aad252b5cf88633c483b18700b85b51442b8db3aa19dcd57260a30b896df0904342dc5aed58a695a0abb4b267966ec51eff6c7ab2d562bdad0c0a6d29a3608f42c1ba07cda5e223015c7a2d1df84a27d5753c357d93f15b02f278c5dfe0b06ea155e94f06724f3c4392aa770884ac749a7393179b7ccf7729d1cf0f42502b6c9e3a2bdc811fa87ca217b10335b4244a9d9a26ce9849a53a3b212bbf23e01a6b0f4d937e6dfbb92b28e40b059632f2ab13da6d3221e4811a65bf253792db966be71e0fa8f6047f6bbbb5f9c6c83cad11799f9be2975cf069374e634229170347bc8418432b75d16a0cb9bf3fcf311289cdaa35fd68395b36505ba8e35ef18b9b777dc673158f2d15abddd2335c93090cc1d02a01224bba5290f982f3b71a5a31237a6b7b5d12415b6d5ea7c12459d493ece01de27efd9f5f72163361f6cdb3e097daf07eee87b29cac064fee7eb27d55a80fe55b2789d0a5f0a654ffc10cdd6f339fa98d0eece68c456f96309a858096a802519c8708f0c614566c9dfc3abefc208f5a9077f177d08cef49042ea21c74fea6441278fc571d8cda9dcf437c470206382da36b1d889e03499788401bb94e8fb779c6a819520064f61c905eba1066a44e14bb29cd6086e089eea583cf63c0f9d1b28d74c6be0eb754c651f4aa8fa370540a7aaf663af58ac25e48afcd643120fd4490af3e713907cd728307fd45ad1937af9e249c78d72b7d35f188c5d1b5379497692fbf2e83921fcfcda246f24f7ab50a6eebaa815e45c897fa047355815316e7960086a9402869e30a7eda2977fa9071ec8c4ead002993ddb0d72b4d38ec6e22d60b22c382c1b37f6aa31345c703cd3b4153adbd9528a22e55b71d5d229bc05354a6ebc259ece87b209d8a15c3d9845c3ff52d9e9171c908d3346bffdcfb8c090c66daae25dc965c73a88f315e35b9ae11b75a1f58790708bac88ea31d77426daa365d788a917c0f7768f0895ba478067f39f85695920f6e24150b2fabd93766b037f9448958af9831f5af3b02fa25ad33ad1d4261266857fc0518f52d3e9623a2c355a17616b5828228ca39737eb47cb18c6869991e0ed208b6f9a859888669d182a5b6de9650b4c8cd1f30b9d4463d8e6dae2be9388be697094f586cef1698a2cadb14b8ada90bc01208ba12056c59130bd2f0b5f9e8a9b33b9063f721308eda25e784fe5bd2773ba263c6c4b6b3e1376538386e5f94e7dcfead2007982ecf5e8d0dff4e8eab95e56f114f819c063bb066e84630b894a9a079711e02a4f667db3d948d10a8a42affa0e74b97b7ec0af79419775b2c2c84da2525e5d96e1b14d59b88ff10ffce06c9c7a5fed6bd21d07c971de9bdfa27acaafce986325d70000000000000000a01000000100000d3084f3b34c8dea1afc9d178a2b4c7d312233aa83f37262f043acf3bc3389b784d1bfc656b398fbf4cf3a4c0ad3ec29de219c82af87a24cadf69ce8f3a9f31c3c6604ca79c42939ee32c976785f5389830df2a8a86d4b1552cbce23efedc000018000000000000000b0100000400000004d09e7b0bf2bb8d20000000000000001101000002000000f3836c6cb0b0813e7d2ed0ce000000001000000000000000ff00000002000000a800000000000000b0e6895909000000bcca8d2e618922f0fc9abca39cba080e6c451626a69958c592a297849c3c3710286f999b9e287ba3e8199216e2f329ea95b6a48555022bee203805d9c2151a579b390fab9627ed6bece8a7aa5d6883581d28b22d23bde624c79997127677675977d6a576474a3512ac60b7ba340bbc26bb3033f4d2e1d55eaf03dc45412eb94fd4a667d4155c56057058f45650ef804f5db4d7440000000030000000000000000100000000020000cf24a7b2273dbd413178b31d2074fcddfd5eb43cf2723a840e4d798ce36d85470dfbda98e7e5b1e6a9c2375b1986fbe10613281aa0e106962470411f249a65e0e7e98869182d7857fe0c7109f55ccc058540de0508ce57de22c93c35f6742e8f0c079c6dab6ac04045584244f2dd6f0c99fec0e1c98c8bb27f60874a2ec1e813773e52caa0582d5ba5fa26f3954605ba81247d8650000000804f32219569ba278bdff5dd1cb34f1e8eb93deeac9f3735091b393289c1a3d677e463c08a7808eb23232115a35cf3d519d9992cd7f0e940ca51b724ec7086256c14fa9effeca915b05b933eec1ef94f8aa31f66cd56b0f7e9e3d9b56dd0aaa95112e1955b4ddbcfaaf3716cf84ae474ebb254abd71afc7181bd2a3d8871d710d9ab3b01323c6120323e95360b01b5cc25b111d1b73c2acfa530b4c4c0ca1357e82b40fdbe4992f68df11dc0bd0aa3edab68532437fc0800e697f99d2a1e958de3d1c75c068ec30308e5549aaf4a7f3c515d84b323f576b26c1983c30ad01ccab15e25945910b28114738c2fc819feddcda6f17c1ce84b9e61f02046cc593116e052139f761d6cd4a48a56a28c5410c22eb158e389ac41f2675c3b37c35bb946c9b6d9913c20090b3499a70aac0b30c22d131fc1f791567ce293c7b5aa6c3aa79c7b4930b27aac1f754e6264a59755c047015cf0000e8a60637826e6331702eac79bac2901387c8a4fa6a399c05420029d1b284d5a376945997fe2ae2e7c75303e4413755a8666116a8cf555308044a8aea6bb"], 0x1260}}, {{&(0x7f00000028c0)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="8682a9a8cc0d0820ba060a73e88971392c70e656aa32ed14ebde34456b1dcbce748bc746b4e6e80c77bf11d561c48efbc3fadd7e4daa6fbe145aaf21693e3cd12d18474d6ba88ca95e6afba80c99243364578ed1cd7cb4e78fd07f344b196508826fb9b0ed9196f2e9a0107f0d3495f10e135238fbd4857018262a4e923da4257b41fed9999c7daa1fa2ca9197a6d0cf23a088daaf32ad5612c046c895da94cdfe47b9ee919280afaf16494205dd2e934429328a7c075e162dc43d2d0d1d6c1cd66552e143ca74293828d98a2c10164d111071774a72adb2677fac277b0c4906467da6301ac34edeb68677fdee84110eadeaa7708ad02bb361da59e202c0ea", 0xff}, {&(0x7f0000003a40)="e6553d60ec1448faac103969f92df71e5ae591f0f34e1eb905e9c5c572a35d7f8e1c07d0167fac23c732e22507b5a1277b850b57f1e91422088014c2d9a2abc7825bbc4e9a89dc2f30b66a627a3566657a46814b129fe6d8650f68dc12780f21b838643e23f889b1600ad45608d93c7995b2325b8b0335e416dcca19fe5d8562fd98a92fc215f08da9ee59a66b283ce21b767d438a3d5a7a8335d9c459fe2b5266c04e2858a986f25eb032120889395568739549e580c0271a5ae80835cc73a587951c6fafba38ed3ecffe7387a964147ff9203b20457a05180ee043b88a9d0b277440311d946704102cc5b136461f", 0xef}, {&(0x7f0000003b40)="85ced1c8c610da995550c7c26703380f356c352e62f20f4b25bb847303f8b0b522e6acb51d49e6f5a7f44ca5a8", 0x2d}, {&(0x7f0000003b80)="d1761849d20bbf626004d04b8822b3c303327c876dbddc553bc3fc1406d4b19fbdb4b04df2afef3b5f630db0fc4307bf3dd66d029e10743983c06101b70f0d46548a6ccca5f14b4e98d9153fe9f677626a51530fd7bdf6cb289f257d6503c049991b6803c346ba78a15914c15863e14a4218eed7709faf132d96789940842f861f0aece9a855238fcefdf8be56ba24333d0210e77a0627aac9981b8bf8f30656042b3bce20d0a7278e7dfa44e0c6de826aa2e0c8e0623cd00da29902eb62ed19969de53fe84497afb4b113db2b26e6d7a6ee883055aecca507597f358ed8e9aabf067d80df0f52df7683e40beb9a8eb417938362f39f1f1d6891d75ad856daf37f9610e5ddf6d41305be425eb5192f47f67e287fc97e323b6fa90a17c92e53cd865210330ee4bbcad94dd1a9feae453c70e96711284c92f2fb498ca69fe299451f2aebb5fc4a21ada27cee581f12f59f3748d88b86abdb10130b7d72be77137f3281d1ff339eefd8f13055c7a4e089cba18a057c25cbc7cf3a7afcc089dabf9e99dda1cb07a1561975a8cbdefebbcbb1d231a9d3c10d648b6ce17608df0ef2887260fb9999da10fb01d27157048da638b1902f70b337ad72418cdb80a7dd5e87b22cb8d0558a51967778cbd5e406d96b5c21db40ba6b7a70740eb03f2e92e73500fe980e22b45effb810e2b88bf64b7ef3a5873da8f9693be8ac4f58b17230ab24c64dbc50316f1d90ef3a3b6f5850fa2f9fdc8aeaf604b457be48e06add8e707913139083d9abf8eca6f02912e25bd99b581bd643e87d101ba11039ac37be7aa9a518ca033797b7ad7fbd909e4f97bb2cccdf08ffe33fc8a2ef2297101c96c7154f91aa97460d3b15e4560595713b17b1af093ebd0ff32b9ced455c9b5680467f51d8f82b15062632482bf8049199fc7506df3fdb7bdad9d9d7a982ed0b011f3b3ffe4fc50d5bfd6481205fff57715ddac570d25790a5399a264fd75ac4d73f541993f3b76daf4ecb564e33e38827a1a0a0042870049e7e2cef110c5a148cf876490a8395ddfb486e6dcd06f952c6243710e61214495e2897d39bdaac924d50aa2f73a80e4f21f8b8e3f12f1e90f59a4d048e2e1e8c027dc029f1259e5c71e79815dfc4cf82a5b9666a99740750b4345e0143683f507eb3516bdb7e02fc8c1bdf18d9fae696c8f493ffadfcd33bebd50d2c080b6a2354004885da96e7794317523cb1bcffd4f74586e44dd8b140638c453ece5b29ca817de520fb1f34e83fc269c2e2172378dacd786d96440ae193f12fe7630045be070270bfeecadb9dd6b92760bcdc8afc297d56c830c994e3aa386813cb84faa01e6f08e1f4dfd612d7a3deabc5a37147699669efeef4b8e39078ca5996b9be7e3ceac9c717d70ea227c07f426b0bcac61e1326f7cd0fc725c55f291f1dcc90fa68672ae476ac15ecda398533aa80ec254560fa092b9f6853caffe1daa026dfbcc262859463980d7d18a8c706d5e4b9702279f68bffd62b77c8ce087355993049f31ac816aac706ee85b433f610661d9e4f37c3342467754e7a80c0675682f450d1b1a1e3585f6f03e60f9c5be8583dda40e5ef82c049ef377372b72ec69cb203894f03cfc5b7b53fb0dda059cf5234d5c26e23d54a0e0190c2da1a84992500a189f56f89a6437bc85b3c9747b26738dc75b4822d4f8d1a735802860668bcc0cac5cc6c785f40e52baabf88f9be62cb08dc33535ee7895112298953e7e983b265720584af4b8a4b382a0fc9a251c2cec5a56f32f4c01b68a79f9cc75e824687a4a0f7ead07abb1bc945019f276fe2d9ecf7cde94b4375048649b4fff5060110925fe0874ae0856440921f1975cd58948e0a8eb8d3c74721341eb848cb2f46e957ee4e69079759ebb86f3e1713f7ea762b926188951da319cc13bdc51a0824b07bc6e70a5f0fd1f9c29f25af340f65d215498a94921376ef649d33142a8a07e43f57000ee1a75fa6601f0b8896f3951f58bdefb99d44cc086a730fdee4c20ea2b38814daff534c0a8eaca2f3f47f80bcc9951cf41c85797e669e69699f531c8a8dddbd3a5cc437065e8aab3e37c36890b7104bb1b951108149b7f0fe5655e72d4c85c1534f7e1b7290d4934b35ff0cfc8c32eb721af3566bde2a5af62ca39680d5c8162e20bf9bb83f61c6fc843b0d43b121f6c01b990f9fc501ad156aac6983f85b00afdd2a1a87db2a2760c49877487a29c8d0753e9869f4b85d78af2e8cd6d178d456d0aad5ea49f59dfbb4d7f90c076b154536175e7fb117995d34e088e4df93bc45fe42328ff40598f06f9af54af5dcc0f035fe7724c4c180ff4f5aee219478ce1ff82b20f3070c653ae90f447707b94d8c0db8d3d76e2f277fdd2f23df1273860563654aba8d1fa705ee4bdfacf2eb4c48ff66c99b850e6c094a7673d08e7b36004c7bf47d64763ac452f890f6ca72cc40fba6b36f7ad041d905d4756b1907141b7670064f3126584acda98abcefbba8969e5e80ab346bef18e45b00ad8581a174195e6e1fc61bc1a1a893db73f58a4a447eadda0e1141e7cc6540fbd8087d8e6f205b7f3a49858aa7d3cd77725f2baf5f96677c2cb1647d0f49474adcbb7fae771cff89d0930382ffca71fc517c40abc916eb137d89e5bdfc7dfb5f9dadff56e5bff23228c4b2b7c1cd17ba74dcac7c07887447b8d8a9048df771ab88a9d6630ad0bb63b8b7e3dbf5cca8ef7d2c2231a1e6404d5412bf5530692ff89b665522552467a48b47ad473b76c8a64f7173fb1b23077f17cd4be4c10e13fb5b72d9f5ab58d0608c3aaabea018af48891a190fc913c36a591a988a644f59ddd04ecb81aee85a4d148e8559d7cd9bf3ce2909c1b25f427871c340053d0ddc4c3e450395a7eaea680e57d65fe3976517ca43a276befa93ddd4bd2f8460f5c51e6950b3c4a608b5b33899bd801f8fcdd1b3e8542e47c031ddc8f23a83e1fcbafac4f7217fffddb2d90c0144b0b20f5643d70fa6f2c86b726a68faedfaafa260f1d11a926ecb88b2a453de50e241378b3e10bfa4c0717fce91f82971c7216e369ab2d0dc5c5a32a3fc23e30009c9256eba26b272a6d94968255770145c8a24587fc0f60078014cbc2a974aafbb0908623c00067c9b596d82e655a3e00b7b1bfead85e22db8fa5e5596731d663c545c045df13833c92baad0f4254ebbaa0efb07d0dc01e83808f533b772667fd3737493d1e4899b588e66bb31bc43b6053607f17a0541af0f2517aafd06906a46f388ec883e29914c950eb485ed1cc4dfa9590a36a5457aa2c339ee10424af7f4d65886bce9db1df4bf4dbb242d09da9786f30539eabafd70a4b8c7810fef4a84508a8677ea7fa0b81e5d5d5e0e78f05c950d1004c959b01b0c27d9913083bc8fa3437ed4e75b64d6ed7962c1b695c61c48823363478d4d13e0cdfe09db7db4199aefe6a8fade803bf3c1aecfad8860105311704b75a660eac2d8d239b85bf31326fb20aafb00a1c98fed5f3ab37c07ab39046700e9005d625b4b9faaaa085aa2d893d57389325f35416ea60e6f1d22f333c5088d07c79b3e9ae70d88ac0829b176b6eb84fcff33891f484388c932bbb03ca36d2f3839acf17cf50a4779698af17cfead40eb783dcb322c96c2cb52752c55078348fb181e3da5656f40c098db65f859a29450be5544b687a4482bdbd55c442f35560ab45dcbdc1a9acfb3b362b26421e7d463f47cafd0e731394450f487922cd6c4bced1548a208c56bb6e4d7d3f4fa25da486bd06f169f04ae4e60071d856861e8259a1f0bdfa22c9b5a7315e5ac1653e74b9bbb95d411aac7fb1500951555e9aaa01c5e7f18a59abbd1f238131faa54485a1c99295534433b34a656a3b687edf1c48e6f6d524191b319035f49e3c44277bf8ec0cee12adc98d41cd07c100e2e8744668eb967e46bc9f17026eb18a27f2e3f796d7587020c65f9c065b3d5cf35ab7afd7734d5db72dad378edc5b99edf6d36b4d5055efedc60ea5974060d7bac32231930382a87c30adf318ec988596575802fe14ae8755a948e7b42e961ff297e9538f75d3ae93e16aeabae48d0d7011ae0a60ceb32984c561269b998b9559bec151203a1c67ae538c9af96e80f7fb515ee4e3aaa57568eb3887ac4812dff30ca20c30e94a804af46f94555dd750b244ac4428fdf589ac75aa4350a9bd9b2503ea2480b604d9c93b9b7469a511f9cccd42a40d47cdc7603a833c14fcd2030ae1da10b38a5502ec674bef036f9e6355cd44d28655ce6b5024748df20a8cb17278a050da1a19bdf33b71589366b6bf6b72966c4a1817a15b41851528079fc89edf5d49f642f4d593cc5c1ecd48baff57930ac1cc6062135152657da2426c9219fc96e93163050fea9866845fc4c99e3ee3665824e71a7d09533270124c28f91e66c3c1c6d7b31f5fd069db72cb99f4c84267dc8c116a67d720749695beaeb3d0639538c9788e13de0c5c09d5b35976796876553de35cd5d3cb08a3fdcebf093c7b12d0d8bdf10c6974e4c63e0bcdacf9380897507c41b4d4ddb21cea2990dab612fff210e6cf9f36a7a0e07e86fbdc086b3321ef8db477fd5d709abcd2c7df66188c240897784a2e2b98d0b9543c8450af789727a4e4555dd14d4c50dbc62481d816f6d3344ff13505dbb5dc4cdbe1ffe7325c0a276b345a72ecd151e4cc055a15745c443ba2715d1850b89659f2451d148126dc8b9649194716c178f8a139ce73ebf1b891948b3e82e2ab62407ea0c995e572f61f85a2d967ea338c10c5bc76b339cf33cb556129987a34eed3d640ebf25e6aa91f47e3e5bf6c6026a0288d4f7ff23f5fd97f119574580362e1589cbab3ced2991f687bd9eca1e34a369b04499b9a0968b08bd91671ce218086545550848e00f5773546b5a25ca8f4d42bc044e29b980d341ae5a64fb86cf1772700fc641d50c0c4004454a7de4c79fa1c458ad9cc636bfbe562cb79f87a094ddab330b4fd7fcebe0cd13566b34528dc243f8102bba97062353f49cd75a29a383c78793e1c3fe4c8cdfc76df592c6f99e800f5da0bc3121f01246ff5e7568673de88d2acc9819401f312abe05465a5786d0d26f73534a1319e82a055361a31176c06f71346624786fce4afb310e4b5eef1e12969e6cf9d0fdd88ee5ac07d9a32d0312f0d1f73e75b7cb0a2aebd923c8eac6510494c54ad9df4ebb031ce39b8e1af70205a41beafc1fcd073fae20a45df836289519d00459e2f43144060f1b803d4c9f7aff3cee0832d853c48f1e07da97f62cc244654d8b89695271f7dcf648ec8e402bccf27b9679be2062ad65e2ba02b077481acd6d95ee7ee40a0a1a40fd37085ae012f0a56b8d1c93dd41de638c847173e4385d63dcfba66561a2cf150e6892d6799aa0c15b2270a0cfbda5fcc3b12f29b79203d16b457f49417cfc7a35b65e07c290bfb40d686fe71e090a4294e4344a16ec0c2190c5c213e44c10db9e1fccdbcaf8e5cd99586ec63eda196f5f74bedef0e1a29a6977821ea7b68fd3191d0f1d86bc5f0f7083437fbdb2c226266483a56935953af99dcc9c8f36743ec3ec3c989a16028e043e71e32c70347225a1b7df40c4bfa50344d2b5366a6544ac4805d087ec4931fcb40f8bb0e83fd127db05b7d216f379a45e4472da67de0c443ea6b652a9eff74209c8c54938f947f9d1c186404fc1ef1288921666e2e394f744ce5bb436435f631dac1caf293ebda9ae7ba21480a97bad281e83afbf59e6c9d2da79bbc548b4d73166008a2c321c57cb6de000321b7303097dd59b568dbc6e33", 0x1000}, {&(0x7f0000004b80)="8c9f10126f8bc9c626439c1cf90f0ca489c67f7363952687a5a99e2040183f9aede8f7015ed8187e199e9e9ee118dc068490ecf1ed4d0a9d9904bcf326fc51c0b4e0ee27483ef0133a7c8871992c6dbe42ed80ff82c942dd321b29630ff1ad71024fd65a2ac78ba1d591", 0x6a}], 0x6, &(0x7f0000004c80)=[{0x88, 0x3a, 0x0, "368e1346e8e6112814a6e93814d18fcde644b5c434cb5a9b6ef4e6192ed442f537b8c2e3ff2beef688ca5568306f686f5db48aa6f60b90ab4a17f4c9d790c5cce22cd38761f0d3c62a5b3abe0edf90d2c58687408c2e6d6375843a9d41584ef023bf44bffbf54df6a1506fb1ae867be213cec6347ebf"}, {0xf8, 0x16, 0x3, "0c99adf2aeb1ecc12adf82013848bf1eab091038fa34fe905495d3e06641d32554ef1f942e320c8ff773686509362391b3fd78f750c5f3a7c33aba4d2eac0630b89177a646eb0f618d1dc84295c76e2350b3e4c3864b34a691806c0fb4b23fd0a1effd7df7fbe96f6ae74be875af0e975907997d23df9b1c3eacd7b2b12feb906e89a4f1bbfb6d16b2a7514ffe73bba7c4020ab64152b097f037847617cfe143e8e057cd03569c715400a7f9dee84782d0582b1e044e05fd0cf7a5d2f34d9332a32ac24ca5f8074873f13c169ef92918d0138bea003e02e195c63c2bcb348891fef450beb6"}, {0xffffffffffffffbe, 0x111, 0x0, "00ac200d94c91410f3f95649f1da0b7324755046ad1855dd0706cd11f2ae1b4cca6c4ce86ee2c03a7fd890c266952f8c8d7a5f3f53985d51aaad04bf129e0fef4fc76870c810dc5a2a13a732c24bd208fe0b6fc2c0ac27f65aa84d66ed6a85787411b8c4921a49f58c37297356ff04fb2f19bb4083d398bbbf7058a7b0abd0ab4fdc4578c4fc6a5f7e96f18df58796f026d7f4f58275243d7434bc"}, {0x48, 0x11, 0x2, "ddace8bb214f41550cf29ab7f985b7eaa4689aef87037101fe89690eb0a623454e02d966b43232c32242f73930415a7bf45e79cd88"}, {0x28, 0x113, 0x3, "23624de570bfa97f505d87e03a41e4ba7422150f92ae7c0b"}, {0x20, 0x103, 0x8000, "94461bb79b45909789f635"}, {0x234, 0x88, 0x5, "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"}, {0xa8, 0x0, 0x7, "f5fcd9693104574dbe7e9570f6f3d33149e5bb252edc9fda84ab78e7fdfc361e072403d075b1d1a963d0966a6eacf8fe62a0bdc81adf9d7e0c5758217feaa6a39095d601d56da483cc04d8bf5c106c8ec4cd37556af0dbb71134be540a74b11285dea060ae37d4b125d6ab597efac18c526bd8cbd05f366570572d45548fe83098304eeaf6792a693bd739fd2292c4ef2618"}, {0xa8, 0x4, 0x200, "fdaa9f5cde0f94c4ee44423ad244a329e067bfe01dc9c88b50e3246a687fb6396f62c07ea3a14ff40e20a60e7880b4ab7b3fc5cfae09b714c8f70fb69031036b29a81c2606af402e41b05d2d5b50eefe1c7cd6f299103ef52c9978f78e34cfbeca7b5ad912e55ea6b275f21f815958842bf1be0ac8cc11d2f91e49ba57b51dfe07d519df991e818dea08f8b2668e22cd1acf146877bcdcfd"}, {0x78, 0x119, 0x1, "c76e45a68d4dec4576055043bf0fb0666291edeff27ec807dae70731d64a00b08125ce981d70c86f2089cce0ce08a0e1d765902879f9f712bbdb715f0c7f820bfb15baad327c1d6808f1745289a4eef7b31d00b3754734a39b8dd408ee0983c37479393b351892"}], 0x1498}}, {{&(0x7f0000006140)=@ll={0x11, 0x1c, r8, 0x1, 0x0, 0x6, @random="fd57f7b19b6a"}, 0x80, &(0x7f0000006400)=[{&(0x7f00000061c0)="d8162a5d1ed10321b77dc622e872ae3143227219881045915d850276b75c487049d19001558d7aabd14813e34330c09efad309830465cd2e11897352d3f094", 0x3f}, {&(0x7f0000006200)="a6299d21e79bd1f7bf89eb9b24eecfc97f30ad19abc7f5d702a318c235829070ef3cb8d44821050f0a14b8c2e86a8af340d74c89ec2f81a061b8b9d6111d1ea87a06499aa7a9da7384df5d0a3bbebeeafd9ab0089f817d3099aec735913a806f788036ae85ae854821ab04bb32386c81d6c60cb6518309318adcd4d262e8b2df04471cea0982360a58c0dd0dbc6437ee93ac5cdaf4da2858b3e79d6e1fec9b74928264a50dbec3558203c55eae3752498c1046e733b517c6abfb5e7896b5ff23e305b7d32788b72fdbcb96d54d9ef752ed75e12d3604cd23506242afb35f5ebf75a73057", 0xe4}, {&(0x7f0000006300)="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", 0xfc}], 0x3, &(0x7f0000006440)=[{0xb8, 0x1, 0x6, "3467df8f02c9dc964b2151d13c620fb0a12c3c39204a767fc12688b1a43aa2ba099c8cf28e24f60359eafe3c20f39c7769fea7d0665208a5d8755a44ceaa290a50632f0eca59b665f7fd46180fefc1d1998bd480614967d7eb8957bf60acb86f06c85fa935d8ec4e4eaeb35a4cd3e8dbdc475c89931c28c604a3c8e605c7471d50e2f482518e8df295e0e81702124cffb9913ecd915e97240cc6f1308162ccd72c829a"}, {0xd0, 0x114, 0x9, "86ced31c32c47950349b747450ee4dcbaae887c7f46d247c20c46509670a59bfda47f987299f7a138a81763bcc02f56d896f170cd38b316f7d84f2484f99dbd894ea37a51276147f4f25c11a74f32137596b2142176638ed11223616ed1934f0b6702125980cec4dc51f5f9a117f00098fab9cc1e81470ef3810227b209e1f67a45e85c0c16fb37b4654d1cfefbf4cda174689ed4b2bddd4347559081b240ea42c699eb180baee5bc6c10b53f9820579a981967f4a7aefe736389a9b"}, {0xb8, 0x107, 0x0, "e835be537334ad8fcee199e0c8b1aa8cf61473d3b4af9a402fed9dfd223c191bf0b2b40fd3dc65808d0743aa8146bf47b6eb5566dd4c0b89a315e8e58fd1078961d234709c27c32bfeecf13a770dbe2b0eaa57b054a13667e6cb68ca1d629f7d05db6c128d8bece78c35cf5720630b99f8022d8290a483e3dacd04dea5288ffe7e5271c158921fee010131aad36177b9d03c6fe418a52d81e020c186af86c71209ccb96d"}, {0x60, 0x8c, 0xaa1, "d47371a1d488c358a48ce9f410812a9a025411cbbe89cee3a0ebb734c2e1ca68ae0015305e14a85862c5041c1f3f0933d09d059010bdb8385d0d2ca4cbbf67885a23c2bc849a3a5db5fa"}, {0x40, 0x0, 0xa1bc, "c2ac5d33e9afc17d114ac6587af3481d19ab290adf0ed917a74d866c28e549691906d0237e8f7cc814440d"}, {0x60, 0x88, 0xbd, "ce58eb5831b0bf39be82bf4bdb1d77d2d5cc16bf6a48bf2bd21eb5f86a1c6dad13851aff5621cf94695fa86e7404e99f82ce10b1a2d92a5699528f5796b4643d99db0a27c2fe58f213d6bee60808ab88"}, {0x80, 0x88, 0x7fffffff, "947a4c8a09484ea4f3ec8e29911f77281537314d536a438bb194119ca81890b4a953b3275e61e147fdd34305484aecdc82d0e91514d2a86687e03dd9f4a4bb5fab56f93b358af0177c694c26cb8e79b31d500ff57a54f536127d5d82d897f71eaca4d44e13241b0bd6"}, {0x30, 0x1f1, 0x6, "7fc4c70707fe95f1364f27be7621c64e18833b42b658ce415a84ab0a74"}, {0xa0, 0x10d, 0x1, "870a27de38ecc8a7f7b78d5b3225fcedfd19e67e8c31b66ddba9ff11b29d7dc14b605d32fe87cd4f389a0a0aaa36c2331b46d483a33c3c0dee020c2d4a0414cff858c480bd779e9ae039ca4c2229ad12b123d08c63b0fe811107f59dc247128432349b61b52c868fd07a46b45526abed22f9c7fb3b1eaa6310a16c01a474cd4e24a9963f1f38bd14978421b70503"}, {0x20, 0x107, 0x5, "ca84d11abfe8342020581cad"}], 0x4b0}}, {{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f0000006900)="76bac2e510b829853505938c995726905d7fb1dc670f3424a3ffd8bf3e556449931f238695bddf5eefcb77d769252be06d08dc00fbb96bedb4511a4cb5c65dff492d75071d2ff406dea78a847a3ee58e22b70cdfbce9defe13bc0917a011cb12918093222250122245859432adedae2c05f2881e192ee030271140388fea578b6a7c23fc63d53b3fa97a4b", 0x8b}, {&(0x7f00000069c0)="2f477322b1f8bc2e5c008f3d9daa0d5f8b7d7fd5418e112f0fa05716ad0fdd4366c98a98a50e82dec2715d8f0e23fcd99f89d9ca69d9067cccf15f6e7f6a25f0ac3e275a3a6f26010ff18d315be38d1f67f940eecfb52570284f003091ae9053c8fcc1bb930f2b4d6e9d6e3a8b8486e514760ca11f86ef5a112a5df5911775dd632d167f03108904a5b8aec6240ab5ae8f58ddb0e9f46818a446c04c186874e8a91770f18104cd92912264371663b4ecf515f682da85678399a8c6a8f6d5ac601c573b7fb8661f9998402da9350337978ff4839c0c0216", 0xd7}], 0x2, &(0x7f0000006b00)=[{0x1010, 0x102, 0xcc, "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"}], 0x1010}}], 0x4, 0x40) 15:42:24 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1}, 0x8}, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = accept$nfc_llcp(r4, &(0x7f0000000580), &(0x7f0000000600)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000640)=0x1ad, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000040)="e14b8a6b3b55554a21f988b4623e98373e5198801bb8fe9ff2b4ddaa3e62183bf7ad8b02c213242c9ee09cc8ecb5dab3d8e942e02cdfe349bb5e6a9dfe622dd7", &(0x7f00000001c0)=""/142, &(0x7f0000000280)="37b70934593e", &(0x7f00000002c0)="29eaba844da0dcc647549bdb82102d88b943499a46d06e9d6c1980080fb9bcaa91dbb9617333ae9e9cdbb33e3a59f5c49ba869d4da795fb1d449f2c1996f9818e11827ec1d446289f499fb149082886e6230785cfec9513e63b357d70a813de31fa4e6aeb3d7162fb9eea05b202806ada4e59785863fa982629800be5cca324b00c2db685a5ac9df4d048cdcc9adcfa197cae998b1b11d1d7a6dee0ff34c521a5c07a5a0b1bda26836bc7112edf8ef223de6bcf70fd397d79735f858d3d8a5ffa13d89024e975d1289c5f0e31b966fa25e7191d6f2b48adaca9f571d45764e43ce495aadeb724b966ed89e09", 0xfffff320, r9, 0x4}, 0x38) [ 817.970916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 818.021351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:42:25 executing program 0 (fault-call:12 fault-nth:33): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 818.271004] FAULT_INJECTION: forcing a failure. [ 818.271004] name failslab, interval 1, probability 0, space 0, times 0 [ 818.296990] CPU: 0 PID: 11417 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 818.304899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.314261] Call Trace: [ 818.316866] dump_stack+0x1b2/0x283 [ 818.320504] should_fail.cold+0x10a/0x154 [ 818.324661] should_failslab+0xd6/0x130 [ 818.328643] kmem_cache_alloc_node_trace+0x25a/0x400 [ 818.333755] __kmalloc_node_track_caller+0x38/0x70 [ 818.338690] __kmalloc_reserve.isra.0+0x35/0xd0 [ 818.343353] __alloc_skb+0xca/0x4c0 [ 818.346974] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 818.351805] ? lock_downgrade+0x6e0/0x6e0 [ 818.355964] alloc_skb_with_frags+0x85/0x500 [ 818.360382] ? check_preemption_disabled+0x35/0x240 [ 818.365408] ? perf_trace_lock+0x109/0x4b0 [ 818.369653] sock_alloc_send_pskb+0x57b/0x6d0 [ 818.374162] ? sock_kzfree_s+0x50/0x50 [ 818.378052] ? _copy_from_iter_full+0x1c7/0x680 [ 818.382742] ? __lock_acquire+0x655/0x42a0 [ 818.386989] tun_get_user+0x5d9/0x4190 [ 818.390900] ? tun_rx_batched.isra.0+0x740/0x740 [ 818.395659] ? perf_trace_lock+0x109/0x4b0 [ 818.399910] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 818.404859] ? HARDIRQ_verbose+0x10/0x10 [ 818.408937] ? __tun_get+0x11c/0x220 [ 818.412665] ? lock_acquire+0x170/0x3f0 [ 818.416646] ? lock_downgrade+0x6e0/0x6e0 [ 818.420810] tun_chr_write_iter+0xcf/0x180 [ 818.425059] __vfs_write+0x44e/0x630 [ 818.428785] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 818.433898] ? kernel_read+0x110/0x110 [ 818.437792] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 818.442916] __kernel_write+0xf5/0x330 [ 818.446814] write_pipe_buf+0x143/0x1b0 [ 818.450809] ? default_file_splice_read+0x870/0x870 [ 818.455841] ? __put_page+0xb9/0x2f0 [ 818.459563] ? anon_pipe_buf_release+0x237/0x2e0 [ 818.464422] __splice_from_pipe+0x332/0x740 [ 818.468757] ? default_file_splice_read+0x870/0x870 [ 818.473781] ? default_file_splice_read+0x870/0x870 [ 818.478806] splice_from_pipe+0xc6/0x120 [ 818.482969] ? splice_shrink_spd+0xb0/0xb0 [ 818.487211] ? __inode_security_revalidate+0xcf/0x120 [ 818.492424] ? security_file_permission+0x82/0x1e0 [ 818.497368] default_file_splice_write+0x37/0x80 [ 818.502135] ? generic_splice_sendpage+0x40/0x40 [ 818.506896] SyS_splice+0xca0/0x1230 [ 818.510656] ? SyS_write+0x14d/0x210 [ 818.514391] ? compat_SyS_vmsplice+0x150/0x150 [ 818.518977] ? SyS_clock_settime+0x1a0/0x1a0 [ 818.523390] ? do_syscall_64+0x4c/0x640 [ 818.527405] ? compat_SyS_vmsplice+0x150/0x150 [ 818.531998] do_syscall_64+0x1d5/0x640 [ 818.535902] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 818.541099] RIP: 0033:0x45c1d9 [ 818.544288] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 818.552007] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 818.559285] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 15:42:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ocfs2_control\x00', 0x288004, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000001200)="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", &(0x7f0000000040)=@udp=r3, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 818.566568] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 818.573853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 818.581134] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:25 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={[], 0xff, 0xff, 0x101, 0xe00000000, 0x5, r2}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r1, 0x0, r1, 0x0, 0x3, 0x47e38f58d351458c) 15:42:25 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = socket(0x25, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5a, 0x8004, 0x80, 0x32, r6}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:26 executing program 0 (fault-call:12 fault-nth:34): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003140), 0x5e3) r4 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[], 0x4c4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') r6 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0xffffffffffff5507, 0x14880) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f00000003c0)=0x16dd) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb735}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb739}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bcdb78b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32bb83b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe140}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a8c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ed0bf65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ac312ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7717da36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcc6}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x50) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000440)={0x0, 0x1fffe, 0xc2a, &(0x7f0000000400)=0xfffffffffffff801}) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x140, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21c4a112}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb0ef404}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d93b5e7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8d915b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ea72405}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5504ac70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fb8f57d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3226ad37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366f61fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f29811}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fc522b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fa89449}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x48000}, 0x40080) r7 = dup(r1) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0x8, 0x7, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) [ 819.162065] FAULT_INJECTION: forcing a failure. [ 819.162065] name failslab, interval 1, probability 0, space 0, times 0 [ 819.173506] CPU: 1 PID: 11439 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 819.181398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.190762] Call Trace: [ 819.193374] dump_stack+0x1b2/0x283 [ 819.197019] should_fail.cold+0x10a/0x154 [ 819.201355] should_failslab+0xd6/0x130 [ 819.205339] kmem_cache_alloc_node_trace+0x25a/0x400 [ 819.210462] __kmalloc_node_track_caller+0x38/0x70 [ 819.215411] __kmalloc_reserve.isra.0+0x35/0xd0 [ 819.220092] __alloc_skb+0xca/0x4c0 [ 819.223743] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 819.228595] ? lock_downgrade+0x6e0/0x6e0 [ 819.232756] alloc_skb_with_frags+0x85/0x500 [ 819.237167] ? check_preemption_disabled+0x35/0x240 [ 819.242191] ? perf_trace_lock+0x109/0x4b0 [ 819.246436] sock_alloc_send_pskb+0x57b/0x6d0 [ 819.250957] ? sock_kzfree_s+0x50/0x50 [ 819.254859] ? _copy_from_iter_full+0x1c7/0x680 [ 819.259544] ? __lock_acquire+0x655/0x42a0 [ 819.263795] tun_get_user+0x5d9/0x4190 [ 819.267705] ? tun_rx_batched.isra.0+0x740/0x740 [ 819.272475] ? perf_trace_lock+0x109/0x4b0 [ 819.276731] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 819.281681] ? HARDIRQ_verbose+0x10/0x10 [ 819.285756] ? __tun_get+0x11c/0x220 [ 819.289486] ? lock_acquire+0x170/0x3f0 [ 819.293477] ? lock_downgrade+0x6e0/0x6e0 [ 819.297646] tun_chr_write_iter+0xcf/0x180 [ 819.301894] __vfs_write+0x44e/0x630 [ 819.305618] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 819.310724] ? kernel_read+0x110/0x110 [ 819.314620] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 819.319750] __kernel_write+0xf5/0x330 [ 819.323650] write_pipe_buf+0x143/0x1b0 [ 819.327636] ? default_file_splice_read+0x870/0x870 [ 819.332658] ? __put_page+0xb9/0x2f0 [ 819.336382] ? anon_pipe_buf_release+0x237/0x2e0 [ 819.341196] __splice_from_pipe+0x332/0x740 [ 819.345535] ? default_file_splice_read+0x870/0x870 [ 819.350558] ? default_file_splice_read+0x870/0x870 [ 819.355580] splice_from_pipe+0xc6/0x120 [ 819.359650] ? splice_shrink_spd+0xb0/0xb0 [ 819.363889] ? __inode_security_revalidate+0xcf/0x120 [ 819.369091] ? security_file_permission+0x82/0x1e0 [ 819.374033] default_file_splice_write+0x37/0x80 [ 819.378805] ? generic_splice_sendpage+0x40/0x40 [ 819.383567] SyS_splice+0xca0/0x1230 [ 819.387302] ? SyS_write+0x14d/0x210 [ 819.391026] ? compat_SyS_vmsplice+0x150/0x150 [ 819.395616] ? SyS_clock_settime+0x1a0/0x1a0 [ 819.400031] ? do_syscall_64+0x4c/0x640 [ 819.404014] ? compat_SyS_vmsplice+0x150/0x150 [ 819.408607] do_syscall_64+0x1d5/0x640 [ 819.412610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 819.417811] RIP: 0033:0x45c1d9 [ 819.421084] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 819.428799] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 819.436074] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 819.443353] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 819.450630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 819.457907] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) exit(0x0) 15:42:26 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003002c59746d61703a697000000005000400000000000903020073797a3002000000240007800c00028008000140000000000c000180080001400000000008000640000000050500e6170ac77907c4e5a2f4ad"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000080)) syz_open_procfs(r3, &(0x7f00000000c0)='net/udplite\x00') ptrace$cont(0x18, r3, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) 15:42:26 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x1b8) sendmsg$nl_netfilter(r3, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000200)={0x1048, 0xd, 0xa, 0x5, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@generic="e986974921930e173882d3276ec1ad59302c19a0c1858b0fba89c0c4bad770f82850654a9888d025eba31b", @generic="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", @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x1048}}, 0x4048060) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 819.607389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:26 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000cc668b8ef0000000000000000000000040000000000000007000000000000000800"/52], 0x30) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000000c0)={0x8000000000000000, 0x4000, 0x3, 0x2, 0x19}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00025ed6de791977648d800800014000000000f8ff0080080001400000000008000640000000050500050002"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x11, "6ab9b5adcb2f4782e03ad272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340b14d105005646e6bb25b3256b30d4e1196565c5ff5b00", [0x1, 0x8]}) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r3, @ANYRES64=r4, @ANYRESHEX=r3], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 819.766306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:26 executing program 3: quotactl(0x1, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f0000001380)=[{&(0x7f0000000080)="1c8cccba846f0d34515466cf2b20829e75e06d", 0x13, 0x1}, {&(0x7f00000000c0)="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", 0xfd, 0x3b}, {&(0x7f00000001c0)="c3f104a6cf2b309d514fa382", 0xc, 0x4}, {&(0x7f0000000200)="46c96c9ad5049d2d814ca45a1d56aac02e2cb08946f2a0550067d862dd70aec0a06393b47de94ed2196deb978e42f45f19ded04c8bc7041024577d5d3e6caf7145786b10e81625b2fb92575fb634cedba782", 0x52, 0x3}, {&(0x7f0000000280)="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", 0xfd, 0xffffffffffff0001}, {&(0x7f0000000380)="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", 0x1000, 0x7}], 0x80000, &(0x7f0000001580)=ANY=[@ANYBLOB="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"]) 15:42:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 15:42:26 executing program 0 (fault-call:12 fault-nth:35): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:27 executing program 3: open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/exec\x00') ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept(0xffffffffffffffff, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x80) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0x0, 0xe8, 0xe8, 0x0, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x9000000}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vlan1\x00', 'vlan0\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[], 0x4c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000480), 0xa198) [ 820.071641] FAULT_INJECTION: forcing a failure. [ 820.071641] name failslab, interval 1, probability 0, space 0, times 0 [ 820.098272] CPU: 0 PID: 11487 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 820.106199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.115559] Call Trace: [ 820.118162] dump_stack+0x1b2/0x283 [ 820.121806] should_fail.cold+0x10a/0x154 [ 820.125964] should_failslab+0xd6/0x130 [ 820.129942] kmem_cache_alloc_node+0x25f/0x400 [ 820.134532] __alloc_skb+0x9a/0x4c0 [ 820.138168] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 820.143012] ? lock_downgrade+0x6e0/0x6e0 [ 820.147170] alloc_skb_with_frags+0x85/0x500 [ 820.151584] ? check_preemption_disabled+0x35/0x240 [ 820.156606] ? perf_trace_lock+0x109/0x4b0 [ 820.160855] sock_alloc_send_pskb+0x57b/0x6d0 [ 820.165370] ? sock_kzfree_s+0x50/0x50 [ 820.169263] ? _copy_from_iter_full+0x1c7/0x680 [ 820.173936] ? __lock_acquire+0x655/0x42a0 [ 820.178188] tun_get_user+0x5d9/0x4190 [ 820.182098] ? tun_rx_batched.isra.0+0x740/0x740 [ 820.186857] ? perf_trace_lock+0x109/0x4b0 [ 820.191106] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 820.196043] ? HARDIRQ_verbose+0x10/0x10 [ 820.200115] ? __tun_get+0x11c/0x220 [ 820.203842] ? lock_acquire+0x170/0x3f0 [ 820.207835] ? lock_downgrade+0x6e0/0x6e0 [ 820.211999] tun_chr_write_iter+0xcf/0x180 [ 820.216237] __vfs_write+0x44e/0x630 [ 820.219958] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 820.225071] ? kernel_read+0x110/0x110 [ 820.228231] audit: type=1800 audit(1595086947.083:209): pid=11489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16404 res=0 [ 820.228963] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 820.228996] __kernel_write+0xf5/0x330 [ 820.229011] write_pipe_buf+0x143/0x1b0 [ 820.261974] ? default_file_splice_read+0x870/0x870 [ 820.266995] ? __put_page+0xb9/0x2f0 [ 820.270716] ? anon_pipe_buf_release+0x237/0x2e0 [ 820.275480] __splice_from_pipe+0x332/0x740 [ 820.279809] ? default_file_splice_read+0x870/0x870 [ 820.284833] ? default_file_splice_read+0x870/0x870 [ 820.289854] splice_from_pipe+0xc6/0x120 [ 820.293923] ? splice_shrink_spd+0xb0/0xb0 [ 820.298163] ? __inode_security_revalidate+0xcf/0x120 [ 820.303365] ? security_file_permission+0x82/0x1e0 [ 820.308300] default_file_splice_write+0x37/0x80 [ 820.313059] ? generic_splice_sendpage+0x40/0x40 [ 820.317823] SyS_splice+0xca0/0x1230 [ 820.321551] ? SyS_write+0x14d/0x210 [ 820.325268] ? compat_SyS_vmsplice+0x150/0x150 [ 820.329852] ? SyS_clock_settime+0x1a0/0x1a0 [ 820.334275] ? do_syscall_64+0x4c/0x640 [ 820.338255] ? compat_SyS_vmsplice+0x150/0x150 [ 820.342840] do_syscall_64+0x1d5/0x640 [ 820.346738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 820.351934] RIP: 0033:0x45c1d9 [ 820.355121] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 820.362830] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 820.370098] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 820.377371] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 820.384649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 820.391925] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:27 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x1) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f00000001c0)=0x4e31) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = socket(0x25, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}, [0x4, 0x0, 0x5, 0x6, 0x8000, 0x0, 0xffffffffffffffff, 0x4, 0xe8, 0x80, 0x1, 0xffffffffffffff2f, 0x91e, 0x5, 0x3]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={r7, 0xa8, "3b61b3a86e48508a4eb2b5ba9a32e1092f4b7dfaab0a600aadc1ab1da0e8d1ad0c0963d04457a30defad0550d51b726ee856c665f9dd0ea0b2bf6794da9bc11308c3dd8d1e8d7326920a7d9d14ab253261721cce6f012cae4822c6c8926644addff2a6635e053a5621aba443722a19cf1ac57ef29eca604d7964cea441388e48ab8c05193b8667049525304be3be56de0d5e4e36239f80680be0d68591ffd8ee3608ce6d0f5302d5"}, &(0x7f0000000040)=0xb0) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x0, 0x5}, 0x20) 15:42:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000e40106012d000000000061703a697000000005000400000000000900020073797a3000000000240007800c000280080001400040000000000800064000000005050005000200000005000100060600"/105], 0x1}, 0x8}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) kcmp(0x0, r3, 0x0, r4, r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYRES64], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 15:42:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) r7 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0xc5) write$binfmt_misc(r7, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYRES64], 0x5d3394c) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x804) [ 820.614459] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 15:42:27 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRES32=r1, @ANYRESDEC=r5, @ANYRES16=r6], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 820.765207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:27 executing program 0 (fault-call:12 fault-nth:36): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 821.036855] FAULT_INJECTION: forcing a failure. [ 821.036855] name failslab, interval 1, probability 0, space 0, times 0 [ 821.058878] CPU: 1 PID: 11524 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 821.067019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.076382] Call Trace: [ 821.078986] dump_stack+0x1b2/0x283 [ 821.082623] should_fail.cold+0x10a/0x154 [ 821.086780] should_failslab+0xd6/0x130 [ 821.090892] kmem_cache_alloc_node+0x25f/0x400 [ 821.095483] __alloc_skb+0x9a/0x4c0 [ 821.099122] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 821.104051] ? lock_downgrade+0x6e0/0x6e0 [ 821.108207] alloc_skb_with_frags+0x85/0x500 [ 821.112732] ? check_preemption_disabled+0x35/0x240 [ 821.117927] ? perf_trace_lock+0x109/0x4b0 [ 821.122173] sock_alloc_send_pskb+0x57b/0x6d0 [ 821.126799] ? sock_kzfree_s+0x50/0x50 [ 821.130693] ? _copy_from_iter_full+0x1c7/0x680 [ 821.135373] ? __lock_acquire+0x655/0x42a0 [ 821.139620] tun_get_user+0x5d9/0x4190 [ 821.143532] ? tun_rx_batched.isra.0+0x740/0x740 [ 821.148294] ? perf_trace_lock+0x109/0x4b0 [ 821.152547] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 821.157485] ? HARDIRQ_verbose+0x10/0x10 [ 821.161562] ? __tun_get+0x11c/0x220 [ 821.165293] ? lock_acquire+0x170/0x3f0 [ 821.169285] ? lock_downgrade+0x6e0/0x6e0 [ 821.173456] tun_chr_write_iter+0xcf/0x180 [ 821.177702] __vfs_write+0x44e/0x630 [ 821.181431] ? __schedule+0x8ae/0x1d70 [ 821.185323] ? kernel_read+0x110/0x110 [ 821.189218] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 821.195900] ? pipe_wait+0x171/0x190 [ 821.199622] __kernel_write+0xf5/0x330 [ 821.203517] write_pipe_buf+0x143/0x1b0 [ 821.207498] ? default_file_splice_read+0x870/0x870 [ 821.212514] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 821.217880] ? anon_pipe_buf_release+0x216/0x2e0 [ 821.222640] __splice_from_pipe+0x332/0x740 [ 821.226967] ? default_file_splice_read+0x870/0x870 [ 821.232079] ? default_file_splice_read+0x870/0x870 [ 821.237107] splice_from_pipe+0xc6/0x120 [ 821.241169] ? splice_shrink_spd+0xb0/0xb0 [ 821.245400] ? __inode_security_revalidate+0xcf/0x120 [ 821.250599] ? security_file_permission+0x82/0x1e0 [ 821.255639] default_file_splice_write+0x37/0x80 [ 821.260399] ? generic_splice_sendpage+0x40/0x40 [ 821.265157] SyS_splice+0xca0/0x1230 [ 821.268884] ? SyS_write+0x14d/0x210 [ 821.272694] ? compat_SyS_vmsplice+0x150/0x150 [ 821.277278] ? SyS_clock_settime+0x1a0/0x1a0 [ 821.281698] ? do_syscall_64+0x4c/0x640 [ 821.285672] ? compat_SyS_vmsplice+0x150/0x150 [ 821.290427] do_syscall_64+0x1d5/0x640 [ 821.294322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 821.299513] RIP: 0033:0x45c1d9 [ 821.302701] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 821.310510] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 821.317913] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 821.325185] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 15:42:28 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x7fff}, {0x45, 0x2}, @rumble}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r2, &(0x7f0000000040), 0x373) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000800005000400000000000900020073797a3000000000240007800c00028008000140000000000c000180080201400000000008bc33ca6100000505000500020000000500010006"], 0x1}, 0x8, 0x0, 0x0, 0x8880}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x81, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r7) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x4, 0x90041) [ 821.332455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 821.339722] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac [ 821.417717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 821.427007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:42:28 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 821.475860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x4008000) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=0x0, @ANYBLOB="00082bbd701cfadb2000180000000c00990001"], 0x20}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@loopback, @mcast1, @dev={0xfe, 0x80, [], 0x3}, 0x7f, 0x0, 0x0, 0x100}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xd) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x40059) clone(0x45802103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000100)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000040)="525e1aad02ba40ae62d563060bfa259fabcabd3e2000ca881afc6409fd8036984176cd3717cbfe55", 0x28}], 0x1, &(0x7f0000001f40)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}, {{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xfb14, @private1={0xfc, 0x1, [], 0x1}, 0x81}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)="6147017973cd172edfc89b4d1620671add0c47e1a7d819c7049c0864680adbf2ae90a4620f698586f214f4c66bd3fcd69bd83d6fa6a7ebe6f6c52f162a88739fd8b9b767a70bb8f6481c29a46fe1b24afc310c0c2bf2bc4baf0131ca7dc210806c97249a951f8f8da7d58e065ed3483f5f4f603762c247db3f2e3b714b5d87e0f651e56fe92a720fb84d1677d550250209b0a4e128b562f83bc1a6f36a67541f0601f12f776c4acfd223682a4692dd8d197a9359c15a73594ffc691ac5512502890014a2917880627ea03de079154b94d3bafdaac844eb58", 0xd8}, {&(0x7f0000000580)="acd044c75361f15488434967f29e4c92e4640c278c0e59bcd8d78aa64909d82a2e592d2f1d6fa78093954fe767b5461d33e2ad8f9ce7d1d721a9e10f389bd8b3ea82046bb5b9821a63bdbc44e5e9e8218b35860adadaa63237abcc3b22b50acfbe48c995", 0x64}], 0x2, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xd23}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)="b78aec366c3177d0ad42919dd16c0f5b7c68359f5c763aa4ec8874bc14f74e4e13ee31518f9f9984ce471326bda8b7d77d217fd2c9c5afacc524e571d359c0544ef57bd446906ba6cd", 0x49}, {&(0x7f0000000780)="e3143738237d7d401388d8d71003baf1a5c209ca70a8e0d8abc8aa39fe369562e432f5fc99337e78ed36528dbf07c0235d90d8ae30e9eaf5b2b60beaf2ca0da1a0b65da74f73edc3eb3eaf224a478cd8e1d7d53b93a4ca40706ba5276547e96efd43ea346a1b9f1bb915cf613c903917ddee14e44a", 0x75}, {&(0x7f0000000800)="032bc7e273fa69", 0x7}, {&(0x7f0000000840)="df76b6c259bbedd51e47799ba17b8288ef70", 0x12}], 0x4, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x215}}], 0x30}}, {{&(0x7f0000000900)=@generic={0x15, "c96b2c80071142f2e9783a3c9743a39a883d798b10bb27f59ad43c53c35bd335ffe0d595e26f7c2a66c74a377b8861b12bbb9e393509b46068ba280c24a701cb8d64b46fcdc53da97638a762f6c256f17eff4b7d9ffef6ad9fc3537c263a3aa0107933c7c5cb520c47725c20176f531a29078550a6afd71b49f7253119f5"}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000980)="670b518095f0c2867890c9b8640486453ba76baa90e91d1d5f0af9cbfed11723a876229755ed32d08caf63c21f32a3324895e3a1345a36bdca29ee47fe118fbb6a97e8bbdcfc332a1bf50f4a36c1a633003c4fce6db4d3708f35d4eb", 0x5c}, {&(0x7f0000000a00)="5b4768540eeca052e146d387f45e53591296baef8f29876acbd030108294359305da602d9f0ac34407d038c7177e36734d3cb9a3eaf6dd6b7ca5f150c5bdfe45f9be70faa44880d05b462d9d02056dabad11b897794ce9af91e0fa34e7629029000a93b524a6a277c10c6c37f7f92bf73ce6ea25619fc24bb50df84968ec93ef4902088c3463de179400beb8d70c0d20d4af2ffb6aaf83811649a98b2c68117856983fd70067bbe27cf4792d1b452389a5d9888a234a5ba06e4c9c753a8bbec5db9430233ff12054c3eb02866eaf12084f4726f462aadec509e1", 0xda}, {&(0x7f0000000b00)="68e23b6da2f175bc4dfc056fbc00bf502b30068b559d1661a8124ec1ea23b633a8c79a5563e927448023c0be635943768b746581abba5618fa2a4f742b8e6060d6362995a63a852fff952d9130171a7f7fd71fc8", 0x54}, {&(0x7f0000000b80)="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", 0xff}, {&(0x7f0000000c80)="3652f7bb1e5e18900e938a5f58b1db448c4aae9b54aaa7a09ba04a94e64f2f5fc1923383c58b19d7382b25240590b655e4fee5ea5cd62d6cdfa0f2d78257df78f5b459f3433da20b791e5d82a5028b08ca09b24a676a928235b29531e7e223f5b694a27a9d165ae23624cbec546277029f946197f55e975a829af46e4e98f80e8008afb3c5b96dcd81", 0x89}, {&(0x7f0000000d40)="40c59adae0e2f05cd8947425a0e6bfe3980065f6e63910fbae77dffaa8d40c4b08c78baff64a748fa1fc49359efdf6ff107e28852b33838fac7d4b96f6c6ffcbeb53304ce8", 0x45}, {&(0x7f0000000dc0)="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", 0x1000}], 0x7}}], 0x4, 0x4840) 15:42:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x4, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="07007fda1a69a651738cff"]) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:28 executing program 0 (fault-call:12 fault-nth:37): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:28 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/189) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10500, 0x0) fchdir(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r5, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x7, 0x200, 0x9, 0x43, 0x7, 0x7fff, 0x3, {r5, @in={{0x2, 0x4e22, @multicast2}}, 0x6, 0x1, 0x81, 0x1}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r7, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x0, 0x2c00, 0x1, 0x3, 0x0, 0x1000, 0x6f}, 0x9c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1a, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2], 0x1}, 0x8, 0x0, 0x0, 0x80}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYRESHEX, @ANYRES32], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 821.969881] FAULT_INJECTION: forcing a failure. [ 821.969881] name failslab, interval 1, probability 0, space 0, times 0 [ 822.006841] IPVS: ftp: loaded support on port[0] = 21 [ 822.042775] CPU: 0 PID: 11562 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 822.050702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.060060] Call Trace: [ 822.062661] dump_stack+0x1b2/0x283 [ 822.066305] should_fail.cold+0x10a/0x154 [ 822.070469] should_failslab+0xd6/0x130 [ 822.074452] kmem_cache_alloc_node_trace+0x25a/0x400 [ 822.079565] __kmalloc_node_track_caller+0x38/0x70 [ 822.084505] __kmalloc_reserve.isra.0+0x35/0xd0 [ 822.089184] __alloc_skb+0xca/0x4c0 [ 822.092821] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 822.097670] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 822.102610] alloc_skb_with_frags+0x85/0x500 [ 822.107029] ? __lock_acquire+0x655/0x42a0 [ 822.111269] sock_alloc_send_pskb+0x57b/0x6d0 [ 822.115774] ? HARDIRQ_verbose+0x10/0x10 [ 822.119850] ? sock_kzfree_s+0x50/0x50 [ 822.123742] ? _copy_from_iter_full+0x1c7/0x680 [ 822.128414] ? __lock_acquire+0x655/0x42a0 [ 822.132655] tun_get_user+0x5d9/0x4190 [ 822.136561] ? tun_rx_batched.isra.0+0x740/0x740 [ 822.141318] ? perf_trace_lock+0x109/0x4b0 [ 822.145673] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 822.150620] ? HARDIRQ_verbose+0x10/0x10 [ 822.154685] ? __tun_get+0x11c/0x220 [ 822.158404] ? lock_acquire+0x170/0x3f0 [ 822.162381] ? lock_downgrade+0x6e0/0x6e0 [ 822.166540] tun_chr_write_iter+0xcf/0x180 [ 822.170778] __vfs_write+0x44e/0x630 [ 822.174493] ? __schedule+0x146a/0x1d70 [ 822.178476] ? kernel_read+0x110/0x110 [ 822.182373] ? pipe_wait+0x171/0x190 [ 822.186091] __kernel_write+0xf5/0x330 [ 822.189989] write_pipe_buf+0x143/0x1b0 [ 822.193969] ? default_file_splice_read+0x870/0x870 [ 822.199073] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 822.204453] __splice_from_pipe+0x332/0x740 [ 822.208787] ? default_file_splice_read+0x870/0x870 [ 822.213816] ? default_file_splice_read+0x870/0x870 [ 822.218840] splice_from_pipe+0xc6/0x120 [ 822.222909] ? splice_shrink_spd+0xb0/0xb0 [ 822.227151] ? __inode_security_revalidate+0xcf/0x120 [ 822.232347] ? security_file_permission+0x82/0x1e0 [ 822.237283] default_file_splice_write+0x37/0x80 [ 822.242049] ? generic_splice_sendpage+0x40/0x40 [ 822.246813] SyS_splice+0xca0/0x1230 [ 822.250545] ? SyS_write+0x14d/0x210 [ 822.254259] ? compat_SyS_vmsplice+0x150/0x150 [ 822.258838] ? SyS_clock_settime+0x1a0/0x1a0 [ 822.263248] ? do_syscall_64+0x4c/0x640 [ 822.267227] ? compat_SyS_vmsplice+0x150/0x150 [ 822.271820] do_syscall_64+0x1d5/0x640 [ 822.275726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 822.280920] RIP: 0033:0x45c1d9 [ 822.284110] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 15:42:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e00037a5a86d4599c3f1a697000000005000400000000000900020073797a3000000000240007800c00028008000140100000000c000180080001400000000008000640000000050500050002000000050001d341270b5c0006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x10, 0x1, 0x19, 0x10, "a5ff98a0ecc6b0dbacc184b83f71d07a33c01f5fe56640fe56d6d9ca411de074665894a7ca940c303e493b9064d1dc5f8f70050181e1279581fe600d830e4df3", "d6c1629987068d13df11338b159f002982f75cba2149c2904727af70f4c8a06c", [0x7, 0x3]}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x225ce332) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 822.291826] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 822.299101] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 822.306373] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 822.313648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 822.320924] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:29 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x2, &(0x7f00000001c0)=0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x225ce332) 15:42:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x52) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18100, 0x0) 15:42:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0x200, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'xfrm0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'xfrm0\x00', 0x400}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) r7 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x101, 0xc2002) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r6], 0x52) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) 15:42:29 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x4, 0x0, 0x4}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = accept4$unix(r4, 0x0, &(0x7f00000000c0), 0x1800) vmsplice(r5, &(0x7f0000002440)=[{&(0x7f0000000140)="747a523fcf183583ffd0fc", 0xb}, {&(0x7f0000000180)="c291509cccbd3ab7d0ef87acd373bc0ca75062aaca2b38889c635d5dd8086f37cd3f08c4cf6c7f42da1813ccf090945d6f1692546fb17d9e0861e87fe763a652dab68b11879af8de590e90406c8174c6ee96f600", 0x54}, {&(0x7f0000000340)="1b1261323cb607bffff40dfe3648741a6877b336ab3d9c37d2054a607907f03f0981a658be3facc83c7b941b65907f993597312732a98771591891108a83243e5703d6189b5d4b48ebfd61e35fc762c9426a9897366bb336a16643fde33fbb1f923fccc4a062ffcc60ae0aa6f33428d89c32d4db318b111bd23a29b50933d4de7c10059640db88d7b6c5bd2805290601fe3a9fcee688ad0cad0d930e4b99c2e1579a70971f0e9b383cc2d631fb4b4feb6ba08648c4fce6ea1cf8c2607e423e3bb9ce4f3fbd3c5ab214f4c70685827b8c8b31114d76d4def6c13fdedac96e5209e4ad704468dc43f0bb7cf42fc86ab3f9b5f6713706c61bdbfe7e65b620c021f0959c2b83aa1f7eca6490a56a246e94fad721dacbfa9f57dc79196bfbf6864b86bd96239aa2e2f55bf4cb3eb30e444a0e8c0a8f630a3666603c0cc78ed6771f70017be02fee4739d011be0167631f5e4eb64fd1a8d665e7505b64a2641f4dc3d4326da54d51b3a10814c9695e1f18c9a8e3e08360dc8a08271a254252ddb2f066f9a190061b42dc9fd75607fbd218342f36db5100756b4008973dc1788483996b8085a8b624ab9456e9685ed73da0dfec98bf0f6df9d2fef3c121d43362c7749430456bee73f2da39fc4507cb1272bf2f06330802e789e9a211379529876eb3fca61b273b88bbfc4f0029a160de746663cb95e90d4b82c42351c7f16e810839cb2e39f541340246709e8fce0282ddfbd8c18524d8571ddc8b71b4f24f354fa71d973b7e37a3020e8eaab8212fcb62058d60d5a9f08b327652ca0a5d9322c0c2e816edf20e4b6ddcb83af297d816716ffdc90f0c209b70bcffbfa8b40203bd1d7a6017810d5edd25e6456862d9ac93672c4ce6a4508beeea740e5e29e3650f58d32a8a3942a0885244a2af40a8e25d4c25fe2bc9c3b0a2b335b76967917ff6578c330cf4ec5dc0b32b05f820213fe74ddcd6181ddf22d7e235bc2c664216f9c0722b6584b0d0f99e5ea2ccc7c7678ba010c705219d79850eac7425fa10ffe6513c3f0bc949dd6f609f67cf609a528e70b13745ea0ec435c7aa5d9337ecfaa155befd3b2c081ce7ba00e628f9ecbad1f4a56cb582b93e1aed626860f04d44c119b5a710c5e115b2cff07f39ba78d1b1dc324ea988f50c82f8d0ce8893eb9e1d6cea3bd01a12ccce2332cfbe3926fdd6b978de8825f9d56748da37a0a8b89938610599f593b640193a20906413d97097b7f59b3be27bacb6b99effb0645960f81925c36f8046338049df3f4c113828af1ee4deb9ee437806e88f50693d171f01cd4ea1de5bb70ae973c5f4b9d1cab1dd450edb04b4ca5245110e90a85d406e03bb7f4a7c666f92c3dff6ff268a855be0a2a353afc5603ad820b984e41fa57a57f29ab2570b3de05524e5037c21cc2934158717910b3fb41d77f8dd2947e51eecfaf037e0fc0eba588bb012bc6b758dd98dee7d0da926da1ada7c22ba5b5cb42e6524ebd8a3f6ab1854eaa7702c02bf04f11fe8b012ac6bfe55e128146242e785ae824d76e410b009d2f9fa70e8725f0580378024de659490f274f9c02dbb2e36a1e8b1d3ca59fc1bd7e66a06a22b969510238bbdcdebd41ca4acd583b4482917b54f311a73867ebb44645721e02fbc65867afb6c600b79aad314e99ddf34f8ea9834d2d1c83ab054bf2381e84254888fff965dadfef628c6e8326da9bbd488cf58a5265d1112a7772c5777f38109d3d6300865eeccf25d7d38ed54280af095b3b4cc2e8cf165e88d1dc368c58d0102c77df0c67b1abce0938bdb4f6a0ea0c381c049930b7d690067497cf1fe4a87cc6cc8d00955bf1fe59c8e48dd79fe816e4d4cb95301bd791f79787c49ea82c3e7543e2c290c751c7bb9c5c80fa2802be81140312bb2f9f01bcc9ebcb088afb5d15737e5c83884a94677b32f8c325de313b4c37e73ad2cfa4d4e91d89cf3ace78d22dc0e9d348d0873ea7e3f475a53e7edb04ab733509fe39da30d24e690fb85fa054903f8b90f7f09768b13ecea0c7f4c2850c14a157e2cda9cdca2d323c3dd0ab26277bdf7ca9da1f92ef6c32aa1dc8cea94988cf1633e1063e7799780822c6c40c5f3e109d9bdc861152b08db4ce101edfbf378e634ff73a65c773a656132a0b39892861ccf696bd11c6d2da6ddac03cf151ece213325a553597f942035bf7e088f9c4d48d5cfaf1176d9254e3eb88b88ec124c70c452e2c5928d6e68ff596211f19f681861f8513f32fd61688ffd1adaeff084354955729f9fc844316faa60fe9957c237f1ae0e92c47be6f86dcda1cb476fc5c5463e01d128c6ecf7a7ebbca1a3408b1dd3071427cbb493f84f6015f347c7e6402a3820c7d426af735c13ebdecf326846fd0ae1f285353848d3e20ba888977addcac088db6f8584d55c6b84cd60d0e6287b12bdcc11d66300dff214ab9a144b8750c7b878e099fc665638719d0d20565add375bb50fbcfc4bc9ab44218ff60e548f57780dc56c4de90a08478867f65fd8f1ada947bb45151a99591d38e86b634e5680be2bf59e566ffb653b026673cbcd185bec8e86c62850f5bd8fd6aeb5f95e5a7d47db68edcca758128ebb905100196221cf1bb3e6b67858940d16dd202b5a7d4a856e039bc2ee6a91c498cab56c9ef129e9fd7aef3353d2322b20472d623fa1f116570fb67a30803a3a699c51c485e42cdb901a063fea791639095af7424896f2808da4149e16bb37b5542070d35c5da5f2e690e4c8309f45242b0ffbe4613719d680af35bee8fea43a428d50d0ff8610383c0bfcb8e1b87020484bd47d1323c8614fa5adc90fe86c14f0b93748d88fc4b137b827f3504d44e8bb554171f53d7bdb68daf64df8d0c3b08e2587b01dd499cd0421b257596856319849b20bde04cc4a86ea8e69d8f8a30b80b0a5622eecf779ed22b8c9f84b8750d09bf2652f0c29bed3071d47ab7c62fd54ca8fbed21b23de5c0771c819885a0089ae09383519d6c82b92ee4c17abf948a6a9643cfbc4e91ca2dc30429f9a6d60d9b699d79fc4977d427c0f106912503bbbbd9575380f50038c313504b8e90bc2267ce9c189d7c7f26d1d886e3e44dc272aa8c30fa441e832b38a057c2e13d511a545a4a61db2cf4592aed51538dbff44bd83d232d61045ac9bfc962e2cb69f6f81b15316173d88e26002f7f460cd7511c489d6f1511a37ef2c0339a61870fd5f5bb7a0787311b08b865d689a4f633823b7edbd886e001f6d619e123f20dbdc6c39269f657add5d753d8aa587b3c5ec2491682fdb86f1c2985b5c4d8f48ca0c4fa595fb2cb3f6a47059861e1f2030bc245ef0f24c426767dece9004681056c0848c4bd8e44e299430a4c9545ad222d0e268800ee12ae3c31d8471a809e571c93130110db3937b82151141339f3d05d670c74d8167effab0250409a55f0527a127e970b6f3cfb5562b6c79fedc5dcb78c653787d0324aaa6e2a554d401c7d352f2054bd31d8deec756354e4df4e6bfd86edc5bb14398479cccc081e228e76b06208beae611d3c8269dbc5176c6ae66f0090bd376d8fa431918fc6741e26d77067e6bbbcb1f87439ac59341a24f615025527fcc8bfdd51803961c6a26983a94876432b3d21fbf88d69f1d965cfb3dc4151ffa8af69eec8b1599803942874024e5356f66e642fe4e52113d09265c77b4dffc09dcddd3bc77a8dc2881796e6c64187879a061e789bd42d0b8c4ddfc39d4074ea914fbf6b9e7f798515720adc22953682c1a8bede6f62d490813da8001897c49e1d6733b9f8bf47037ca0a2bebc556a60cb9b2b17318b9842d215150db6824f6f1792f890ff394b232dd421865b7cb02755cb0b31cfa73d27594a0ebacc01bf89c6987cee2770b69336591ed8f5420b224763250072fc4df49cf914c3b38a6c1dd21601e2023cbb2cff1562fb0b9291686f594ffafc135863685d58026499e31262fca6f606f754d5099bed0623761ca972472a9afa55e9545f1805e7339d945e704e5a92f0534729bb3c589b1dd3497d04da00ddc746e769b782ea254b535aabe4657375d363e7f1476af3fcc75143ab4a95550e46c032e39901cc9d2a587d0653728d0e8a82ba36ecb03fed715404075497a76d4165d3522f6ded472af4de5d15bf512dea88e88a655a2224b0dd822dedd02273243fb4ef656e92b5ba8e9b497fe05f418daf78715318a61a69cecb141ca5e7eb3a423387c8637143a35993482833eda96e018f8441d9d865d75f24c09a91c1b4a658c1cab6605cef365c4e8ffa6dd214bb854c8e8ef2f9773dc5f9032941430d3774f372ccecdb3fa28807d8e04f8b8aa56a3dbda0a869d54783ca47cfa4c585e28c6ab9c9d8ea5903ba53e2548670af04c721e17271968c97a5a6530cd16b97155a2f0c3117a73efa1e6406a46259a51f58d6adddd5b9b195a34a1658966df7bf7fbd2c1b7c6108ff2c7940740a72b69e8021f995f29565e590aba833856e859bf48493acbc640c2ed343aca6be86602eaafdd6f647e1ff858e4bd4cb79ef46031bacc91cdb21ad72a0ae2ffbcb0be9eda1f24cf70c5558f74206354f8e58fb15baab04cf32dc336aeeb96c63cc01766ab3c758f9d33f93e8e9ec64e0d7024d0c329200b1e9e9e0fd9bfd4227ce5bca63fd5c3e7b592f193490cd1a1b157503a053d82ea393f0aff97d35109621d2423682a81146ee6326ac62af5da3fb714b21d29196f7af6325e7070d90e04c92fcf6a92f9102d8b1df9b1edcab458996f3ab52bbceda87354a0703c378690ec37dd3c0772e219402a2c19b86d35fe45d55c867cc3efb35e81e5b88b5bd030f9c74ef1454b6b7f872948f1bd5eb87ae956d0c77e471019be9d90379ff1bf68e185ed8d31e3fdff54781ef68405886a78c4db70604b569d07d2d52e02a203a3effb2a9eb0cf43400d7f90ec65be8b540d952ba20859b4eb3997fb1644869a7dc9ce38dcff197b4ff105d977ee60e040b3942dc3e05f6c6e71a6a88c746f21431f4fcd5f4cd076ae41e9ace8fc9db125a417ffa28dcc19d0e0ee997dfea3cfa7a5702b318c52b3749be6a7ec49141b68e0d1c847a0a6074c83206804faac79181a4df4cb166d360c0153a851bd7a832b1f13945c863d6016fc7e83be99ec70917ae4278f7e14ab1c40e631ff006fcb9bc0bfae2c743340b0cc3b52ac9647712db7f02c006156ce7551b2fa225d07561d8857ef159ce1e9fa241864ee2fe3a71f85daa243e6956f2a828817ea9ccfbfd52253da8f7ef4f5777344190436ef4cae05c9ba68da3e29b138212c09d0672b69826bf32671718609519c7258806dff327f777d2dc2a2b9de4297f005d1c7bff165228d80253ae44290b4f20eb2b9ccc8a7b57edda14fc4ea8e6aff8d49c027c0388080872cdd9e29c91914b6cafb5a62e442f11fc65d3cde267062bae0539cb43657cbd5e1d946e138d29492830f51db7f477c05bc30433b45c1af06ca49baea3dea111eeb218bd4ab102d6725e0f668e7c652691f6df2f3078fc88f8f3a9dc7e2b4e96511694eeb27407e04500ad1e9bfe427d9ad88a226e337027ca2708628426a0d5519d1d1c4a8af236bfb6b0c1f4c58c2810fad0e74171ec951b8e43b408ebf8fceffd43ee37f22f85422225fab0dff8fe201600e36a29f5dd1726ced92836250362ccaf287331ed9b864a0982530d15c3872ddf10d329a8e2fb738e7e889503efc75d3bb777bd2cf8ff79030a17652b0be64223939baaeab77143a24458d8225df29f7eccbbc6398012f4c6316bc621f31576f1eaba859057a75565067f8", 0x1000}, {&(0x7f0000001340)="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", 0xfa}, {&(0x7f0000001440)="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", 0x1000}], 0x5, 0x0) r6 = socket(0x2a, 0xa, 0x8008) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000002540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xa16c}]}]}, 0x2c}}, 0x40000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0xffffffffffffff8b, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c000180090c000000000000080006400000000505000500020000000500010006b6cd3409c2d4f7d9f914a8890ecfd30f622f1b51f222f9e469d6d8a07ca297332b981df2855153c4cbd9c2d7b70e1763467d434abc4f326e13279d344de1487c0942098902b4d76507877366d78c705538d6b9eeb3555d75195e1b12"], 0x1}, 0x8, 0x0, 0x0, 0x20004010}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:29 executing program 0 (fault-call:12 fault-nth:38): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 822.827932] FAULT_INJECTION: forcing a failure. [ 822.827932] name failslab, interval 1, probability 0, space 0, times 0 [ 822.839784] CPU: 0 PID: 11594 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 822.847813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.857157] Call Trace: [ 822.859740] dump_stack+0x1b2/0x283 [ 822.863358] should_fail.cold+0x10a/0x154 [ 822.867496] should_failslab+0xd6/0x130 [ 822.871549] kmem_cache_alloc_node+0x25f/0x400 [ 822.876127] __alloc_skb+0x9a/0x4c0 [ 822.879737] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 822.884666] ? lock_downgrade+0x6e0/0x6e0 [ 822.888800] alloc_skb_with_frags+0x85/0x500 [ 822.893189] ? check_preemption_disabled+0x35/0x240 [ 822.898186] ? perf_trace_lock+0x109/0x4b0 [ 822.902403] sock_alloc_send_pskb+0x57b/0x6d0 [ 822.906887] ? sock_kzfree_s+0x50/0x50 [ 822.910770] ? _copy_from_iter_full+0x1c7/0x680 [ 822.915425] ? __lock_acquire+0x655/0x42a0 [ 822.919655] tun_get_user+0x5d9/0x4190 [ 822.923537] ? tun_rx_batched.isra.0+0x740/0x740 [ 822.928274] ? perf_trace_lock+0x109/0x4b0 [ 822.932491] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 822.937414] ? HARDIRQ_verbose+0x10/0x10 [ 822.941470] ? __tun_get+0x11c/0x220 [ 822.945179] ? lock_acquire+0x170/0x3f0 [ 822.949146] ? lock_downgrade+0x6e0/0x6e0 [ 822.953324] tun_chr_write_iter+0xcf/0x180 [ 822.957544] __vfs_write+0x44e/0x630 [ 822.961247] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 822.966332] ? kernel_read+0x110/0x110 [ 822.970201] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 822.975382] __kernel_write+0xf5/0x330 [ 822.979270] write_pipe_buf+0x143/0x1b0 [ 822.983234] ? default_file_splice_read+0x870/0x870 [ 822.988240] ? __put_page+0xb9/0x2f0 [ 822.991946] ? anon_pipe_buf_release+0x237/0x2e0 [ 822.996686] __splice_from_pipe+0x332/0x740 [ 823.001351] ? default_file_splice_read+0x870/0x870 [ 823.006359] ? default_file_splice_read+0x870/0x870 [ 823.011367] splice_from_pipe+0xc6/0x120 [ 823.015418] ? splice_shrink_spd+0xb0/0xb0 [ 823.019634] ? __inode_security_revalidate+0xcf/0x120 [ 823.024806] ? security_file_permission+0x82/0x1e0 [ 823.029720] default_file_splice_write+0x37/0x80 [ 823.034474] ? generic_splice_sendpage+0x40/0x40 [ 823.039222] SyS_splice+0xca0/0x1230 [ 823.042923] ? SyS_write+0x14d/0x210 [ 823.046626] ? compat_SyS_vmsplice+0x150/0x150 [ 823.051198] ? SyS_clock_settime+0x1a0/0x1a0 [ 823.055606] ? do_syscall_64+0x4c/0x640 [ 823.059569] ? compat_SyS_vmsplice+0x150/0x150 [ 823.064133] do_syscall_64+0x1d5/0x640 [ 823.068005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 823.073180] RIP: 0033:0x45c1d9 [ 823.076358] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 823.084048] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 823.091298] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 823.098547] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 823.105796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 823.113271] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:30 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'nr0\x00', @dev={[], 0xc}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x6}, 0x8}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:30 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005001300000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r2) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)={0x2, 'bridge0\x00', {0x2}, 0x8}) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0x225ce332) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 15:42:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x200c80627fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) 15:42:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0xc01, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffed2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x11, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000180)=""/17}, &(0x7f0000000240)=0x78) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:30 executing program 5: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f00000001c0)="6f3459d8890ab9c3eb3920a9f24204cdb5a7ae4e3ac5e7ac47f307f6cff3a9831ce877f6625c23b20e8ff4159da56c6ea66a7655aba31c021565a3e4c9c55540c63f93698783e787791d2bc68378fa3030dcec4ed152b80558b29dca81e467c0311c5884fab8c958006369f405f45913fd59fc1e387e7498fb2e4eb612b459a75aa1f58c0d6312bb6eabb0ff2ae465ce3a549015396eeb1a0c198a0844d1", 0x9e}, {&(0x7f0000000280)="d11b6acb4fc81898252caae739d6b1c93db8a3beb290de6be7cae38fc2f98b1ab85a0566906410fd8c693a666d6f1cd18e40fb57678c537ce2352ecbcf7b8c07c4be63d26d073c3162873719126e1de11af66c7348d34f21e2490fa64171ae7dbf778603168f73b7aaab8ac489e8354371c048f5710ef4fbd98cc70bd50cc6e7ff16b45d2ed74356297af5b944b570e74933", 0x92}, {&(0x7f0000000040)="38169c787951913d6b018b61d15620ae5d09dee5bf6fe5cfdc00cd9526b03cbf2cf5445d7f0cbdd0e3a193", 0x2b}, {&(0x7f0000000340)="27080006fd8e2c7481549115256e1abcec1c09e0ab5ff69a13a6b426dfbef7b55392f7641b75950eb2be2b39712eb42ad42b5d91f5aeb6be492b88d4b8a32eeb21dd1fcd917729e289259b38ef6f13a161da8f90f986bd49b6e68488f672606c8b7b5bcc43b7cc7b2eb7cb", 0x6b}, {&(0x7f00000003c0)="08033d1fecafc53809c147be3fa92f05af893454cdb7ce64ba46baa9840df6b7d2a9ba101ab9676a7335a6d76397933e588ecd38721d363fac95418926d2176090b1961594a36d109e9a14c01a2c2648dab182fa7c54d89ad386024c5b8c91007f0b357458f512014e57b6d45ca0d5adb9f90260c151b79685941d02229b8e902853b5fbdeb9fb18ba5863666d4c35266dafbbf682172e6506714ec29e994841e138300fb548f90584fb672ad7aefd9d657d1810ce18709f75933f80145b905513a2596f940dcabe5a5fd407fef27804973badbcb2d7af20753937445cb8b0a4f1", 0xe1}, {&(0x7f00000004c0)="e3787f2e42abc7f0e6cd5548f40d5a2a3390f3637ac33d10fa81e1f29098eaff1356fa926dde2f875f2661a66d156650da5b5b763734a6ad8d79fdc01be9f8206edad0596cff185d4916de11229df88329b2df94155b6e7c892cd44ce217405e16dd0501223c573b14418a7266f641fa269130d64b040884ddecbb664431180f4ef9360ec99e557dd86350506452783db189579939676a24f13dbbcc192c42d6b0e23301a52cd58fb1a05b06162c69446f9563a6a27fe14c9bb1bdf56f6321caea7ef1ba2c12475b8885995ef63f6607520b7273fa3e401d9bbf", 0xda}], 0x6, 0x30) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) finit_module(r3, &(0x7f00000000c0)='${^}+*\x00', 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) recvfrom(r3, &(0x7f0000000200)=""/45, 0x2d, 0x2000, &(0x7f0000000240)=@ll={0x11, 0x5, r5, 0x1, 0x3, 0x6, @random="a576bf61f7b8"}, 0x80) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r6}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 15:42:30 executing program 0 (fault-call:12 fault-nth:39): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 823.722731] FAULT_INJECTION: forcing a failure. [ 823.722731] name failslab, interval 1, probability 0, space 0, times 0 [ 823.745448] CPU: 0 PID: 11643 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 823.753360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.762721] Call Trace: [ 823.765317] dump_stack+0x1b2/0x283 [ 823.768936] should_fail.cold+0x10a/0x154 [ 823.773080] should_failslab+0xd6/0x130 [ 823.777043] kmem_cache_alloc_node_trace+0x25a/0x400 [ 823.782164] __kmalloc_node_track_caller+0x38/0x70 [ 823.787087] __kmalloc_reserve.isra.0+0x35/0xd0 [ 823.791748] __alloc_skb+0xca/0x4c0 [ 823.795357] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 823.800188] alloc_skb_with_frags+0x85/0x500 [ 823.804673] ? trace_hardirqs_on+0x10/0x10 [ 823.808893] sock_alloc_send_pskb+0x57b/0x6d0 [ 823.813378] ? sock_kzfree_s+0x50/0x50 [ 823.817338] ? _copy_from_iter_full+0x1c7/0x680 [ 823.821989] ? __lock_acquire+0x655/0x42a0 [ 823.826210] tun_get_user+0x5d9/0x4190 [ 823.830088] ? finish_task_switch+0xc0/0x610 [ 823.834501] ? tun_rx_batched.isra.0+0x740/0x740 [ 823.839243] ? perf_trace_lock+0x109/0x4b0 [ 823.843460] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 823.848385] ? HARDIRQ_verbose+0x10/0x10 [ 823.852436] ? __tun_get+0x11c/0x220 [ 823.856144] ? lock_acquire+0x170/0x3f0 [ 823.860096] ? lock_downgrade+0x6e0/0x6e0 [ 823.864242] tun_chr_write_iter+0xcf/0x180 [ 823.868471] __vfs_write+0x44e/0x630 [ 823.872165] ? kernel_read+0x110/0x110 [ 823.876045] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 823.881162] __kernel_write+0xf5/0x330 [ 823.885092] write_pipe_buf+0x143/0x1b0 [ 823.889046] ? default_file_splice_read+0x870/0x870 [ 823.894040] ? __put_page+0xb9/0x2f0 [ 823.897740] ? anon_pipe_buf_release+0x237/0x2e0 [ 823.902494] __splice_from_pipe+0x332/0x740 [ 823.906808] ? default_file_splice_read+0x870/0x870 [ 823.911808] ? default_file_splice_read+0x870/0x870 [ 823.916926] splice_from_pipe+0xc6/0x120 [ 823.920978] ? splice_shrink_spd+0xb0/0xb0 [ 823.925209] ? __inode_security_revalidate+0xcf/0x120 [ 823.930400] ? security_file_permission+0x82/0x1e0 [ 823.935319] default_file_splice_write+0x37/0x80 [ 823.940064] ? generic_splice_sendpage+0x40/0x40 [ 823.944808] SyS_splice+0xca0/0x1230 [ 823.948508] ? SyS_write+0x14d/0x210 [ 823.952202] ? compat_SyS_vmsplice+0x150/0x150 [ 823.956765] ? do_syscall_64+0x4c/0x640 [ 823.960720] ? compat_SyS_vmsplice+0x150/0x150 [ 823.965284] do_syscall_64+0x1d5/0x640 [ 823.969165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 823.974375] RIP: 0033:0x45c1d9 [ 823.977552] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 823.985259] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 823.992670] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 823.999918] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 824.007171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 824.014421] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="36de5cbdac41f26553f2997c74e8e2e9b2ccf0e157462f477bb113b7158de544559524c81f014a5f62a61da0bfacc61b91d7af85f7f1b5e8", 0x38) 15:42:31 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000300)={0x0, 0x47524247, 0x2, @stepwise={0xff, 0x9, 0x0, 0x1, 0x3, 0xffff7fff}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r3, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r3, 0x5}, &(0x7f0000000440)=0x8) recvfrom$ax25(r1, &(0x7f0000000400), 0x0, 0x10163, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044841}, 0x4000804) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000380)=""/115) 15:42:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003140), 0x5e3) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18100, 0x0) 15:42:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x0, 0x7, 0x1, {0x2, @pix={0x9865, 0x1ff, 0x20363059, 0x5, 0x8, 0x9, 0xb, 0x8, 0x0, 0x8, 0x2, 0x2}}, 0x1}) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000080)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0xa30000, 0x3, 0x7fff, r4, 0x0, &(0x7f0000000180)={0x980903, 0x8, [], @string=&(0x7f0000000140)=0x3}}) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f0000000240)={0x0, 0x401, 0x3, [], &(0x7f0000000200)=0x85}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x280400, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f00000002c0)={{0x9}, 'port0\x00', 0x0, 0x1442, 0x5, 0xf0a, 0x9fd3, 0xfffffff7, 0x7, 0x0, 0x4, 0x2}) 15:42:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac09003200fe800000000000000001000002aaff0200000000000000000000000000010000"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x68000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000180)=0x4) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:31 executing program 3: add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x161000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000140)=ANY=[], 0x78) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) ftruncate(r5, 0x9) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000240)={0x9, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x88) creat(&(0x7f0000000100)='./bus\x00', 0x0) 15:42:31 executing program 0 (fault-call:12 fault-nth:40): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 824.639139] audit: type=1804 audit(1595086951.623:210): pid=11678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1581/bus" dev="sda1" ino=16337 res=1 [ 824.702770] FAULT_INJECTION: forcing a failure. [ 824.702770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.714614] CPU: 1 PID: 11680 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 824.722501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.731861] Call Trace: [ 824.734459] dump_stack+0x1b2/0x283 [ 824.738103] should_fail.cold+0x10a/0x154 [ 824.742261] __alloc_pages_nodemask+0x22b/0x2730 [ 824.747026] ? kernel_text_address+0x6e/0xe0 [ 824.751447] ? __kernel_text_address+0x9/0x30 [ 824.755952] ? unwind_get_return_address+0x51/0x90 [ 824.760889] ? __lock_acquire+0x655/0x42a0 [ 824.765150] ? depot_save_stack+0x10d/0x401 [ 824.769483] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 824.773982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 824.778830] ? check_preemption_disabled+0x35/0x240 [ 824.783856] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 824.788793] ? HARDIRQ_verbose+0x10/0x10 [ 824.792871] cache_grow_begin+0x91/0x410 [ 824.796937] cache_alloc_refill+0x28c/0x360 [ 824.801269] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 824.806481] __kmalloc_node_track_caller+0x38/0x70 [ 824.811419] __kmalloc_reserve.isra.0+0x35/0xd0 [ 824.816095] __alloc_skb+0xca/0x4c0 [ 824.819726] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 824.824571] ? lock_downgrade+0x6e0/0x6e0 [ 824.828729] alloc_skb_with_frags+0x85/0x500 [ 824.833142] ? check_preemption_disabled+0x35/0x240 [ 824.838168] ? perf_trace_lock+0x109/0x4b0 [ 824.842407] sock_alloc_send_pskb+0x57b/0x6d0 [ 824.846923] ? sock_kzfree_s+0x50/0x50 [ 824.850939] ? _copy_from_iter_full+0x1c7/0x680 [ 824.855616] ? __lock_acquire+0x655/0x42a0 [ 824.859858] tun_get_user+0x5d9/0x4190 [ 824.863763] ? tun_rx_batched.isra.0+0x740/0x740 [ 824.868523] ? perf_trace_lock+0x109/0x4b0 [ 824.872763] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 824.877703] ? HARDIRQ_verbose+0x10/0x10 [ 824.881777] ? __tun_get+0x11c/0x220 [ 824.885502] ? lock_acquire+0x170/0x3f0 [ 824.889484] ? lock_downgrade+0x6e0/0x6e0 [ 824.893644] tun_chr_write_iter+0xcf/0x180 [ 824.897887] __vfs_write+0x44e/0x630 [ 824.901601] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 824.906703] ? kernel_read+0x110/0x110 [ 824.910595] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 824.915718] __kernel_write+0xf5/0x330 [ 824.919610] write_pipe_buf+0x143/0x1b0 [ 824.923588] ? default_file_splice_read+0x870/0x870 [ 824.928603] ? __put_page+0xb9/0x2f0 [ 824.932319] ? anon_pipe_buf_release+0x237/0x2e0 [ 824.937081] __splice_from_pipe+0x332/0x740 [ 824.941410] ? default_file_splice_read+0x870/0x870 [ 824.946429] ? default_file_splice_read+0x870/0x870 [ 824.952021] splice_from_pipe+0xc6/0x120 [ 824.952035] ? splice_shrink_spd+0xb0/0xb0 [ 824.952046] ? __inode_security_revalidate+0xcf/0x120 [ 824.952063] ? security_file_permission+0x82/0x1e0 [ 824.952077] default_file_splice_write+0x37/0x80 [ 824.952090] ? generic_splice_sendpage+0x40/0x40 [ 824.952100] SyS_splice+0xca0/0x1230 [ 824.952121] ? SyS_write+0x14d/0x210 [ 824.952133] ? compat_SyS_vmsplice+0x150/0x150 [ 824.952143] ? SyS_clock_settime+0x1a0/0x1a0 [ 824.952155] ? do_syscall_64+0x4c/0x640 [ 824.952166] ? compat_SyS_vmsplice+0x150/0x150 [ 824.952179] do_syscall_64+0x1d5/0x640 [ 824.952200] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 824.952209] RIP: 0033:0x45c1d9 [ 824.952215] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 15:42:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x4, @pix_mp={0x80000000, 0x0, 0x59565955, 0x8, 0x4, [{0x1, 0x1}, {0x8000, 0x938}, {0x81, 0x1000}, {0x3, 0x2}, {0x7}, {0x5, 0xff}, {0x1, 0xffffffff}, {0x1, 0x6}], 0xfa, 0x1, 0x4, 0x1, 0x7}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000520fe9aa0000000e0003006269746d61703a69700000000500c38fa04e0045a1deae411bb128000901020073797a3000000000240007800c00028008000140020000000c000105000000480000000008000640000000050400020000"], 0x1}, 0x8}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000001800)=ANY=[@ANYBLOB="100200f544d6c97e6cb0c3c2e8ba0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000080) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0036d70df5f6031638c869561bdac587157a00000000e7120009000100766574680000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000900ffffffff3fbc002f37351180828853000000ef41058f0297a2e4c9cc1c11240a5a56c605ff000000000000000000a5851faf2479de6a2a6f9a127532b4578a5ce9c45ad92d945a62f9216d5ab3fdcadacc5470b56fe26c0b41a3f2260480c5b822bf4bc986034b77c2612a4e229ecd3859da193d996b66d65fe87021017033ceb140ca5c062ad1a98767dc6c88807e71697519c90903f1ca2d03b92e2d85fce29935586d7a05ced5eb05ecc0e9ccea2c3a4163923093d2dac93b04e5cd06c113cece92335910425266d8499e1900cff2c065ad2c4d50c2970c78fd400859b363f76dfcb7f00f0558493b"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@getchain={0x2c, 0x66, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x8, 0x1}, {0x2, 0x9}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4f4d202f2716ee75}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="840a0000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004009f02000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="4801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008b05000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000001000008000600", @ANYRES32=0x0, @ANYBLOB="380001002400010061637469762e8900000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004003f000120f9ffffff06003f0669a80000ff007f000500000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040005000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003a9ba9f221c0682000b0000000800040002", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040040000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="c400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f7374617473000000000000000000000000000000d7000000050003000b000000080004000000000008000700000000004045424e922e7bb1ff3ba416b2e150f6000100240001006d6f64650000000000000000000000001d38037ae974db24ad6054ac6966f00300"/132, @ANYRES32=0x0, @ANYBLOB="a001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000180000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400c0e4000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="a801028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000008038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000010008000600", @ANYRES32=r7, @ANYBLOB], 0xa84}}, 0x8000) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 824.952227] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 824.952233] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 824.952240] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 824.952246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 15:42:32 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2187a37fdd6a1605}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000067e75a249e53c7e8f928d5ee6b71c1470e92df1fccaaf40a5300e50edef3dd63c9ec5908c50800fc348cd648245be598781ac930526bae8ffcfb72debf78688fd7daa049e0125f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1, 0x10, 0x1000, 0xfff}, &(0x7f00000001c0)=0x18) r7 = dup(r4) read$FUSE(r7, &(0x7f0000003140), 0x5e3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400203) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 824.952252] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac [ 824.985487] audit: type=1804 audit(1595086951.733:211): pid=11678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1581/bus" dev="sda1" ino=16337 res=1 15:42:32 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYRESHEX], 0x1}, 0x8}, 0x4094) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000140)={{0xff, 0xf9}, {0x3f, 0x4}, 0x3, 0x1, 0x2}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000940)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r4) keyctl$invalidate(0x15, r4) splice(r2, 0x0, r0, 0x0, 0x4ffe0, 0xc) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000bc0)) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x6d00000000000000, 0x0, 0x3, 0x1, 0xc}) r6 = socket$inet(0x2, 0x5, 0x3) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) ptrace$cont(0x18, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f00000001c0), 0x8, &(0x7f0000000e40)) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x518, 0xffffffff, 0x480, 0x3c0, 0x0, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ip={@multicast1, @loopback, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x88, 0x2, 0x1}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x5}, 0x0, 0x8}}}, {{@uncond, 0x0, 0x2d0, 0x318, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}, {[0x4e22, 0x4e20], [0x4e20, 0x4e21], 0x8, 0x8, 0xe2, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7f}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fffffff, 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xc, "8a33"}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) [ 824.985557] audit: type=1804 audit(1595086951.933:212): pid=11678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1581/bus" dev="sda1" ino=16337 res=1 [ 824.985625] audit: type=1804 audit(1595086951.943:213): pid=11678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1581/bus" dev="sda1" ino=16337 res=1 15:42:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x40000000000004, 0x8) [ 825.265219] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 825.265582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:32 executing program 0 (fault-call:12 fault-nth:41): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 825.381047] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/116) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x10) 15:42:32 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a5ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 825.641176] FAULT_INJECTION: forcing a failure. [ 825.641176] name failslab, interval 1, probability 0, space 0, times 0 [ 825.660112] CPU: 0 PID: 11718 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 825.668022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.677387] Call Trace: [ 825.679993] dump_stack+0x1b2/0x283 [ 825.683635] should_fail.cold+0x10a/0x154 [ 825.687794] should_failslab+0xd6/0x130 [ 825.691786] kmem_cache_alloc_node+0x25f/0x400 [ 825.696383] __alloc_skb+0x9a/0x4c0 [ 825.700017] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 825.704863] ? lock_downgrade+0x6e0/0x6e0 [ 825.709019] alloc_skb_with_frags+0x85/0x500 [ 825.713424] ? check_preemption_disabled+0x35/0x240 [ 825.718440] ? perf_trace_lock+0x109/0x4b0 [ 825.722676] sock_alloc_send_pskb+0x57b/0x6d0 [ 825.727180] ? sock_kzfree_s+0x50/0x50 [ 825.731068] ? _copy_from_iter_full+0x1c7/0x680 [ 825.735737] ? __lock_acquire+0x655/0x42a0 [ 825.739969] tun_get_user+0x5d9/0x4190 [ 825.743865] ? tun_rx_batched.isra.0+0x740/0x740 [ 825.748612] ? perf_trace_lock+0x109/0x4b0 [ 825.752857] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 825.757781] ? HARDIRQ_verbose+0x10/0x10 [ 825.761836] ? __tun_get+0x11c/0x220 [ 825.765548] ? lock_acquire+0x170/0x3f0 [ 825.769519] ? lock_downgrade+0x6e0/0x6e0 [ 825.773671] tun_chr_write_iter+0xcf/0x180 [ 825.777903] __vfs_write+0x44e/0x630 [ 825.781614] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 825.786712] ? kernel_read+0x110/0x110 [ 825.790593] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 825.795711] __kernel_write+0xf5/0x330 [ 825.799610] write_pipe_buf+0x143/0x1b0 [ 825.803581] ? default_file_splice_read+0x870/0x870 [ 825.808591] ? __put_page+0xb9/0x2f0 [ 825.812299] ? anon_pipe_buf_release+0x237/0x2e0 [ 825.817082] __splice_from_pipe+0x332/0x740 [ 825.821411] ? default_file_splice_read+0x870/0x870 [ 825.826428] ? default_file_splice_read+0x870/0x870 [ 825.831442] splice_from_pipe+0xc6/0x120 [ 825.835513] ? splice_shrink_spd+0xb0/0xb0 [ 825.839745] ? __inode_security_revalidate+0xcf/0x120 [ 825.844942] ? security_file_permission+0x82/0x1e0 [ 825.849872] default_file_splice_write+0x37/0x80 [ 825.854627] ? generic_splice_sendpage+0x40/0x40 [ 825.859391] SyS_splice+0xca0/0x1230 [ 825.863113] ? SyS_write+0x14d/0x210 [ 825.866825] ? compat_SyS_vmsplice+0x150/0x150 [ 825.871403] ? SyS_clock_settime+0x1a0/0x1a0 [ 825.875916] ? do_syscall_64+0x4c/0x640 [ 825.879890] ? compat_SyS_vmsplice+0x150/0x150 [ 825.884478] do_syscall_64+0x1d5/0x640 [ 825.888374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 825.893558] RIP: 0033:0x45c1d9 [ 825.896843] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 825.904649] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 825.911911] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 825.919183] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 825.926446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 825.933708] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:33 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:33 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x1}, 0x8, 0x0, 0x0, 0x4008080}, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c000}, 0x14000000) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:33 executing program 3: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x980000, 0x132, 0x594, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a0914, 0x73, [], @value=0xf8}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r1, 0xff5ec000) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x100, 0x2, {}, {0x4, 0x0, 0x81, 0x1, 0x1, 0x2, "00ebea44"}, 0x9, 0x1, @userptr=0x6, 0x1, 0x0, r2}) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000200)=0x1800, &(0x7f0000000240)=0x2) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000280)) r3 = semget(0x3, 0x2, 0x22) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000002c0)=""/4096) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x140, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xda}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffcc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7d4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2fd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001500)='/dev/btrfs-control\x00', 0x10080, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x13, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000004) r7 = syz_open_dev$audion(&(0x7f0000001680)='/dev/audio#\x00', 0x800, 0x6000) ioctl$VIDIOC_DBG_G_REGISTER(r7, 0xc0385650, &(0x7f00000016c0)={{0x1, @name="48aa5cd571e96d00bbbb13205b01fdbb2acd8dbf2b1e2a0cf8b4a08028f5226a"}, 0x8, 0x80000001, 0x4}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001780)={0x100000, &(0x7f0000001740), 0x8, r7, 0x4}) 15:42:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x35a3aad1) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/123, 0x7b, 0x10}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000003900)={0x1508, 0x1, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x2}, 0xe7, 0x1, 0x4, 0x7, 0x23, 'syz1\x00', "0993fd25e1f1b9ed74c3600620776e6e628d08f85e39d23418b9aa4e13f25af4", "a0ce52caccf940c3c36af46bfc0ede9272a34a8fc7afa985b7703b9b7de545ec", [{0x5d05, 0x81, {0x2, 0x5}}, {0x7, 0x1, {0x0, 0x1d2}}, {0x6, 0x3, {0x0, 0xaf7}}, {0xffff, 0x1, {0x3, 0x5}}, {0x13a, 0x4eb2, {0x3}}, {0x3f, 0x101, {0x3}}, {0x1f, 0x6, {0x0, 0x4}}, {0xfff7, 0x7, {0x2, 0x4e81}}, {0x7, 0x8000, {0x2, 0x7f}}, {0x7f, 0xa959, {0x0, 0x4}}, {0x7, 0x400, {0x3, 0x1f}}, {0x8001, 0x100, {0x0, 0x1}}, {0x7f, 0x7, {0x2, 0x800}}, {0x7, 0x81, {0x2, 0x7fffffff}}, {0x1, 0x9, {0x0, 0xd4}}, {0xa5, 0x1, {0x0, 0xffffffff}}, {0x800, 0x6, {0x3, 0x40}}, {0x400, 0x20, {0x1, 0x8000}}, {0x8, 0x6, {0x0, 0x10001}}, {0x9, 0x3, {0x2, 0xffffff80}}, {0x5, 0x8000, {0x3, 0xfffffffb}}, {0x1, 0x851, {0x3, 0x1}}, {0x3, 0x8001, {0x3, 0x7fffffff}}, {0x0, 0x7fff, {0x0, 0xf4ff}}, {0x0, 0x37, {0x3, 0x56}}, {0x3f, 0xfffb, {0x1, 0xb1}}, {0x0, 0x80, {0x1, 0x18}}, {0x4, 0x800, {0x3, 0x1ff}}, {0x5, 0x9b4, {0x2, 0x10000}}, {0xf907, 0x7, {0x3, 0x1ff}}, {0x5, 0x4, {0x2, 0x9b8}}, {0x3, 0x9ef, {0x2, 0x2}}, {0x80, 0x4, {0x3}}, {0x0, 0x1, {0x1, 0x304}}, {0x21, 0x8, {0x2, 0xe3}}, {0x4, 0x6, {0x3, 0x9}}, {0x4, 0xefd0, {0x2, 0x7}}, {0x2, 0x4, {0x2, 0x3}}, {0x7, 0x400, {0x0, 0x3}}, {0x8, 0x40, {0x2, 0x80}}]}}}, {{0x254, 0x1, {{0x2, 0x195}, 0x0, 0x3f, 0x4, 0x3, 0x2, 'syz0\x00', "d58e538efe16017ef8109d669ade0cb8f1a75738275544c2d8d92e36855cfa75", "9c51c40b0135f32d3f3788ddfd1476d1b6bf3a9b2bce88f00a0ba02eab88a93d", [{0x3, 0x0, {0x3, 0x2}}, {0x200, 0xffff, {0x2, 0xe246}}, {0x3ff, 0x1, {0x0, 0x7ff}}, {0xffac, 0x8000, {0x0, 0x3}}, {0x8, 0x3ff, {0x3, 0x9}}, {0xe0c8, 0x9fa, {0x1, 0x80000000}}, {0x0, 0x20, {0x3, 0x3}}, {0x1, 0xfff8, {0x2, 0xcfa}}, {0xf74, 0x2, {0x2, 0x47}}, {0x8001, 0x8, {0x3}}, {0x5, 0x9, {0x8e41ae713934a6eb, 0x6}}, {0x2, 0xfff9, {0x3, 0x7}}, {0x0, 0x9, {0x0, 0x790}}, {0x989c, 0x379, {0x0, 0x1000}}, {0x0, 0x3f, {0x3, 0x359e}}, {0x6, 0x4, {0x2, 0xffffffff}}, {0x1ff, 0x0, {0x2, 0x6}}, {0x2, 0x7f, {0x0, 0x7fffffff}}, {0x2, 0x8, {0x2, 0x7}}, {0x6, 0x0, {0x2, 0x5}}, {0x3, 0x6, {0x0, 0xbf8}}, {0x8001, 0x7, {0x3, 0x4a6}}, {0x8, 0x7ff, {0x3, 0xf8}}, {0xfffe, 0x401, {0x0, 0x1e}}, {0x0, 0xea, {0x0, 0x8}}, {0x7, 0x6, {0x3, 0x9}}, {0x9, 0x0, {0x1, 0x8}}, {0x5, 0x0, {0x1, 0x3}}, {0x4, 0x80, {0x136ea0cdb3527bbb, 0x7fff}}, {0x40, 0x3ff}, {0x9fbe, 0x2cf, {0x3, 0x3}}, {0x3d0f, 0x8001, {0x1, 0x1000}}, {0xf1b6, 0x3, {0x0, 0x40}}, {0x9, 0x3, {0x2, 0x8}}, {0x6, 0xce, {0x2, 0x3}}, {0x4, 0x6, {0x0, 0x8}}, {0x5, 0x81, {0x3, 0x682}}, {0x7b, 0x6, {0x1, 0x1}}, {0x7, 0x8001, {0x2, 0xfa}}, {0xfffc, 0x6, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0xcc59}, 0x4, 0x6, 0x2, 0x3f, 0x0, 'syz1\x00', "c54a62deb428516bbc44a5f18bd296ddb5e47c7592d9fbee9a690a8e894c4ca4", "d20f67dc87978b2bd9c9e505335ae8c7ed7c5ea362cc4ca74a7e52770254b808", [{0x8, 0xfff8, {0x3, 0x5}}, {0x3, 0x2, {0x3}}, {0xff, 0x7, {0x2, 0x9}}, {0x1, 0x4, {0x0, 0x9}}, {0x6, 0x100, {0x3, 0x2}}, {0x7, 0x4, {0x0, 0x4}}, {0x8001, 0x5, {0x2, 0x6}}, {0x4, 0x1, {0x3, 0x8}}, {0x8, 0x1, {0x1, 0x1}}, {0x8, 0x0, {0x2, 0xced}}, {0x1f, 0xfff7, {0x1, 0x7}}, {0x2, 0xd34, {0x3, 0x8}}, {0x9, 0x9, {0x0, 0x4}}, {0x0, 0x0, {0x2, 0x1000}}, {0x7c00, 0x5, {0x3, 0x2}}, {0x20, 0xfb6a, {0x1, 0x1000}}, {0x5, 0xffff, {0x3, 0x7}}, {0x4080, 0x4, {0x3, 0xfffffe01}}, {0x8, 0xa17, {0x0, 0x7f}}, {0x0, 0x2, {0x2, 0x7ff}}, {0x400, 0xffff, {0x1, 0x5}}, {0x23e, 0x7ff, {0x1, 0x3}}, {0x2, 0x1, {0x3, 0x40}}, {0x9a, 0x562e, {0x3, 0x2}}, {0xe1, 0x6, {0x1, 0x3}}, {0x2, 0x9d82, {0x2, 0x10000}}, {0xff, 0x76d, {0x3, 0x16b8}}, {0x6, 0x0, {0x2}}, {0x9, 0x9, {0x0, 0x4}}, {0x1ff, 0x4, {0x0, 0x4}}, {0xfff, 0x6, {0x0, 0x3}}, {0x1, 0x6, {0x3, 0x703fe3a}}, {0x4, 0x8, {0x1, 0x3}}, {0x1000, 0xffc0, {0x1, 0x3}}, {0x7fff, 0x1f, {0x0, 0x9}}, {0x55c, 0xcb18, {0x0, 0x3}}, {0x4, 0x20, {0x1, 0x81}}, {0x9, 0x5, {0x2, 0x5}}, {0x2, 0x8001, {0x1, 0x7f}}, {0x2, 0x2, {0x3, 0x1000}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0xff, 0x0, 0x7, 0x6, 0xe, 'syz1\x00', "02e25df7946aab0a221f154ee12b064176bbc2b09855145f8723827cf3ba7603", "9d0970ab3d62f568a44d38b761d90244651e4fcffbfccd543c79485c46dde709", [{0xffe0, 0x6, {0x2, 0x1e}}, {0x80, 0x0, {0xd3167e3c3147a544, 0x3}}, {0xfff, 0x1, {0x3, 0xffffffff}}, {0xffaf, 0x3, {0x2, 0xfffffffb}}, {0x800, 0xacb, {0x3, 0x1ff}}, {0x0, 0x3, {0x2, 0x8}}, {0xa5e2, 0x3, {0x1, 0x9}}, {0x455, 0x3e00, {0x1, 0x6}}, {0xc1, 0x5, {0x0, 0x2}}, {0x8c, 0x9, {0x0, 0x2b7}}, {0x2, 0x0, {0x3, 0x5}}, {0x4, 0x6, {0x3, 0x17f5cb28}}, {0xe6, 0x7000, {0x2, 0x3ba}}, {0x9, 0x6, {0x3}}, {0x0, 0x1, {0x1, 0x7fffffff}}, {0x2, 0x9, {0x0, 0x800}}, {0x0, 0x7, {0x1, 0x101}}, {0x0, 0x5, {0x2, 0x7fff}}, {0x79f, 0x2, {0x3, 0x7}}, {0x1, 0x200, {0x1, 0xfffffffa}}, {0x7ff, 0x3, {0x3, 0x2}}, {0x3ff, 0x4, {0x2}}, {0x4, 0x0, {0x1, 0x66}}, {0xe57, 0x9, {0x2, 0x20}}, {0x2fd, 0x3, {0x0, 0xfff}}, {0x6, 0x5, {0x0, 0x40}}, {0x2, 0x7, {0x2, 0x8}}, {0x8, 0x365, {0x1, 0x8}}, {0x6, 0x3, {0x2, 0x35}}, {0x5, 0x2, {0x0, 0x2}}, {0x4, 0x5, {0x3, 0x6}}, {0x4, 0x2, {0x2, 0x8001}}, {0x13e, 0xe13, {0x0, 0x7}}, {0x1, 0x7, {0x0, 0x2}}, {0x7, 0x6, {0x1, 0x1ff}}, {0x5d6, 0x8000, {0x0, 0x5}}, {0x2, 0x3, {0x3, 0x7ff}}, {0x7f, 0x5, {0x0, 0x1ff}}, {0x350, 0x3, {0x2, 0x4}}, {0x1, 0x7cea, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x4, 0x6}, 0xb6, 0x3f, 0x1, 0x0, 0x1b, 'syz1\x00', "d4e69a95fb2a4f0fa7b73c47affaad60dd8e5a88ce6c398379f24e1c87fd9817", "043a102fb8c161791df40b793ab6258cff5b8e5ccc26e4b5dbea6e61a616fc13", [{0x6, 0x9, {0x3, 0x7}}, {0x8000, 0x5, {0x0, 0x10001}}, {0x0, 0xffff, {0x2, 0x80000000}}, {0x0, 0x7, {0x3, 0x577}}, {0x7, 0xff, {0x1, 0x3}}, {0x8, 0x1000, {0x1, 0x8000}}, {0x7, 0x6, {0x2, 0x40}}, {0x1f, 0x4, {0x3, 0x7}}, {0xfffa, 0x7, {0x0, 0x2}}, {0xdad, 0xfe01, {0x3, 0xa9}}, {0xc417, 0x8, {0x1, 0x10001}}, {0x0, 0x0, {0x0, 0x7}}, {0x1, 0x0, {0x2, 0x38}}, {0x5, 0x8000, {0x2, 0x6}}, {0x6, 0x9, {0x3, 0x6}}, {0x0, 0x9, {0x2, 0x100}}, {0x8, 0x2, {0x3, 0x4}}, {0x100, 0xccb, {0x3, 0x800}}, {0x6, 0x400, {0x0, 0x7}}, {0x80, 0x5, {0x0, 0x80}}, {0xd614, 0x2, {0x2}}, {0x3f, 0x5, {0x2, 0x5}}, {0x100, 0x6, {0x3, 0x800}}, {0x4, 0xb14e, {0x2, 0x6}}, {0xd, 0x9, {0x0, 0x1}}, {0x1ff, 0x5, {0x1, 0x3f}}, {0x9, 0x7, {0x0, 0xfffffe00}}, {0xc, 0x5, {0x3, 0x1}}, {0x9, 0x0, {0x0, 0x6}}, {0x9, 0x400, {0x1, 0xb2}}, {0x2, 0x4, {0x3, 0x3}}, {0x5854, 0x1f, {0x3, 0x3}}, {0xe6, 0x5, {0x0, 0xff}}, {0x20, 0x1, {0x3, 0x4}}, {0x200, 0x1f, {0x3, 0xff000000}}, {0x6, 0x100, {0x0, 0x2ee8d57f}}, {0x7, 0xff}, {0x3, 0x1, {0x1, 0xfffffffb}}, {0xff, 0x6, {0x3, 0x65d0}}, {0x3, 0x3c41, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x10000}, 0x8, 0x3, 0xffff, 0xfbb, 0x22, 'syz1\x00', "9909daccdd7a4666ed6cfe2a42b25d8f14dbf8bba1f27eb749b3a6ab51873095", "23f036477eef021101ae28a7e58497303b759f7bfc4e670f6326fb6c0d95a097", [{0x4, 0xfffa, {0x2, 0x7fffffff}}, {0x3f, 0x3, {0x2, 0x5}}, {0x7fff, 0x140, {0x1, 0x8}}, {0xfcfd, 0x3124, {0x1, 0xf02}}, {0xcf, 0x7, {0x0, 0x5}}, {0xffff, 0x4, {0x2, 0x3ff}}, {0x6, 0x36, {0x3, 0x8}}, {0xd3, 0x8ff, {0x1, 0x100}}, {0x3ff, 0x6, {0x3, 0x1000}}, {0x2, 0xf68c, {0x1, 0x2}}, {0x7ff, 0x3, {0x2, 0xfffffff8}}, {0x9, 0x5, {0x2, 0x4}}, {0x5, 0x101, {0x2, 0x80000000}}, {0x8, 0x94, {0x1, 0xad6}}, {0xe860, 0x7, {0x2, 0xff}}, {0x200, 0x8, {0x1, 0x1}}, {0xfffd, 0x2, {0x2, 0x80}}, {0x3, 0x23, {0x2, 0xffffffff}}, {0x5, 0x7}, {0x40, 0x0, {0x0, 0x4a}}, {0x800, 0x0, {0x1}}, {0x0, 0x4, {0x3, 0xfffffff9}}, {0x200, 0x9, {0x3, 0xfffffffd}}, {0x9, 0x0, {0x3, 0x1000}}, {0x6, 0x5, {0x0, 0x3}}, {0x7fff, 0x721, {0x1, 0x7}}, {0x7, 0x2, {0x1, 0x6}}, {0x3, 0x8, {0x1, 0x6}}, {0x0, 0x475c, {0x1, 0x8}}, {0x9, 0x8, {0x2, 0x57f4d462}}, {0x364, 0x0, {0x2, 0x2}}, {0x4, 0xfff9, {0x2, 0x3ff}}, {0x8001, 0x0, {0x1, 0xc}}, {0x100, 0x1, {0x3, 0x40}}, {0x5, 0x6, {0x1}}, {0xff, 0x8, {0x1, 0x4}}, {0x5, 0xff88, {0x1, 0x7}}, {0x3, 0x9, {0x0, 0xffffffe1}}, {0x146e, 0x7fff, {0x3, 0x9}}, {0xc000, 0x7fff, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x1, 0x7, 0x6, 0x9, 0x12, 'syz0\x00', "02be6ddbba9c11cd8574a497e942c8121d0493ee83a1639865bc70d4cc820a48", "ebb3b05263ef9d99d81700cd6aeab3a46a1e1874854f3218b3b611267a5f7ab3", [{0x101, 0x5, {0x3, 0xc6f}}, {0x8a0, 0x3, {0x3, 0x1000}}, {0x100, 0x5, {0x1, 0x1f}}, {0x20, 0x4c, {0x0, 0xfcc}}, {0x40, 0x7, {0x3, 0x7}}, {0x1000, 0x0, {0x0, 0xfffffff9}}, {0x100, 0x394, {0x2, 0x1}}, {0x6, 0x9, {0x1, 0x6}}, {0x0, 0x3ff, {0x0, 0x8}}, {0x2, 0x6, {0x3}}, {0x1d69, 0x8, {0x3, 0x9}}, {0x200, 0x200, {0x2, 0x7}}, {0x40, 0x9, {0x3, 0x8}}, {0x2c45, 0x0, {0x1, 0x2}}, {0x2, 0x6, {0x0, 0x3}}, {0x0, 0x3f, {0x1, 0xd47d}}, {0x7, 0x80, {0x3, 0x40}}, {0xbf, 0x8000, {0x3, 0x4}}, {0x0, 0xffff, {0x1, 0x103e}}, {0x451a, 0x8, {0x0, 0xffffffff}}, {0x8, 0x1, {0x1, 0xa56}}, {0x8, 0x40, {0x2, 0x8000}}, {0x7677, 0x40, {0x3, 0x1}}, {0x20, 0xc88c, {0x1, 0xf4b7}}, {0x1000, 0x8, {0x3, 0x6}}, {0x1, 0x9103, {0x1}}, {0x1, 0x6, {0x1, 0x5}}, {0x401, 0xfffb, {0x2, 0x7f}}, {0x9, 0x1f, {0x3, 0x6}}, {0x8001, 0x7fff, {0x1, 0xfffffc00}}, {0x8, 0x9, {0x2, 0x38cf}}, {0x3, 0x0, {0x1, 0x6}}, {0x0, 0x8, {0x2, 0x3}}, {0x9, 0x8000, {0x1, 0x1}}, {0x8000, 0x2, {0x3, 0x6}}, {0x0, 0xe26, {0x3, 0x391}}, {0x4, 0x2, {0x3, 0x8}}, {0x1, 0x4, {0x1, 0x5}}, {0x1ff, 0x2, {0x3, 0x8}}, {0x3ff, 0x0, {0x3, 0x800}}]}}}, {{0x254, 0x1, {{0x0, 0x7fffffff}, 0x5, 0x1, 0x7, 0x1, 0x7, 'syz1\x00', "8faf5992ad1063447824f5e98a23cc6e0732def8c3053c6361d9fac40a9eed83", "8224e59c9b489be0656d04d40474571ade1638c500c0c4372a0fad728344f998", [{0x1, 0x7fff, {0x3, 0x10000}}, {0x0, 0x1, {0x2}}, {0x0, 0xf800, {0x3, 0x10000}}, {0x7, 0x1, {0x1, 0x5d}}, {0x84, 0x0, {0x3, 0x3}}, {0x9d, 0x0, {0x0, 0x4}}, {0x7e7, 0x6, {0x0, 0x1f}}, {0x5, 0x76, {0x1, 0x10001}}, {0xfff, 0x6, {0x2, 0xff}}, {0x6, 0xfbff, {0x0, 0x5}}, {0x8, 0x2, {0x2, 0x2}}, {0x4, 0x6, {0x1, 0xfffffffc}}, {0x2b60, 0x8e8, {0x1, 0xfffffff7}}, {0x7fff, 0x2, {0x1, 0x6}}, {0x0, 0x1000, {0x3, 0x9}}, {0x0, 0x6, {0x1, 0x101}}, {0x7, 0xa0f1, {0x1, 0x1}}, {0x7, 0xcf, {0x1, 0x5}}, {0x5, 0x1, {0x2, 0x10001}}, {0x411, 0x1f, {0x1, 0x9}}, {0x3, 0x3, {0x0, 0x8000}}, {0x2, 0x7, {0x2, 0x1}}, {0x4, 0x9, {0x1, 0x6}}, {0x1, 0x2, {0x2, 0x9}}, {0x2, 0x1, {0x2, 0x6}}, {0x2, 0x9, {0x2, 0x9}}, {0x3f, 0x1, {0x0, 0x2}}, {0x8a8, 0x4}, {0x2, 0x4, {0xf577f4fd3ad19d64, 0x8}}, {0x401, 0x2, {0x1, 0x1f}}, {0xfff, 0x400, {0x2, 0x610c}}, {0x3, 0x0, {0x2, 0x4}}, {0x7b, 0x2, {0x3, 0x8}}, {0xcb1, 0x40, {0x0, 0x200}}, {0x1f, 0x8000, {0x3, 0x5}}, {0x2, 0x4, {0x0, 0x3}}, {0x400, 0x5, {0x3, 0x9}}, {0xad0, 0x8, {0x0, 0x45}}, {0x26, 0x100, {0x2, 0x3}}, {0x2, 0x80, {0xfe9338afa5117813, 0x40}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x3f, 0x8, 0x6, 0xff, 0x3, 'syz1\x00', "199a1a4f896bb957dfe4d407e8173be203f2d60a49caa331fe961417898dfcff", "9bbcf4c09e897155cb278aa2afd6fdc553869771424a7fad224209e901c23ee2", [{0x5, 0xffff, {0xb75a9e23e2e57d69, 0x5}}, {0x1, 0x7fff, {0x3, 0xcbb}}, {0x337, 0xfffa, {0x2}}, {0x8, 0x2, {0x3, 0x8}}, {0x4, 0x202, {0x3, 0x9}}, {0xf8af, 0x5, {0x3}}, {0x1b78, 0x1000, {0x0, 0x1}}, {0x6, 0x850b, {0x2, 0x9}}, {0x2, 0x6, {0x2, 0x800}}, {0x7fff, 0xfffa, {0x2, 0x9}}, {0x6, 0x0, {0x2, 0x80000000}}, {0x800, 0xffe2, {0x2, 0x2}}, {0x8, 0x5, {0x3, 0x8001}}, {0x1, 0x400, {0x1, 0x4a}}, {0x5, 0x7, {0x2, 0x2}}, {0x9, 0xf800, {0x0, 0x400}}, {0x4, 0x8, {0x1, 0x3f}}, {0x7, 0x6, {0x3, 0x9}}, {0xa9f, 0x1, {0x0, 0x5}}, {0x9, 0x80, {0x0, 0x2}}, {0x9c8b, 0xb32, {0x2, 0x8}}, {0x6, 0x3ff, {0x1, 0x80000000}}, {0x875c, 0x0, {0x0, 0x1ff}}, {0x9, 0x7ff, {0x2, 0x2}}, {0x5, 0x5, {0x1, 0x3}}, {0x4, 0x2, {0x3, 0x1}}, {0x6, 0xbdc0, {0x0, 0x2}}, {0x1, 0x6be, {0x0, 0x4}}, {0x80, 0xfc01, {0x2, 0x4000000}}, {0xaab0, 0x2, {0x1, 0x8b}}, {0xf309, 0x1, {0x3, 0x5}}, {0x3ce, 0x9, {0x1, 0x4}}, {0xdd21, 0x7f, {0x0, 0x25}}, {0x7, 0x164, {0x2, 0x2}}, {0x101, 0x4, {0x2, 0x2}}, {0x7f, 0xffff, {0x3, 0x4}}, {0x2, 0x7, {0x0, 0x5b}}, {0x1, 0x100, {0x1, 0x7}}, {0x3ff, 0x80, {0x2, 0x4}}, {0x8, 0x1f, {0x3, 0x3}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 15:42:33 executing program 0 (fault-call:12 fault-nth:42): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5, 0x1) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x1, r2, &(0x7f00000002c0)=0x9, 0x60, 0x4) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r6, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xecc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20040000) [ 826.548015] FAULT_INJECTION: forcing a failure. [ 826.548015] name failslab, interval 1, probability 0, space 0, times 0 [ 826.567359] CPU: 1 PID: 11759 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 826.575466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.584808] Call Trace: [ 826.587381] dump_stack+0x1b2/0x283 [ 826.590990] should_fail.cold+0x10a/0x154 [ 826.595120] should_failslab+0xd6/0x130 [ 826.599071] kmem_cache_alloc_node_trace+0x25a/0x400 [ 826.604152] __kmalloc_node_track_caller+0x38/0x70 [ 826.609070] __kmalloc_reserve.isra.0+0x35/0xd0 [ 826.613716] __alloc_skb+0xca/0x4c0 [ 826.617322] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 826.622141] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 826.627194] alloc_skb_with_frags+0x85/0x500 [ 826.631583] ? __lock_acquire+0x655/0x42a0 [ 826.635799] sock_alloc_send_pskb+0x57b/0x6d0 [ 826.640272] ? HARDIRQ_verbose+0x10/0x10 [ 826.645327] ? sock_kzfree_s+0x50/0x50 [ 826.649194] ? _copy_from_iter_full+0x1c7/0x680 [ 826.653841] ? __lock_acquire+0x655/0x42a0 [ 826.658055] tun_get_user+0x5d9/0x4190 [ 826.661923] ? tun_rx_batched.isra.0+0x740/0x740 [ 826.666654] ? perf_trace_lock+0x109/0x4b0 [ 826.670865] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 826.675773] ? HARDIRQ_verbose+0x10/0x10 [ 826.679813] ? __tun_get+0x11c/0x220 [ 826.683549] ? lock_acquire+0x170/0x3f0 [ 826.687505] ? lock_downgrade+0x6e0/0x6e0 [ 826.691675] tun_chr_write_iter+0xcf/0x180 [ 826.695890] __vfs_write+0x44e/0x630 [ 826.699581] ? __schedule+0x146a/0x1d70 [ 826.703534] ? kernel_read+0x110/0x110 [ 826.707404] ? pipe_wait+0x171/0x190 [ 826.711094] __kernel_write+0xf5/0x330 [ 826.714958] write_pipe_buf+0x143/0x1b0 [ 826.718957] ? default_file_splice_read+0x870/0x870 [ 826.724671] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 826.730014] __splice_from_pipe+0x332/0x740 [ 826.734326] ? default_file_splice_read+0x870/0x870 [ 826.739329] ? default_file_splice_read+0x870/0x870 [ 826.744329] splice_from_pipe+0xc6/0x120 [ 826.748381] ? splice_shrink_spd+0xb0/0xb0 [ 826.752591] ? __inode_security_revalidate+0xcf/0x120 [ 826.757761] ? security_file_permission+0x82/0x1e0 [ 826.762668] default_file_splice_write+0x37/0x80 [ 826.767451] ? generic_splice_sendpage+0x40/0x40 [ 826.772318] SyS_splice+0xca0/0x1230 [ 826.776018] ? SyS_write+0x14d/0x210 [ 826.779708] ? compat_SyS_vmsplice+0x150/0x150 [ 826.784268] ? SyS_clock_settime+0x1a0/0x1a0 [ 826.788674] ? do_syscall_64+0x4c/0x640 [ 826.792624] ? compat_SyS_vmsplice+0x150/0x150 [ 826.797187] do_syscall_64+0x1d5/0x640 [ 826.801057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 826.806224] RIP: 0033:0x45c1d9 [ 826.809392] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 826.818134] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 826.825380] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 826.832626] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 826.839872] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a 15:42:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, [], "d76ab9786b89027c85d3ab8154d5e274"}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 826.847119] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:33 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000040)) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:34 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:34 executing program 0 (fault-call:12 fault-nth:43): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000200)={0x7, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 827.429085] FAULT_INJECTION: forcing a failure. [ 827.429085] name failslab, interval 1, probability 0, space 0, times 0 [ 827.452429] CPU: 1 PID: 11783 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 827.460347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.469749] Call Trace: [ 827.472353] dump_stack+0x1b2/0x283 [ 827.476009] should_fail.cold+0x10a/0x154 [ 827.480171] should_failslab+0xd6/0x130 [ 827.484156] kmem_cache_alloc_node+0x25f/0x400 [ 827.488764] __alloc_skb+0x9a/0x4c0 [ 827.492395] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 827.497244] ? lock_downgrade+0x6e0/0x6e0 [ 827.501398] alloc_skb_with_frags+0x85/0x500 [ 827.505809] ? check_preemption_disabled+0x35/0x240 [ 827.510834] ? perf_trace_lock+0x109/0x4b0 [ 827.515072] sock_alloc_send_pskb+0x57b/0x6d0 [ 827.519576] ? sock_kzfree_s+0x50/0x50 [ 827.523471] ? _copy_from_iter_full+0x1c7/0x680 [ 827.528148] ? __lock_acquire+0x655/0x42a0 [ 827.532389] tun_get_user+0x5d9/0x4190 [ 827.536297] ? tun_rx_batched.isra.0+0x740/0x740 [ 827.541051] ? perf_trace_lock+0x109/0x4b0 [ 827.545292] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 827.550231] ? HARDIRQ_verbose+0x10/0x10 [ 827.554302] ? __tun_get+0x11c/0x220 [ 827.558030] ? lock_acquire+0x170/0x3f0 [ 827.562010] ? lock_downgrade+0x6e0/0x6e0 [ 827.566179] tun_chr_write_iter+0xcf/0x180 [ 827.570426] __vfs_write+0x44e/0x630 [ 827.574150] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 827.579263] ? kernel_read+0x110/0x110 [ 827.583162] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 827.588318] __kernel_write+0xf5/0x330 [ 827.592213] write_pipe_buf+0x143/0x1b0 [ 827.596199] ? default_file_splice_read+0x870/0x870 [ 827.601214] ? __put_page+0xb9/0x2f0 [ 827.604933] ? anon_pipe_buf_release+0x237/0x2e0 [ 827.609697] __splice_from_pipe+0x332/0x740 [ 827.614027] ? default_file_splice_read+0x870/0x870 [ 827.619049] ? default_file_splice_read+0x870/0x870 [ 827.624066] splice_from_pipe+0xc6/0x120 [ 827.628133] ? splice_shrink_spd+0xb0/0xb0 [ 827.632368] ? __inode_security_revalidate+0xcf/0x120 [ 827.637570] ? security_file_permission+0x82/0x1e0 [ 827.642506] default_file_splice_write+0x37/0x80 [ 827.647268] ? generic_splice_sendpage+0x40/0x40 [ 827.652027] SyS_splice+0xca0/0x1230 [ 827.655755] ? SyS_write+0x14d/0x210 [ 827.660777] ? compat_SyS_vmsplice+0x150/0x150 [ 827.665450] ? SyS_clock_settime+0x1a0/0x1a0 [ 827.669866] ? do_syscall_64+0x4c/0x640 [ 827.673845] ? compat_SyS_vmsplice+0x150/0x150 [ 827.678430] do_syscall_64+0x1d5/0x640 [ 827.682333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 827.687526] RIP: 0033:0x45c1d9 [ 827.690716] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 827.698427] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 827.705702] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 827.712977] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 827.720256] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 827.727537] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:34 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=r6, @ANYRESOCT, @ANYRES32], 0xffffff9a) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 15:42:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) r4 = dup(r3) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = dup(r5) r7 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES32=r7, @ANYBLOB="61eca4bdc513100fe85b915a2481f26a53d255d05feccf4645e956bd5a6230eea4540f74069bd7bf59e1797b3fc2a9e987d21bf9843b1b3589cded1d7e6b826cfa8c25992031ca7f4f4af2aaf90dd4849d9479a2dd0efb977214e55e4d7073a09dff7b0b3cd86052319d3735a90e6784fd7787d03b4f709aac1d3181e842002510", @ANYRES64=r8, @ANYRES16, @ANYRES16=r5, @ANYRESHEX, @ANYBLOB="30a92b1d75c949cdfd3d11af568ee4d25f29a6259d5e1b6a759d562ad5c831be5e3c5917bd62fca1f830b5d7d69c5f0334841ad63226840864ea5750a21cf130", @ANYBLOB="de", @ANYRES16=r6, @ANYRES32, @ANYRESDEC], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:34 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:35 executing program 0 (fault-call:12 fault-nth:44): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f00000000c0)={0x8, 0x9}) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r3], 0x52) r7 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) open_by_handle_at(r7, &(0x7f00000001c0)={0x1008, 0x100, "9415f32b1e28e4b479ceba7871cad83a2b95ed32de4fd8ac2b44808bafbf920c2d69911e43cad5310650b95550c15d1a683cc24cc8121ce1c2ca479483af8ae48aa9bd858db6ea3b0ee6a62eae9add0dad253c1c5d8205587fd39d9ffbc162a387046edebf21191e75a6360b32de26928365887608ccac25f601ab6170d91f0d7aa1d016b1f200090edc93b25fdb52bd5a80c2712d7bfce0b0f7ac6f9118cd904fdb9a9d4d118e1df979d37dbc0d46ca77952cd03c8e8d13669a7a6ebcff15dc307200044931b63b70c09d07ad89907898a44216c2cc361d2f361bdc086792c838b63ccbafe2b60b14630ff92db3151835638f4e69f0126358d2f1458fb160adada8807ec57ccfd0dd6af7dea428dd2ba99cfb38caa57dea6fd5257a547201000002d206b7dc3708f25cfd27e1c142c5deae3d42a34762d96491f4f20022f52805a02405692b5808e04d2cfc5f83322cb2d53a5bec62e56d7adc08cf62d093dea71b307150589394f141492f2486b3bfe09044c9825c7306ed60b1a3ebe5cc8e9eafe8ec18180d28791542bc9f7fa3c5705efa1fd26970dbe6ef60ca45db560af0381e92454c8922acf696d2685ddb6d55de7ce591d17542c0da527784ddb6f00a4d56269d4c918c6d96e1a1fec5c6784b25dcd31a39e995729caedf790b31579e6102fca9abcacb05a0ad5df1d9ecedb7de898e9238aa0fd5d21bc79fc888e5b494377ba9369f241a889aee38aed5866e2c972cd0867f4889f4286716241f831b115bcc533dc080c46867f3c97619dedf74b0a0876d149050182b84eb18e20f15d0ac6fc0c3b9ae3ae5a128a7660f7cc3d9e0ab5e92d83213e125006d69a8c641a6005984d0165f3b3454799a3a0bbf73954d0ec12805bed972ccf8eeb793e12971ae8894588e7a56a6b5026549ff34cb60fcb1fe35facff2c0aac66c29632d6e2de487d5bca47fc18d1e0e6523e803302d557b144ba509f54a959294ca016372c4bc3b06abefebe9f7e58555ab6f3a5593c35ff24972888e18f8517a1ed340191b3c8dc51b43f871064e0ebbcbc88cd760d32f77a68b7bc3b20f3f76be693bc8517cd69f2056a488a84fd8d5e593007ae065730a374906be94f757ee4e8a05f96f31e05e87c1f00826fbd6f1a79cb8275e271d98895bf0b6e044705a5c3e51951b4060823e7828f45f12593700301772a41e1660d22611812c2b31da0714bd254358a6272d63b59c0ac0c9294a9551623ddfcafe01bb863461afa9ec9c3b0bc1469b05ebf830f71ad79aaeb9307d718f66b451cff631f20b4b98b6255a7205d5ef6666dc573eda1d1ebd09499e561603a889d0eabb291e5bca5d80dff8018f1f609ea5d4a7e0974b3f79ba19478ae1f3b78e3f987ab1dc4b9b9bd16a22390de93e7fdc78ff71eb9ed0d597d01de3439f143b0ef736f62ae8d1d094e911d6b9c4f5f2187c01c938725a85789d512cbf1944360da81463177edb1fd4b58bd69e4dd10602c09cc4b69da035f61db4c6d62bd5424b1a471c348cb70674e223ff3b19295ad1c863556191643d35494649f5301eaad2992c4d4dfa1027b222c0e5e5acaa20c84c00f6419a1c1a63dfb08e82e9bc6f292da775edaac572d7ee48cdb163be093208bf8280ee9c54781f057b1a8072e62372ff898010465c85c69b3f92423cd6751488a56cd7ad74401d35d735dfb69ac4f8b58951bc431f2a73f26597bc04020da1011a6553af44f7baeab775246c6f60cdda66ba0917376872ac28b353a13f229726f40882009d001a6a57046ee6ef7e1172cf64ac489642c0344b5171839c10ca9bb5b8b706e035b8d11506e61a710764210bbf8208ed19439eb59e83d6803db897004c0e6361757f25c52b311130f94c332452cf95f2b014f0f5e0f2686308675d408d3bdbc5c140aaafd69cec59d17854de1913a0a4b3f4b3821247acf549f3efd1d6f54ae8fc98b5c060c5111e2bff9507b5d6917309b26ab587f21a9ccdb0ef987e13a59c647e8b00f40f8adca1bc64af3860330caed45e561036c1d26961ea277ee0239f9485f7b3b237605237473b9a269802de4e4831f2fc78375cc2f25c6b265b7d0c48740844c8d59ccf010e5c874ec702593094f5f679bbc0715a58fed28191a4c5f098ef1eb81a08f30f19c919ff531bb7c35b8d702cf4d54cccd54f4ded836951e0e0164a4efafa5487ccf4ba11821486bf2eba60346785bf46ae44b856fefcc20660cd80a856121618b769734be7aa34cb97b932af69b1eda8f8be1ec223a42cc3cef83494f52d765a3e5d87285f0b70aed3166374cc8f05d5d3418d51749819410520739c577dba9d5e56064fb1151e9e886e530e31cc14dfc7c44ca4560c8791bd7940e15d3466b615cc242435191a7e877dc71a1e695ca50511c5409d9e6856f51e54862fe0946b96ae37228e07d5c2546bdc605d58299e383e7d3443b366befed6b4dcb9e8608a69674915ecce54fb9142b9a787deced8c091dd76ea1b7b78350f1077eba2e3e459e17fe3c7ee298c8cd88160f4f17d0898be36f0acc85cd4f832c24fe28e9a45815fa10a30a393c4d246ae0753fd08f588e65a0ec1c60c41a9e52f84a1d6e58d2015fec26d356435b38981d4499534ae3fab72f64c85aa4f36eebea196592fff1bc822ca0abae6edf71949a518923e41f6f4163e2e3f412880e81d498e3e9669f7de00105961b15ce0bbbff772d7bb72355ea315b3138a9ec34d99851f62c56012eb161b3a49bc9c82b3593249c03ccd13555a5f00fbda5a2837546307773bd4f9e42bd9e141515c0a77309b332429875b67842d6d76046d7715cba2727b8329343ff454c6b7bc1829b45da6f755b6117901e55dbb8832d3879137c83263808a3c70ca3da9f7ca50d78b1f4638be0b44ce81605f066782ae83408bb8c14628c54332e5cef38b17a405eb2f3b873f508ca2ed86fc873deb08cd170f83a322fe17520f3421111af6a037a05eeb4513303d8bf29690663326fd25d2419bdc3da54e7858aac512034905dca61bb276e225054f69b5a6345c9ac704426844a06d190a35b1069853b5ff6fe3e01d84cf4d8445adb035fe0c1c68122a6163150989ef72dca9aa8abfe8de2257f6fd03360d0abe1e30ae39bf670c8b94b6484f60c01b7b2b9b7dba6a71a9ae708cab21f20c4d0e1686359f71fb83577c7d138719edc288de61b636428b148cdbcb23fd6f865b4aed80e44b604d487a926996badb5d0cccdd9d261b76d607b9504eac55328e08859c02b167db124dbf6e2b124e26cd2aa1f206a4ee67db29d61a60a0e811eae46104c16729825a4a167abac7e924e7c9baf4ec0372cadb387c4a87be966271fabea82f861f3c8c932caf47174a8e28f78a1f0ad65e7e90bfb3d6a632358d59453d0cae49578e6fd741389ff5fd411128a765f073e549c7216d0eb249bc41a862a1f08fbfc75f60f6a9551265be5bb4daa55aac73a33471511c9cac35adaa3e372e1d4e9ff6106a3814111697935c660c268741fbb8f3a65404a5de5b60e19e01117041d9acfaac992a968ed6395f887545ed16968e00235863123b74865ed45ff7e781776a49cd29d8d97551435f35e66d36039b1e941deaca2deb9ce07b172b202138fc2716513030f0a5b1b3cd6d630269c7db93a92d6e57379fc7457350548608773311656b48a1ece5031264941319a0f8152de03e7373cad860be3edbf842bbda49befbfdaebf0e8250f0f9e2fc362e726d2f1607dd6ab7cf8e4f09996cc60b7f6adcc5013f43f3615ff37cb61e8970f27d3ce3a513dd2c68da7c3c919dca94ebedfa2235d0ee841d36ecde3fbfb5b125b1d0e155002d49b4feaad28cf26698f03ddad65a6e76eedd4711ea508caf87c814b2fa596f14ba2cc80e75826c5b8f3ce72f158e6e58470e22fbcdfba837c376da2d61f91c7c0bb412a587e4cd23f62215a3aa693682c476507e0f4e473ca0910c365228f081ced67887506af4059ee43d5b85a1a87e80753bfca1969357bb9ff26798c0ffa1bc9cc7a3bf1b7b79899e664d8e2c85ebd54a26e13235d933e7bfad769c7af7236d0fe27299bfdf01998544767b28b905dd61933b1c4ba7d6e0e1f5c09402b6ff0dbad8827f02679839e0da484164c74b95ca1db41c343b5fccb06ed1b7efd859a4934a71de6017224ad71bff972dbb8e97f451ff64054b92b6975eb8d65bb21b7643b3985ed8fe67e53745ee5c7482b07560ff8cd3c91612716e4ebc6a960e441d2113d46b308d995ed01fa221d19ba8b4b02a0a1f9e29d24c022231f736fb7c0b90ca64a4309d99c7823e398d58a2718f71736e5a628a27d069c54a14fc86d22ffa23fbbc477d648b40881ca18a3c0198666ad5ee5d907b46999d3102daa64e5cdcd61d9aa2a80499954cec1331ea962f93d5272c35616990202c6770e69098274ad185b5922dc0b45f29f644c652d198be5342a7802d160535a4d89365f3e6f179420e53486bc90edc080c12c532a7a5bf6da5efe204d05f14738376b0bcfeea5d0f900571ba44d600c1d33dff91c43ea7a6af05f179b81b6005fc3e0ba18667f7b290da5c48076c005659b5851ac09dc633ad7b5a0f2dd952675cf53adf3a7f03b008263f8f2292db4a14bda9d901a67d148f8b89b9fd8bdb0c034835aec7118e2c669cbd68bebe39fd4566c8258099427da8a363e54ebf78521f8f8e85ec258e1c45fa4cc922180d439ca5837274af760b0d4b48f7042ca0f38276109ff72e6075e0575bb920b82ec9b3bf7033ed5c7ed8a31843da6b7b73c2aee62faef54a42385d0bfa58578ba6c3d7d1a769550e78c8e0d3fdcece51c1967c1e344821a81146a4ac9b85cbfa42902a7a3ce4745c2d75e3a5e79f27680144a0cc1267ef436c622dc16b5c8e6fc66101b0fc9b9149113e41c6dea4a20383775e4d3423fed32119406fe5f2133d5fd68025f7107ee7fa33cfdc813328e962c1eb5c6c85287b7549b2b0e2f3490db39ba9c0bd8574049db7cc3c619f5cd200ad020395027d95f1eef2f0a2ac04d5a7dba43103c446bb638e916ce7501f551cf2d3a019e39bc34ddbdb81a1cacb860466af94113efb4c241bef0f115e3a9067caae32b3c79095c34b763ed9e155d44c42155311b953a8586b957e802d0522da5fc1e9bbec3f7d26e37cd3b5dda1eeb9ac4f0688a13e66bdb192bf952229c151f0d7d35779984f317384285161590fd9de37075b36e08812e735013d16cc6598749204208b4051324a10864eec38bcb5ed58d2b7a9978219938f6222d4ecae9b2dd2e84094c3db1a96f3d4f49e59012d7abc249f06bcbd2764c1c09cfbf848e1386ae618de02f829098717474a4205f26ed3b08f142ae7e91b3895b5b3525d8037125a7cbb70d1132ebd3ef6a6755d94d3ea02945941253ca0f4e46a5ac864daa419afd2892b3d6ef368eeb5efbc20ac76a759bbd98162f7fb563691cfa41eee615ce9734bbefefc2d412f9e34f016db7b88570cb46e0eaa52d600f7d76d31e1508b4a02d9cbe2d5be0753e63feb3f201fc6890e3c8682fbcf86e0b9049c1a40d93bde8c75c7cd8203abdf88b83a3704ed955b46cb290f5b3fbfcc1f568efa025c5448a6536441fdf23e90bb5dcefa2f4b3402380de7bf2ad5635460ba67ac7f63d48881acf3dabb779f89bb7a5f927173fe795196a23ba3fb6af0a2c2f01b97a999f06dc1aece04cb115c4568f63ad90bb2a7cb8c3a2f6d0daf6fb76fb3434a933be6187e58964a16dda3f1432218bf82e70ef60e05821055f59be398a9f9d4f2211f25932d633e7c0f"}, 0x600) bind$ax25(r0, &(0x7f0000001200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 828.366714] FAULT_INJECTION: forcing a failure. [ 828.366714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 828.378544] CPU: 1 PID: 11808 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 828.386430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.395796] Call Trace: [ 828.398410] dump_stack+0x1b2/0x283 [ 828.402062] should_fail.cold+0x10a/0x154 [ 828.406224] __alloc_pages_nodemask+0x22b/0x2730 [ 828.411003] ? kernel_text_address+0x6e/0xe0 [ 828.415422] ? __kernel_text_address+0x9/0x30 [ 828.419931] ? unwind_get_return_address+0x51/0x90 [ 828.424885] ? __lock_acquire+0x655/0x42a0 [ 828.429653] ? depot_save_stack+0x10d/0x401 [ 828.433988] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 828.438490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 828.443343] ? check_preemption_disabled+0x35/0x240 [ 828.448388] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 828.453411] ? HARDIRQ_verbose+0x10/0x10 [ 828.457491] cache_grow_begin+0x91/0x410 [ 828.461564] cache_alloc_refill+0x28c/0x360 [ 828.465902] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 828.471018] __kmalloc_node_track_caller+0x38/0x70 [ 828.475958] __kmalloc_reserve.isra.0+0x35/0xd0 [ 828.480642] __alloc_skb+0xca/0x4c0 [ 828.484279] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 828.489130] ? lock_downgrade+0x6e0/0x6e0 [ 828.493291] alloc_skb_with_frags+0x85/0x500 [ 828.497792] ? check_preemption_disabled+0x35/0x240 [ 828.502819] ? perf_trace_lock+0x109/0x4b0 [ 828.507153] sock_alloc_send_pskb+0x57b/0x6d0 [ 828.511670] ? sock_kzfree_s+0x50/0x50 [ 828.515566] ? _copy_from_iter_full+0x1c7/0x680 [ 828.520673] ? __lock_acquire+0x655/0x42a0 [ 828.524915] tun_get_user+0x5d9/0x4190 [ 828.528854] ? tun_rx_batched.isra.0+0x740/0x740 [ 828.533617] ? perf_trace_lock+0x109/0x4b0 [ 828.537859] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 828.542894] ? HARDIRQ_verbose+0x10/0x10 [ 828.546963] ? __tun_get+0x11c/0x220 [ 828.550686] ? lock_acquire+0x170/0x3f0 [ 828.554663] ? lock_downgrade+0x6e0/0x6e0 [ 828.558827] tun_chr_write_iter+0xcf/0x180 [ 828.563068] __vfs_write+0x44e/0x630 [ 828.566787] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 828.573894] ? kernel_read+0x110/0x110 [ 828.577787] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 828.582913] __kernel_write+0xf5/0x330 [ 828.586809] write_pipe_buf+0x143/0x1b0 [ 828.590790] ? default_file_splice_read+0x870/0x870 [ 828.595811] ? __put_page+0xb9/0x2f0 [ 828.599526] ? anon_pipe_buf_release+0x237/0x2e0 [ 828.604290] __splice_from_pipe+0x332/0x740 [ 828.608627] ? default_file_splice_read+0x870/0x870 [ 828.613656] ? default_file_splice_read+0x870/0x870 [ 828.618681] splice_from_pipe+0xc6/0x120 [ 828.622752] ? splice_shrink_spd+0xb0/0xb0 [ 828.626990] ? __inode_security_revalidate+0xcf/0x120 [ 828.632194] ? security_file_permission+0x82/0x1e0 [ 828.637134] default_file_splice_write+0x37/0x80 [ 828.641903] ? generic_splice_sendpage+0x40/0x40 [ 828.646668] SyS_splice+0xca0/0x1230 [ 828.650397] ? SyS_write+0x14d/0x210 [ 828.654112] ? compat_SyS_vmsplice+0x150/0x150 [ 828.658694] ? SyS_clock_settime+0x1a0/0x1a0 [ 828.663105] ? do_syscall_64+0x4c/0x640 [ 828.667086] ? compat_SyS_vmsplice+0x150/0x150 [ 828.671685] do_syscall_64+0x1d5/0x640 [ 828.675593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 828.680783] RIP: 0033:0x45c1d9 [ 828.683967] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 828.691682] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 828.698958] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 828.706234] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 15:42:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003140), 0x5e3) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000200)={0x3, 0x0, 0x1000000, 0x200}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006faf5a94b657a288e22698e1fa05991ed10e886f945ff8cd89362"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x225ce332) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000001c0)=0x4) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) [ 828.713509] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 828.720788] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 15:42:35 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0xffff, 0xfff, 0x1000, 0x7f, 0x7f00}) 15:42:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f00000001c0)=0x28) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:36 executing program 0 (fault-call:12 fault-nth:45): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 829.290942] FAULT_INJECTION: forcing a failure. [ 829.290942] name failslab, interval 1, probability 0, space 0, times 0 [ 829.316097] CPU: 0 PID: 11840 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 829.324016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.333366] Call Trace: [ 829.335950] dump_stack+0x1b2/0x283 [ 829.339565] should_fail.cold+0x10a/0x154 [ 829.343701] should_failslab+0xd6/0x130 [ 829.347659] kmem_cache_alloc_node_trace+0x25a/0x400 [ 829.352747] __kmalloc_node_track_caller+0x38/0x70 [ 829.357664] __kmalloc_reserve.isra.0+0x35/0xd0 [ 829.362319] __alloc_skb+0xca/0x4c0 [ 829.365928] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 829.370838] ? lock_downgrade+0x6e0/0x6e0 [ 829.374987] alloc_skb_with_frags+0x85/0x500 [ 829.379384] sock_alloc_send_pskb+0x57b/0x6d0 [ 829.383869] ? sock_kzfree_s+0x50/0x50 [ 829.387756] ? _copy_from_iter_full+0x1c7/0x680 [ 829.392404] ? __lock_acquire+0x655/0x42a0 [ 829.396622] tun_get_user+0x5d9/0x4190 [ 829.400500] ? tun_rx_batched.isra.0+0x740/0x740 [ 829.405236] ? perf_trace_lock+0x109/0x4b0 [ 829.409456] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 829.414364] ? HARDIRQ_verbose+0x10/0x10 [ 829.418405] ? __tun_get+0x11c/0x220 [ 829.422097] ? lock_acquire+0x170/0x3f0 [ 829.426069] ? lock_downgrade+0x6e0/0x6e0 [ 829.430203] tun_chr_write_iter+0xcf/0x180 [ 829.434423] __vfs_write+0x44e/0x630 [ 829.438122] ? __schedule+0x8ae/0x1d70 [ 829.441989] ? kernel_read+0x110/0x110 [ 829.445866] ? pipe_wait+0x171/0x190 [ 829.449567] __kernel_write+0xf5/0x330 [ 829.453440] write_pipe_buf+0x143/0x1b0 [ 829.457397] ? default_file_splice_read+0x870/0x870 [ 829.462393] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 829.467739] __splice_from_pipe+0x332/0x740 [ 829.472045] ? default_file_splice_read+0x870/0x870 [ 829.477050] ? default_file_splice_read+0x870/0x870 [ 829.482048] splice_from_pipe+0xc6/0x120 [ 829.486108] ? splice_shrink_spd+0xb0/0xb0 [ 829.490323] ? __inode_security_revalidate+0xcf/0x120 [ 829.495501] ? security_file_permission+0x82/0x1e0 [ 829.500533] default_file_splice_write+0x37/0x80 [ 829.505279] ? generic_splice_sendpage+0x40/0x40 [ 829.510014] SyS_splice+0xca0/0x1230 [ 829.513715] ? SyS_write+0x14d/0x210 [ 829.517412] ? compat_SyS_vmsplice+0x150/0x150 [ 829.521974] ? SyS_clock_settime+0x1a0/0x1a0 [ 829.526363] ? do_syscall_64+0x4c/0x640 [ 829.530352] ? compat_SyS_vmsplice+0x150/0x150 [ 829.534918] do_syscall_64+0x1d5/0x640 [ 829.538796] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 829.543965] RIP: 0033:0x45c1d9 [ 829.547135] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 829.554827] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 829.562093] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 829.569347] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 829.576599] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 829.583849] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:36 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@multicast2, @rand_addr=0x64010100, r5}, 0xc) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r7) fremovexattr(r7, &(0x7f0000000040)=@random={'trusted.', '[\x00'}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:36 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="256100000000000000000000000008000500ac1e0001080002000100000008000400e000000108000100", @ANYRES32=0x0, @ANYBLOB="ec33453c09000000000000744c20f98eb5f5a2975ee7e2805db3f277b777bfd0c4232fe28e51d2da8194c2317a8d01285e42dd"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005070600"/20, @ANYRES32=r7, @ANYBLOB="00000000d290e4cb9d0f6610b8af8823a70012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYRES32=r7, @ANYBLOB="00000000ffffff0700000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@deltaction={0x7c, 0x31, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x40, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x7c}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032abd7000fcdbdf2501000000060006000100000008000100", @ANYRES32=r7, @ANYBLOB="06000600000000000800090002000000080001006e14f802222e9a4b7edda1be3e0b90755b7dce40c5798c3dac94ab9edf8e15f54cfef8ca1fb45540fb29c4bce9909c2408aee3028d649ecafef761199072840d0374a78b8fe4d1ffc5fda2e77b0580b17e1ba6ba9697521ef3", @ANYRES32=0x0, @ANYBLOB="0600060004000000080005000a0101020604060000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x20000040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000202012d000000000000000000000000200003006269746d61703a6970200000050004000000000009251ea45556de4f3600020073797a3000010100000007800c00038008e7000000000c000180080001f277050000080006400800000505000500020000"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) [ 829.977476] netlink: 50 bytes leftover after parsing attributes in process `syz-executor.1'. 15:42:37 executing program 0 (fault-call:12 fault-nth:46): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 830.201522] FAULT_INJECTION: forcing a failure. [ 830.201522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 830.213364] CPU: 1 PID: 11858 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 830.221250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.230609] Call Trace: [ 830.233210] dump_stack+0x1b2/0x283 [ 830.236849] should_fail.cold+0x10a/0x154 [ 830.241005] __alloc_pages_nodemask+0x22b/0x2730 [ 830.245764] ? kernel_text_address+0x6e/0xe0 [ 830.250174] ? __kernel_text_address+0x9/0x30 [ 830.254669] ? unwind_get_return_address+0x51/0x90 [ 830.259602] ? __lock_acquire+0x655/0x42a0 [ 830.263841] ? depot_save_stack+0x10d/0x401 [ 830.268185] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 830.272778] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 830.277624] ? check_preemption_disabled+0x35/0x240 [ 830.282661] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 830.287604] ? HARDIRQ_verbose+0x10/0x10 [ 830.291684] cache_grow_begin+0x91/0x410 [ 830.295765] cache_alloc_refill+0x28c/0x360 [ 830.300099] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 830.305216] __kmalloc_node_track_caller+0x38/0x70 [ 830.310160] __kmalloc_reserve.isra.0+0x35/0xd0 [ 830.314851] __alloc_skb+0xca/0x4c0 [ 830.318483] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 830.323335] ? lock_downgrade+0x6e0/0x6e0 [ 830.327497] alloc_skb_with_frags+0x85/0x500 [ 830.331910] ? check_preemption_disabled+0x35/0x240 [ 830.336935] ? perf_trace_lock+0x109/0x4b0 [ 830.341180] sock_alloc_send_pskb+0x57b/0x6d0 [ 830.345690] ? sock_kzfree_s+0x50/0x50 15:42:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd601645ca9e2b8ca022173dac00183cc65e52008020770000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = socket(0x25, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240), &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x201, 0x9, 0xfffffffc}, 0x10) [ 830.349596] ? _copy_from_iter_full+0x1c7/0x680 [ 830.354271] ? __lock_acquire+0x655/0x42a0 [ 830.358508] tun_get_user+0x5d9/0x4190 [ 830.362408] ? tun_rx_batched.isra.0+0x740/0x740 [ 830.367163] ? perf_trace_lock+0x109/0x4b0 [ 830.371402] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 830.376338] ? HARDIRQ_verbose+0x10/0x10 [ 830.380399] ? __tun_get+0x11c/0x220 [ 830.384114] ? lock_acquire+0x170/0x3f0 [ 830.388088] ? lock_downgrade+0x6e0/0x6e0 [ 830.392246] tun_chr_write_iter+0xcf/0x180 [ 830.396483] __vfs_write+0x44e/0x630 [ 830.400197] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 830.405301] ? kernel_read+0x110/0x110 [ 830.409194] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 830.414322] __kernel_write+0xf5/0x330 [ 830.418220] write_pipe_buf+0x143/0x1b0 [ 830.422198] ? default_file_splice_read+0x870/0x870 [ 830.427215] ? __put_page+0xb9/0x2f0 [ 830.430928] ? anon_pipe_buf_release+0x237/0x2e0 [ 830.435687] __splice_from_pipe+0x332/0x740 [ 830.440017] ? default_file_splice_read+0x870/0x870 [ 830.445038] ? default_file_splice_read+0x870/0x870 [ 830.450065] splice_from_pipe+0xc6/0x120 [ 830.454139] ? splice_shrink_spd+0xb0/0xb0 [ 830.458372] ? __inode_security_revalidate+0xcf/0x120 [ 830.463581] ? security_file_permission+0x82/0x1e0 [ 830.468524] default_file_splice_write+0x37/0x80 [ 830.473286] ? generic_splice_sendpage+0x40/0x40 [ 830.478059] SyS_splice+0xca0/0x1230 [ 830.481785] ? SyS_write+0x14d/0x210 [ 830.485502] ? compat_SyS_vmsplice+0x150/0x150 [ 830.490083] ? SyS_clock_settime+0x1a0/0x1a0 [ 830.494497] ? do_syscall_64+0x4c/0x640 [ 830.498468] ? compat_SyS_vmsplice+0x150/0x150 [ 830.503057] do_syscall_64+0x1d5/0x640 [ 830.506954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 830.512144] RIP: 0033:0x45c1d9 [ 830.515331] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 830.523041] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 830.530312] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 830.537581] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 830.544863] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 830.552133] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac 15:42:37 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:37 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006d837a4805682b75210825bbb21b39aebfe9baed9e2de74842df7b9a72f25e46b466ecc416515fae33407e4f99df1aa7bf99fe612e49a95391df3bd45d60b096ec014376d86b9174f819559c186f7f89dcff8c4f2adf9651c8d00750867fea0c89371e08f4f2e980dece5f6b03a7ee2496310b7b28dbcaa632b3fd1cb542f137c3c80360c08abe0e8be0cd3c39b7cd19e9b1b9758feeadcc6bfe9d1b320917f04164f86cc130d3419467ac2b8c39588c96f14b647c23c66c9"], 0x1}, 0x8}, 0x24004800) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000180)={0x2, r7}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) open_by_handle_at(r3, &(0x7f00000001c0)={0x1008, 0xb15, "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"}, 0x210200) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x2, {0x4, 0x1, 0x4, 0x2f47}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x3ff, @mcast1, 0xfffffffc, 0x4}, 0x20) 15:42:37 executing program 0 (fault-call:12 fault-nth:47): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup2(r5, r4) r6 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r6, 0x0, 0x70bd2c, 0xd1df, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev}}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c801) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="23032abd7000fbdbdf25040000001400020000000000000000000000ffffe00000020800050064090102"], 0x30}, 0x1, 0x0, 0x0, 0x4000891}, 0x24004840) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 831.140553] FAULT_INJECTION: forcing a failure. [ 831.140553] name failslab, interval 1, probability 0, space 0, times 0 [ 831.173849] CPU: 1 PID: 11885 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 15:42:38 executing program 3: socket$kcm(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x4ac}], 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x180, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5467}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x20000006) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="eb030002b6492f7c982d80a34d7801cc630f7d8013590aaef52f69cb5b6d84a1d18dfc7ba1c5dfb31bbd9d90acc3cfe2bcd2a2832c8dd7e58bd2a7ea43c69948", @ANYRES16=r1, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003140), 0x5e3) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d080200007c09e8fe55a10a0015000200142603000e1208000b0001800001a800160008000600e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791640c8d768dc6f15b07e6236b76a58cccd33a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf63951f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd8}, {&(0x7f0000000040)="8e7102f0282bdae53e5ab20db7dc62faf6c9f61bf3d34bf5c4082656586032d1b1bd97194d228dd644e49d456dfc2b410e50255d6c4ff9f94835b4ed0bdd001ac5ab3cdd92c90391c6ca1ed9d3fdd73e3c6fd02b52e7e9f4f2a8312fb64b59ea0be374d3bbb249de36d95af2dfadb1738d1d93cd1cc7d5e43e7b20788b8aead7706dec16877d57ce8b38cabcc8bb49c7a610f658bf97ebbb30", 0x99}, {&(0x7f0000000440)="20c09f2a361b7598975fdb9d1512bc4df7711a59b8638e84a70fabc11156cf080bad93f7e847f2860fd78b6878bf", 0x2e}, {&(0x7f0000000140)="2034a868f030e1eadfb449533d26a105a07ea11438ff82b54754d1ae3acaeb5fca032409b968768df7ec46f51e78dce25b982747790b", 0x36}], 0x4}, 0x20040081) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000940)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r6) keyctl$get_persistent(0x16, r5, r6) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) read$FUSE(r8, &(0x7f0000003140), 0x5e3) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x38eac76e, 0x0, 0x2, 0x80}) ioctl$DRM_IOCTL_AGP_UNBIND(r8, 0x40106437, &(0x7f00000002c0)={r9, 0x4}) [ 831.181774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.191132] Call Trace: [ 831.193735] dump_stack+0x1b2/0x283 [ 831.197395] should_fail.cold+0x10a/0x154 [ 831.201554] should_failslab+0xd6/0x130 [ 831.205537] kmem_cache_alloc_node_trace+0x25a/0x400 [ 831.210653] __kmalloc_node_track_caller+0x38/0x70 [ 831.215592] __kmalloc_reserve.isra.0+0x35/0xd0 [ 831.220258] __alloc_skb+0xca/0x4c0 [ 831.223879] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 831.228726] ? lock_downgrade+0x6e0/0x6e0 [ 831.232887] alloc_skb_with_frags+0x85/0x500 [ 831.237305] ? check_preemption_disabled+0x35/0x240 [ 831.242327] ? perf_trace_lock+0x109/0x4b0 [ 831.246574] sock_alloc_send_pskb+0x57b/0x6d0 [ 831.251085] ? sock_kzfree_s+0x50/0x50 [ 831.254980] ? _copy_from_iter_full+0x1c7/0x680 [ 831.259658] ? __lock_acquire+0x655/0x42a0 [ 831.263991] tun_get_user+0x5d9/0x4190 [ 831.267895] ? tun_rx_batched.isra.0+0x740/0x740 [ 831.272661] ? perf_trace_lock+0x109/0x4b0 [ 831.276912] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 831.281851] ? HARDIRQ_verbose+0x10/0x10 [ 831.285919] ? __tun_get+0x11c/0x220 [ 831.289645] ? lock_acquire+0x170/0x3f0 [ 831.293623] ? lock_downgrade+0x6e0/0x6e0 [ 831.297784] tun_chr_write_iter+0xcf/0x180 [ 831.302026] __vfs_write+0x44e/0x630 [ 831.305754] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 831.310861] ? kernel_read+0x110/0x110 [ 831.314757] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 831.319892] __kernel_write+0xf5/0x330 [ 831.323798] write_pipe_buf+0x143/0x1b0 [ 831.327779] ? default_file_splice_read+0x870/0x870 [ 831.332906] ? __put_page+0xb9/0x2f0 [ 831.336630] ? anon_pipe_buf_release+0x237/0x2e0 [ 831.341401] __splice_from_pipe+0x332/0x740 [ 831.345733] ? default_file_splice_read+0x870/0x870 [ 831.351020] ? default_file_splice_read+0x870/0x870 [ 831.356045] splice_from_pipe+0xc6/0x120 [ 831.360114] ? splice_shrink_spd+0xb0/0xb0 [ 831.364369] ? __inode_security_revalidate+0xcf/0x120 [ 831.369568] ? security_file_permission+0x82/0x1e0 [ 831.372785] Invalid option length (1806) for dns_resolver key [ 831.374499] default_file_splice_write+0x37/0x80 [ 831.374514] ? generic_splice_sendpage+0x40/0x40 [ 831.374524] SyS_splice+0xca0/0x1230 [ 831.374542] ? SyS_write+0x14d/0x210 [ 831.374553] ? compat_SyS_vmsplice+0x150/0x150 [ 831.374563] ? SyS_clock_settime+0x1a0/0x1a0 [ 831.374574] ? do_syscall_64+0x4c/0x640 [ 831.374583] ? compat_SyS_vmsplice+0x150/0x150 [ 831.374595] do_syscall_64+0x1d5/0x640 [ 831.418726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 831.423922] RIP: 0033:0x45c1d9 [ 831.427116] RSP: 002b:00007feefa842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 831.434925] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9 [ 831.442192] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 831.449464] RBP: 00007feefa842ca0 R08: 0000000000018100 R09: 0000000000000000 [ 831.456740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f [ 831.464009] R13: 00007ffcb2c1368f R14: 00007feefa8439c0 R15: 000000000078bfac [ 831.477604] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max 15:42:38 executing program 3: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, 0x0) r1 = open(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r2, 0x0, 0x1) getrandom(0x0, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x2, 0x1}) fallocate(r2, 0x0, 0x0, 0x8020003) dup(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x0, 0x6) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000240), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 831.532989] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on %z5 15:42:38 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x1}, {0xfff2}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r7, 0x29, 0x36, 0x6, 0x7, 0x20, @rand_addr=' \x01\x00', @mcast2, 0x8, 0xf808}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r6], 0x1}, 0x8}, 0x40048d1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 831.641741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:38 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYBLOB="3832fa86ac3ad42615dbeb631477ebb820ea8691085e4ff0b951af0ac5058a9517e6cc3a1b67e08b055be490fd8d5c0e7ff5f06f111055d850915bc1656b83252ae5714946c20c6ba5dbb7eeade197ec481fdc9584b3c928fe40550484991e54db35d54dc9"], 0x1}, 0x8, 0x0, 0x0, 0x440080d1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000140)={0x8, 0xffff, 0x971, 0x20, 0x5c, 0x11, 0x24, "3d3177862bd6aacc23097a8b4b0c0aa13eb6cd28", "ae14a4d964b7cd20a77de80b8f6f7c4d0be8cb5b"}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x32, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 15:42:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d6) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000400)="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", 0xfa) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000080)) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000240)={0x9d0000, 0x1000, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a60, 0x9, [], @value=0x400001ff}}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000280)={0x4000, 0x0, 0x8, 0x3, 0x3f}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x200}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086cd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x2800, 0x0) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x7, 0xf2, 0x2, 0x2}, {0x914d, 0xff, 0x1, 0x2}, {0x22ee, 0x40, 0x11, 0x1000}, {0x3, 0x6, 0x69, 0x400}]}) splice(r7, 0x0, r2, 0x0, 0x18100, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)}) 15:42:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000180)={0x4, 0xffffffff, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:39 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x225ce332) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r6, 0x0, 0x0) fcntl$setown(r4, 0x8, r6) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:39 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000040)=0x4, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400040000000900020073797a3000000000240007800c0002800800bb400f76a7130140000000000c0001802700010000000000004018400000000505000500020000000501010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 15:42:39 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000000)={0x0, @frame_sync, 0x0, 0x0, {0x0, 0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x10000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x5, 0x6, 0x305, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x40488c0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000080)) r8 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000100)) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRESDEC=r7, @ANYRES16=r0], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:39 executing program 3: creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x0, 0x7fffffff, 0x0, 0x1cd5, 0x1, 0x9}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='oom_score\x00') ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback={0x57220600}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 15:42:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaabe2aaaabb0800018c14141f03009000000080000100007f000001ac14142d00000080003b0000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000100)=0x2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={r0}) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x6, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x20002084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x320, 0x4b0, 0x10, 0x960, 0x3, 0x3, 0x10, 0x1, {0x0, 0x1}, {0x82, 0x1, 0x1}, {0x7fffffff, 0x5, 0x1}, {0x1ff, 0xffffa143, 0x1}, 0x2, 0x80, 0x1000, 0x5, 0x1, 0x80000001, 0x951, 0x4, 0x1, 0x8001, 0x7, 0x32d6, 0x2, 0x2, 0x3, 0x5}) 15:42:39 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010045) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x5, 0x4) 15:42:39 executing program 3: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x40, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000280)={0x5, 0x5ef, 0x20, 0x5, 0x9, 0x17, 0x15, "7fb263362842518bf07a9a92b47c23c29ac61637", "29f4ff44f03ad0b8e79bda703de6b770b32aa04c"}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x488402) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xca6) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) 15:42:39 executing program 5: sync() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r5}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x7ff, 0x0) 15:42:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f00000000c0)="70abd482a791", 0x6) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa183200fe8000000000000000000000000000aaff0200000000000086503b4a00000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:39 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) socket$unix(0x1, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="edbfd8cf1a3d07b189011edbf6cb9ccebee6ae32b6fd"], 0x16) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xfef0) splice(r0, 0x0, r5, 0x0, 0x81000001, 0x0) 15:42:39 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) fcntl$setlease(r3, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 15:42:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x14e) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:40 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigaction(0x9, &(0x7f00000000c0)={&(0x7f0000000040)="66420f3a0b80419f762001c4617fe66c1393c4e2790e4e43c4837d42b095c298201c6445ed3eff193459f20f2a41b4c4e225b6e6f3400fa6c8", 0x2, &(0x7f00000001c0)="3666410f73f7953ef3430f01da2665430f119eeadbb33b0f71f200c403a95f2f03f3410faedd8fa8689f6fa9fc66420fd30d8b0000002e65f3460f7edc3e66450f3837e5", {[0x5889]}}, &(0x7f0000000480)={&(0x7f0000000240)="c401a1ed4700f340a741de7eca47db484fc4a25d9c8cbd00000000c44305689d72c968f4f8c4e15deda83d000000f3410f2c75d5440fd400c4421d9b8708000000", 0x0, &(0x7f00000002c0)="c4e2fd224e6c998f0900951b26f3430f2cdb42737c660f1bf58f4978c63c98662ef342a7c4c2218ea1100000000f2dae153ee9e9"}, 0x8, &(0x7f0000000340)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8, 0x0, 0x0, 0x4001}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f00000004c0)={0x0, "fa1c52541f1ffe5ba84c12a839d70fd6ef2a4b929ad0a45f30a87b202fac768f", 0x3, 0x4, 0x5, 0x4, 0x4}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="daa8a130", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf2507000000080005006401010014000300ff01000000000000000000000000000108000400ac141429"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x25, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20cd0000000000008400000002000000000004000000000000000000", @ANYRES32=r5], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r5, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r6, 0x1}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x8400, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x338) 15:42:40 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) setsockopt(r6, 0x100, 0x2, &(0x7f00000001c0)="0ee47759238e0d06cb023a985aeee0358bc86f55d301bc26d6f5ef75fe6f8d77e6a132b1f7ec0da8041ed592aafc4756d6e1a04b1f389c87d5b21d31fb11be9eb1727a417c0871149b3337e936cce709d4e2a89cced7a6f93702d02af6197258d5a7e650820561def0fca9eb15817a6deb9b33abca220d6a94f90c1c845acd0d9851eddbfd814e5222843e810175ddf991509c50bae41115", 0x98) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1}, 0x8, 0x0, 0x0, 0x20000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000000c0)='/dev/net/tun\x00', 0xd) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:40 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r2) dup(r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r0, 0x8200) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000001640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x1c8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f00000000c0)={0x7fff, 0x4b, "5968eb025680b68dc8cd26162f6a812f42ebabd6774f90d715c8c8cdc26a08474eed7a2b20850b3317051bd95e41b5f88256ce188b9da5f2bfeaaea075abb16752d3d00e6ff86ce3c72466"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x849, 0x9, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:42:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000000c0)={0x8, 'bond_slave_1\x00', {'geneve1\x00'}, 0x5}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@loopback, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x191c02, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0xfffffff9, 0x80000000, 0xfffffff9, 0xe4, 0xa, "5ae2317d2e87fa52bb4a239ec423bf49c094bc"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read$snddsp(r2, &(0x7f0000000640)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3000fffffff80000844000000100000050ea3b91a050ec14d71a6b500300ff0301000000895c10157f000000fb0000000080000099030000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r4, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x3f, 0x5}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r5, 0xd56a}, 0x8) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:42:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000000c0)={0x8001, 0x3, 0x8, 0x100, 0x9, 0x7}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0x9e0000, 0x1, 0x3, r2, 0x0, &(0x7f00000001c0)={0x990a78, 0x0, [], @p_u8=&(0x7f0000000180)=0x85}}) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa00183200fe80000000000000000000000000009fff020000000000000000000000000001000000000000000000c449"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x48106, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003140), 0x5e3) accept4$phonet_pipe(r3, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x800) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80000) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000080)=""/251, &(0x7f00000001c0)=0xfb) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xd, 0x0, 0xffffffffffffff9c}) mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) 15:42:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x48106, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003140), 0x5e3) accept4$phonet_pipe(r3, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x800) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80000) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000080)=""/251, &(0x7f00000001c0)=0xfb) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xd, 0x0, 0xffffffffffffff9c}) mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) 15:42:41 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="19466d7aa94196ff00000000000000", 0xf) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0)={0x0, 0x1, 0x400}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) 15:42:41 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/232, &(0x7f0000000040)=0xe8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) getgroups(0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, r5]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000000100)) fstat(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x7}], {0x4, 0x4}, [{0x8, 0x1b4742a7897f8de2}, {0x8, 0x4, r6}, {0x8, 0x4, r7}, {0x8, 0x5, r9}, {0x8, 0x4, 0xee01}], {0x10, 0x4}, {0x20, 0x4}}, 0x6c, 0x2) r10 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:41 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x225ce332) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x80000) splice(r2, 0x0, r1, 0x0, 0x7ff, 0x8) 15:42:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)="a23b86db90f30e0490ba31fecf9b5caa58c75fa24644827390f1c660cb67d4ffcc9011dcbafb9f3ce4c3d7318c1b3f725bef51716d0f8f48fa00d40317528d3aa50c5caf5b500f341b736eacc312921079fbb041134e1549ddfdffefff8abd1e7717b23e2041b4432a8ea30649b84029900a4d6eceb7", 0x76, r2}, 0x68) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x18100, 0x0) 15:42:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$getregs(0xe, r4, 0x7, &(0x7f0000000180)=""/4096) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaafe800000000000000000005b0aee4fcbe0280a00000000000000000000000001000000000000b8ea4c8a99c92663b8fcea000000000000000000"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getrandom(&(0x7f0000000180)=""/87, 0x57, 0x2) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003140), 0x5e3) read$FUSE(0xffffffffffffffff, &(0x7f0000003140), 0x5e3) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)={'a', ' *:* ', 'rwm\x00'}, 0xa) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)="6124a49945f710629b6d2c8c92dcb5549aa7777bafd9e1bf1d215b69b63f08094448348139d564aa1c97ca77c3c8fc61b507e677375fd054ee6961c1704a0c7e9dd7a29e56bb03b00ff99a4f8757c5360d3b1097a02a88746918079ada32304f5c073bb4af8188ccef3281c11c2c1b58447a21b616e31f003ce7c06ca1556daf554d74252156dfc840dd822d8dcf1b83aa06b877ea048df40701b88f5b7f3c58c72f", 0xa2) fcntl$setstatus(r1, 0x4, 0x2800) prctl$PR_SET_SECUREBITS(0x1c, 0x30) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000002080102000000ff00030000010073607a30000000000600024088640000050003002f0000000900010073797a3000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040006) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) recvmmsg(r5, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000080)=""/55, 0x37}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x4, &(0x7f0000000340)=""/120, 0x78}}], 0x1, 0x0, 0x0) 15:42:42 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006ed44bc11e1d0b02cb9cea1f86e9f8644"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000080)={{0x3c, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e22, 0x2, 'lblcr\x00', 0xc, 0x0, 0x40}, {@broadcast, 0x4e21, 0x10000, 0x2, 0x8, 0x7}}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 835.111945] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.133006] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.195678] IPVS: set_ctl: invalid protocol: 60 172.20.20.30:20002 15:42:42 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = dup(r3) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x3c49f873cf5abe5f, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 835.264997] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 835.273062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 835.287488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:42:42 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x21, 0x20, 0xf, 0x1, 0x2, 0xff, 0x1, 0x3d, 0x1}) [ 835.318614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.329460] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 835.337449] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.393943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.460263] IPVS: set_ctl: invalid protocol: 60 172.20.20.30:20002 [ 835.481870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:42:42 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000200)=0x101, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r6, 0x800443d2, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{@fixed}, {@fixed}]}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe80000000000000000008aaff02000000000000000000000000000100000000"], 0x52) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:42 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x17c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10000}, [@IFLA_AF_SPEC={0x15c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xf}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x17c}}, 0x0) [ 835.514347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 15:42:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x101000, 0x0) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000002c0)=0x52bd, 0x4) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0xb24}, 0xd, 0x1, 0x3, 0x0, 0x17, 'syz1\x00', "ddeed53a8de23cecc2ef9f5aa3189af41863adb9fbfa117d9e24e09586a22325", "950e5c6f12fb21da61e894939dc44ab099e9b6335dcbda689c1d10cae1d8596b", [{0x2, 0x5, {0x0, 0xa0b}}, {0x6, 0x1, {0x0, 0x8}}, {0x8, 0x9, {0x1, 0x8}}, {0x2, 0x9, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0x3}}, {0x7fff, 0x0, {0x3, 0x1}}, {0x200, 0x401, {0x3, 0xffff8000}}, {0x40, 0x100, {0x3, 0x1}}, {0x2df8, 0x3, {0x1, 0x7ff}}, {0x1, 0x0, {0x0, 0x6}}, {0x5, 0x6, {0x2, 0x3f}}, {0x2f6, 0x3, {0x2, 0x6}}, {0x5, 0x2, {0x1, 0xf0e0}}, {0xfff, 0xbfd, {0x0, 0x9}}, {0x2, 0x6, {0x3, 0x553f}}, {0x3ff, 0x0, {0x3, 0x200}}, {0x840, 0x5, {0x3, 0x4}}, {0x5, 0xfff, {0x0, 0x7}}, {0x4, 0x5, {0x1, 0x3}}, {0x0, 0x1, {0x1, 0x9}}, {0x3, 0x8, {0x1, 0x400}}, {0x7b66, 0x6, {0x2, 0x4bfb2e3d}}, {0x6, 0x4, {0x0, 0x2}}, {0x1, 0x8000, {0x1, 0x4}}, {0x7fff, 0x14, {0x3, 0xdf5}}, {0x3, 0x20, {0x3, 0x10000}}, {0x20, 0x4, {0x0, 0x101}}, {0x6, 0x2, {0x2, 0x1}}, {0xca, 0x0, {0x0, 0x80000000}}, {0x1ff, 0x20, {0x1, 0x2}}, {0x7, 0x8, {0x2, 0x800}}, {0x6, 0x1, {0x3, 0x3f}}, {0xec0, 0xfff, {0x3, 0xa9}}, {0x7, 0x0, {0x0, 0xf87}}, {0x5, 0x8, {0x1, 0x5}}, {0x0, 0x49, {0x0, 0x401}}, {0x4, 0x8, {0x0, 0x5}}, {0xe9e4, 0x6, {0x1, 0x5}}, {0x3, 0x307b, {0x3}}, {0x80, 0x80, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x4, 0x9, 0x5, 0x80, 0xd, 'syz1\x00', "b7fc0d2f1d26e2161df4b8d7e6de99a218e66d138fa4a2020170e47ae745debc", "65e482a99ac65a62be21a69621567d0289b5e7f33318264a846c90de3be04bab", [{0x9, 0x4, {0x3, 0xe408}}, {0x4, 0x40, {0x3, 0xb08e}}, {0x200, 0x800, {0x0, 0x1}}, {0xffff, 0x5, {0x2, 0xfffffffd}}, {0x6, 0xedc, {0x2, 0x100}}, {0xfff8, 0x100, {0x3, 0x7fff}}, {0x6, 0x9, {0x1, 0x1f}}, {0x6, 0x5, {0x2, 0x2}}, {0x40, 0x2, {0x0, 0x3}}, {0x400, 0x2, {0x2, 0x5}}, {0x81, 0x8d, {0x2, 0x3}}, {0x8, 0x3, {0x0, 0x8}}, {0x8, 0x6, {0x1, 0x4}}, {0x2, 0x43, {0x1, 0x401}}, {0x3acc, 0x7, {0x0, 0x1f}}, {0x4, 0xac36, {0x1, 0xffff2443}}, {0xff88, 0x9, {0x0, 0x5}}, {0x1, 0x200, {0x2, 0x8001}}, {0x0, 0x2, {0x1, 0x1000}}, {0x5, 0x1, {0x0, 0x7}}, {0xa2, 0x7, {0x0, 0xfff}}, {0x1, 0x8, {0x2, 0x9}}, {0x4, 0x40, {0x3, 0x5}}, {0x9, 0x99a, {0x2, 0x9}}, {0x7, 0x6, {0x2, 0x8}}, {0x9, 0x4, {0x0, 0x2}}, {0x5, 0xfff, {0x0, 0x7fffffff}}, {0x5, 0x7ff, {0x2, 0x1}}, {0xf53, 0x1, {0x3, 0x6}}, {0x250a, 0x3, {0x3, 0xfff}}, {0x4, 0x0, {0x0, 0x9}}, {0x0, 0x0, {0x3, 0x6}}, {0xc9, 0x2, {0x0, 0x6}}, {0x80, 0x1f, {0x2, 0xb377}}, {0x400, 0x20, {0x0, 0x101}}, {0x1f, 0x1f, {0x3, 0xa1}}, {0xafa1, 0x8, {0x3, 0xffffffff}}, {0x101, 0x6, {0x1}}, {0x9, 0xb4ad, {0x1, 0xffff}}, {0x648, 0x80, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x7, 0x6, 0xffff, 0x8, 0x22, 'syz1\x00', "acbd3de2defc6b71c26ee3e1d41d6fa11177fd32809acde0f843529113852b76", "4895bee177251e031e92cabe83d5065743e8cc882dfbb49d1c6628db73f585bc", [{0x8, 0x79, {0x2, 0x3}}, {0x1, 0x1, {0x0, 0xc06a}}, {0x8, 0x9, {0x2}}, {0x100, 0x1ff, {0x3}}, {0x5, 0xf001, {0x1, 0x6}}, {0x4, 0x5bc, {0x3, 0x1ff}}, {0xeb, 0x1000, {0x3, 0x81}}, {0xfff8, 0x1, {0x1, 0x81}}, {0x0, 0x7, {0x2, 0x6}}, {0x3f, 0x1, {0x2, 0xfffffffa}}, {0x101, 0x7f, {0x3, 0x480000}}, {0x8, 0x20, {0x3}}, {0x3, 0x42f5, {0x1, 0x9}}, {0x2175, 0xfffa, {0x2, 0x7fff}}, {0x3, 0x1, {0x3, 0x20}}, {0x2, 0x7fff, {0x2, 0x2}}, {0x8, 0x7ff, {0x1, 0xfffffff9}}, {0x0, 0x6, {0x3, 0x1}}, {0x200, 0xbab, {0xe6472ee40cc57cf6, 0xfffff7b2}}, {0xf671, 0x1, {0x0, 0x35}}, {0x5, 0x101, {0x2, 0xc4}}, {0xf4d5, 0xff00, {0x1, 0x9}}, {0xa6, 0x3, {0x0, 0x9}}, {0x9, 0x97, {0x3, 0x5}}, {0x1, 0x8001, {0x3, 0xf5c}}, {0x7f, 0x1a4, {0x3, 0xf5}}, {0x2, 0x7, {0x3, 0x15637d3c}}, {0x0, 0x8, {0x0, 0x7}}, {0x8001, 0x9, {0x1, 0x8}}, {0x7ff, 0x2, {0x0, 0xad0e}}, {0xffff, 0xa0, {0x3}}, {0x2, 0xfff, {0x0, 0x7fffffff}}, {0x7f10, 0x6, {0x0, 0x81}}, {0xff, 0x2, {0x0, 0x3}}, {0x4, 0x20, {0x1, 0x4d}}, {0x3ff, 0xca71, {0x3, 0x2}}, {0x800, 0x1f, {0x3}}, {0x3d9, 0x100, {0x3, 0xffffccc8}}, {0x1, 0xfff, {0x0, 0x1}}, {0xff, 0x7, {0x0, 0x139e6a41}}]}}}, {{0x254, 0x1, {{0x1, 0x8001}, 0x40, 0x20, 0x6, 0xc, 0x16, 'syz1\x00', "7a1c3bdcba6f38e75183200ba4a720365792b6bd211ca821f5ccbcb0f91520e1", "d2aff16a43d02fe429379a972bb2708d40a822ffe866559e19802c3f2822a195", [{0x140a, 0x3, {0x1}}, {0x81, 0x0, {0x2, 0x3}}, {0x0, 0x7, {0x2, 0x40}}, {0x69, 0x8, {0x3, 0x2}}, {0x101, 0x800, {0x0, 0x9}}, {0x3, 0x5f6, {0x0, 0x1}}, {0x80, 0x5, {0x3, 0x200}}, {0x8, 0x4, {0x0, 0x1}}, {0x265f, 0xd5, {0x2, 0xffff}}, {0x0, 0xfffd}, {0x200, 0x3, {0x0, 0x58}}, {0x1f, 0x55f, {0x1, 0x33e75dfe}}, {0x22a, 0x3, {0x2, 0xcf7}}, {0x2, 0x400, {0x0, 0x8}}, {0x1ff, 0x7, {0x0, 0x3f}}, {0x65, 0x40, {0x428cd18ddbc6628c, 0x6}}, {0x800, 0x7f, {0x0, 0x3}}, {0x9, 0x4, {0x3, 0x2}}, {0x5, 0x0, {0x1}}, {0x40, 0x9, {0x2, 0xc3}}, {0x6, 0x9, {0x1, 0x2}}, {0x1, 0x3, {0x3, 0x8}}, {0x8, 0x2, {0x1, 0x80000001}}, {0x8, 0x20, {0x2, 0x81}}, {0x9, 0x3, {0x3, 0x6}}, {0x1, 0x8, {0x2, 0x400}}, {0x90ed, 0x2, {0x1, 0xf9b3}}, {0x3ff, 0x1000, {0x0, 0x1}}, {0x6, 0x2, {0x1, 0x1}}, {0x2, 0x7, {0x2, 0xffffffff}}, {0x5, 0xff81, {0x2, 0x3}}, {0x200, 0x2, {0x3, 0xffffff80}}, {0x4, 0xc434, {0x0, 0x9}}, {0x0, 0x101, {0x2, 0x3}}, {0x2, 0x3, {0x2, 0x5}}, {0x8, 0x0, {0x3, 0xdf}}, {0x20, 0x6, {0x3, 0xe3}}, {0x7fff, 0x1, {0x3, 0xffff}}, {0x5, 0xfffb, {0x2, 0x2}}, {0x0, 0x0, {0x0, 0x1ff}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$KVM_NMI(r2, 0xae9a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x0, 0x4, [0xc317]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_driver={0x93, 0x0, &(0x7f0000000280)="18ca422f706e2b3727ea58de02778806743022667f2e80e99970b99b3c06a580c91e"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x7, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x84) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@attr2='attr2'}, {@sunit={'sunit'}}, {@noquota='noquota'}]}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x10001) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x80) 15:42:42 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x4000000000004) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) 15:42:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'memory'}, {0x2b, 'rdma'}]}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2c0001, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000180)=0x9, 0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) shmget(0x0, 0x7000, 0x2, &(0x7f0000ff9000/0x7000)=nil) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:42 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:43 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xa40000, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r7 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x0, 0x6, 0x97b}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x486000, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$UI_DEV_DESTROY(r1, 0x5502) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a6970000000058e000400070000000000000073797a3000000000240007800c00028008000140000000000c00a221ade13e4cd7deb3d7e201800800014000000300080006400000000505000500d0e6e6d9bc40f251bfecb88615a2020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) 15:42:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socket(0x1d, 0x6, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x240400, 0x0) ftruncate(r0, 0xfffffffffffffff8) mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x23}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) setfsuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(0xffffffffffffffff, r4, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x0, 0x2, {{0x0, 0x2, 0x8f95, 0x0, 0x7, 0x1, {0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x40000000, 0x0, r6, 0x0, 0xfff}}}}, 0xa0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x4080) syz_open_procfs(0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') open(0x0, 0x141042, 0x0) 15:42:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000002c0)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) read$FUSE(r8, &(0x7f0000003140), 0x5e3) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x40, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 15:42:43 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@resize={'resize'}, 0x22}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') open(&(0x7f0000000080)='./file1\x00', 0x60001, 0x162) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003140), 0x5e3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x2000}, 0x4) 15:42:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000140)={0x84d0, 0x0, 'client0\x00', 0x2, "881a8a0b2c852ade", "9ea664b2a30b7815827efa1c5e096af7eeb6a44ac537e5cb972b14f8e00978ad", 0x8, 0x68f}) r5 = dup(r3) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000041000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="ea008000008c000f0174b1c966baa00066ed0f20d835080000000f22d80f01cb66baf80cb802754e8bef66bafc0cecb9b90900000f32c4e3e90c6cc0e28e66ba4300b000ee9a4b3500002800", 0x4c}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000240)={0x0, 0x4, 0x0, {0x800, 0xed}, {0x848, 0x9}, @const={0x1, {0xff, 0x0, 0xff, 0x4}}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:43 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000001c0)='./file0\x00', 0x408d80, 0x102) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x0, 0x1f, 0x3, 0x0, 0x1, 0x1ffffe}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) splice(r3, 0x0, r2, 0x0, 0x91, 0xc) 15:42:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4080) write(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fchdir(0xffffffffffffffff) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB, @ANYRES32], 0x7, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) write(r4, &(0x7f0000000600)="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", 0xe00) sendfile(r4, r5, 0x0, 0x12000) socket(0x0, 0xa, 0xfffffffd) 15:42:43 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000003c0)={{0x1, 0x0, 0x654, 0x0, 0x74b}, 0x0, 0x4, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x80000001, 0x1, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)=""/123, 0x7b) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x68, 0x2, 0x3, 0x0, 0x0, 0x100000000, 0xfffffffd, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 15:42:43 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x108, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x3f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x3a1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9f27}, {0x8, 0x15, 0x101}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:44 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000200010401030000000000000000000001000500010001000000"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) 15:42:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r6}) r7 = socket$netlink(0x10, 0x3, 0x10) splice(r0, 0x0, r7, 0x0, 0x18100, 0x2) 15:42:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) accept$unix(r7, 0x0, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:44 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006", @ANYRES64=r3, @ANYRES16=r0, @ANYRESOCT=r4], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x1, "f41361becb985d353c2b80e9ab06d7e579b956b85bb7dec9060bdf92abc6cde5", 0x32315559}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:44 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003140), 0x5e3) recvmsg$can_raw(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/79, 0x4f}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/201, 0xc9}, {&(0x7f00000011c0)=""/151, 0x97}], 0x4}, 0x18000) write(0xffffffffffffffff, &(0x7f0000000000)="240000005a001f000307f4f9002304000a04f511040001", 0x17) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15:42:44 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$isdn(r4, &(0x7f0000000040)={0x22, 0x2, 0x0, 0x9, 0xce}, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:44 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)={0x1, 0x2, 0x9, 0x0, 0x0, 0xcd}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1}, 0x8, 0x0, 0x0, 0x24008094}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:44 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a91877b5ea0bdc9e158bd830000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725560a6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x49c, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000100)="cf", 0x1, r1) r2 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000540)={{0x2, 0x0, @identifier="1286a292ebb716d1925cef62782a4dd7"}, 0xfa, r2, [], "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"}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r2}, &(0x7f0000000440)=""/240, 0x389, &(0x7f0000000180)={&(0x7f0000000240)={'crc32c-intel\x00\x03\x00\x00\x00\x00\x00\x01\x00'}, 0x0, 0x4c}) 15:42:44 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x1e8, 0x280, 0x98, 0x1e8, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, '\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x311, 0x4, 0x4, 0x80, 0x0, @multicast}, 0x10) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) 15:42:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x3, {0x8, 0x0, 0x7fffffff, 0x9}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x3, {0x8, 0x0, 0x7fffffff, 0x9}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 837.929152] ip_tables: iptables: counters copy to user failed while replacing table [ 837.961378] ip_tables: iptables: counters copy to user failed while replacing table 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x3, {0x8, 0x0, 0x7fffffff, 0x9}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x3, {0x8, 0x0, 0x7fffffff, 0x9}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0xb14d, 0x4) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dae00183200fe8000a2e5000000000000000000000000aaff0200"/58], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000540)=""/148, 0x94}, {&(0x7f0000000600)=""/115, 0x73}], 0x6}, 0x40) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socket$key(0xf, 0x3, 0x2) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000b060104000000070000ffff00094000000009"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8b4a50401a776747) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:45 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x40}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=r8, @ANYBLOB="77000000c210335a5d6af9e70af5f30872a18b03cdccd452a0c7f3fb6f388069f052cf549d707adc03a36d00a3c5e68d532cdfd9b2be831cf80dd82583db1ea9da49c37b45904ce352be2be094226ea2717d59fca56c6412370484b3e4a9838622927b2e7e5b49eae7c7e93e6e23314dc36b1e902080b64389fc9d"], &(0x7f0000000280)=0x7f) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r9) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f00000002c0)) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x10, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:46 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x225ce332) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 15:42:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000000206012d0000000a00000000000005000e0003006269746d61703a697020000020000400000000000900020073797a30800c00028008000140000000000c000180080001a66db08485189caafc305a38f6b7e408400000000008000640c1fffffffffffffff13fbffa3a60125e0200000005000100068c114d6a507ece2a6e87e3a0e77a49bf2d4fd8fa1e1fdfb68321b1f7010024de0ca3ce2e03cc084093"], 0x1}, 0x8}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x3ff, 0x9, 0x1, 0x0, 0x5, 0xfffffe01, 0x6, 0xf3, 0x4, 0x9, 0xfffffffb, 0x1, 0x1, 0x4, 0x1, 0x20, {0x7f}, 0x2, 0xc0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRESHEX], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbb3206aaaaaaaaaa8101000086dd60163dac29183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd9}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x3f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x70ef}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x7}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x40) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:47 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) splice(r3, &(0x7f00000000c0)=0x4, 0xffffffffffffffff, &(0x7f00000001c0)=0x2, 0x1, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000200)=0x2, 0x4) 15:42:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) r4 = openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x400800, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000240)="27f9e636dc6a42cec181a45e76c16dda7a6b34182459166638f84c970f09f62356f30438869486564f589e22cc43533c6e540d01d657ad30385fb785575e99910f0693e33891408563db036f47fd82d16730fcd0b995") splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffdc, 0x0) 15:42:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000002c0)={0x8, 0x1000, 0x1}) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0xf, 0x6, 0x801, 0x0, 0x0, {0x9, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000080)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000180)={0x9b0000, 0x1, 0x7f, r4, 0x0, &(0x7f00000000c0)={0xa2092a, 0x8001}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x8) 15:42:48 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007930ce635ea85cad3ce260000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:42:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, [], [{0xffffffff, 0x7, 0x10000, 0x1, 0x9, 0x1}, {0x759, 0x7fff, 0x4, 0x9, 0x2, 0x2}], [[]]}) r5 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000000c0)={r8, 0x0, r1, 0x3}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:42:48 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f00000001c0)={0x2, 0xfc, 0x80}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=@delchain={0x384, 0x65, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0xfff1}, {0x5, 0xc}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x354, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x40}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x10001}, @TCA_FLOW_ACT={0x2d0, 0x9, 0x0, 0x1, [@m_ife={0x118, 0x1e, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}]}, {0xda, 0x6, "6e152fafd5e1324cedbb23f77535c7a0c43d368823639654346ae46a042976a1aa6c25c7c10bb91e347f35ee92ba1e3fbd28078bf4d5f3ac2fd016d2d416040519c9984568c8c7a0580a6519e255d2b8cadd0359187b1a57b216730614e7b9889d8853cb49eee3caf380aee276dfecdf46906257168341589063a8334316fb0f44a9fb0e48de27a2996d56760676147ad1f77249d5898866d5aca90630922ccc30326dfd4ebad95b30a1889d07b9a74cfe806540df03ed63df9c85af032d1d6c61a4f4e89827a6212c53efc93980ae77590633b8dbc5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x60, 0x14, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xfffffffb, 0x7, 0xb61, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x80000001, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_bpf={0x154, 0x17, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x81, 0x72, 0x1, 0xfffffffb}, {0x4, 0x6, 0x5, 0x80000000}, {0x200, 0xff, 0x3, 0x7}, {0x7, 0x4, 0x9d}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x7f, 0x5, 0xad, 0x7}, {0x5, 0x3, 0x3, 0x4856e766}, {0x3f, 0x7, 0x40, 0xfffffff9}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x4, 0x9, 0x1, 0xfffffff9}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xc9, 0x6, "c93e0ba331d71fec3ee94ed1508272d9618b2d5c650994bcd6aea867fef7f74ba8b9e522e57495bd78b2a1c591da51aa0a7036ee14e1f5eac2d18f0f499761ad78811bc4ef30b7e9fceba800b65a410c103fe7fdddd1462c8e2e2f4d44bdf9dc9142723a2f06e94a7620cb8a17170335f19bb38833c6e170e7dd7bc3f326be52762e24c09c394f54baa711366dd1dc528215a841301194d8a3e5fdfa5f26ac6a450507400bdfd0c9a181c45a4932777a07b578ab391df7cb691245844f0b634eb0747bc2a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x46}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x7, 0x6a, 0x8001, {0xe, 0x2, 0x1, 0xbb9, 0x9, 0x6}, {0x6, 0x0, 0xda2a, 0x99e9, 0x8000, 0x10000}, 0xe95a, 0x8, 0xe47f}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xb}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x911d}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0x4}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xd}}]}}]}, 0x384}}, 0x81) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:42:48 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f00000000c0)) 15:42:48 executing program 1: getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @ipv4={[], [], @remote}}) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003140), 0x5e3) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x80) 15:42:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x4ac}], 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x180, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5467}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x20000006) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x234, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f641dbd}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46ea4488}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcab}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "750582a515dfe1b01f46f4b19b8d5f04e9f95f8dd6300df425bd0ea03207b8123fc0ac6dfb5b32aca781c4c8447ebe7f714280104119c7b97db31554bc7cab62a58c4ce035200611b227915a6f1f8d424ed94c97c9b5a053bc4f96da47a6e6dfa208b286dd5e5bc9d15c89714a24fff60f1d28bbf0ad4de5b70e015798da7cfda5b53f8a6befdddce99df9679537de4c1f8004c0816b49ca5427d3ad3fe915a967d03a1e04751ea2c41f387dc9229981b6f3e1b807cb8eaf827a7368fdb5bdb8"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x46802) io_setup(0x200, &(0x7f00000001c0)=0x0) io_submit(r9, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0xb00, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xb000}]) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:49 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x484901) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRESHEX=r6], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0xffffffffffffcb7f) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 15:42:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x24008080) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) 15:42:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) [ 842.904405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:50 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000000200)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r3, r4, 0x0, 0x10004) 15:42:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) [ 843.328210] audit: type=1804 audit(1595086970.314:214): pid=12448 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir542053659/syzkaller.Dtcd2Y/1104/file0" dev="sda1" ino=16354 res=1 15:42:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:50 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) tee(r1, r3, 0x5dc6, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:50 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x52) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000002c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1410, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="feff0000", @ANYRES16=r8, @ANYBLOB="000426bd7000fddbdf25160000000c00038008000100ffffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f0000000280)=[0x4, 0x3], 0x2) 15:42:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 15:42:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r0) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 15:42:51 executing program 1: accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000140)={0x800, 0x5, 0x0, 'queue0\x00', 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xcf23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0xe2746000) gettid() 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:51 executing program 1: sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) set_tid_address(&(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x7c, 0x0, 0x101, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x40002, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[], 0x1c) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 15:42:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'macvlan1\x00', {0x7, 0x4e24, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) 15:42:51 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) bind$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = dup(r2) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000280)) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 15:42:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 15:42:52 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 845.209804] FAULT_INJECTION: forcing a failure. [ 845.209804] name failslab, interval 1, probability 0, space 0, times 0 [ 845.240207] CPU: 0 PID: 12507 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 845.248125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.257485] Call Trace: [ 845.260089] dump_stack+0x1b2/0x283 [ 845.263739] should_fail.cold+0x10a/0x154 [ 845.267906] should_failslab+0xd6/0x130 [ 845.271894] kmem_cache_alloc_node+0x25f/0x400 [ 845.276486] __alloc_skb+0x9a/0x4c0 [ 845.280218] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 845.285072] ? netlink_autobind.isra.0+0xa9/0x290 [ 845.289930] ? netlink_autobind.isra.0+0x1c5/0x290 [ 845.294876] netlink_sendmsg+0x921/0xbb0 [ 845.298966] ? nlmsg_notify+0x160/0x160 [ 845.302958] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 845.307991] ? security_socket_sendmsg+0x83/0xb0 [ 845.312760] ? nlmsg_notify+0x160/0x160 [ 845.316743] sock_sendmsg+0xb5/0x100 [ 845.320473] ___sys_sendmsg+0x70a/0x840 [ 845.324466] ? copy_msghdr_from_user+0x380/0x380 [ 845.329236] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 845.334177] ? HARDIRQ_verbose+0x10/0x10 [ 845.338254] ? lock_acquire+0x170/0x3f0 [ 845.342228] ? lock_downgrade+0x6e0/0x6e0 [ 845.346390] ? __fget+0x226/0x360 [ 845.349851] ? __fget_light+0x199/0x1f0 [ 845.353838] ? sockfd_lookup_light+0xb2/0x160 [ 845.358455] __sys_sendmsg+0xa3/0x120 [ 845.362262] ? SyS_shutdown+0x160/0x160 [ 845.366310] ? wait_for_completion_io+0x10/0x10 [ 845.370989] ? SyS_read+0x210/0x210 [ 845.374619] ? SyS_clock_settime+0x1a0/0x1a0 [ 845.379040] SyS_sendmsg+0x27/0x40 [ 845.382583] ? __sys_sendmsg+0x120/0x120 [ 845.386649] do_syscall_64+0x1d5/0x640 [ 845.390556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 845.395749] RIP: 0033:0x45c1d9 [ 845.398940] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:42:52 executing program 1: listxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=""/58, 0x3a) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x64f3139de809fcba, 0x5, {0x4, 0x4, 0x2, 0x3}}, 0x20) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x40c2, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0x0) statfs(0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0x4c4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) socket$packet(0x11, 0x0, 0x300) 15:42:52 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 845.406660] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 845.413938] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 845.421220] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 845.428498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.435776] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c [ 845.492354] FAULT_INJECTION: forcing a failure. [ 845.492354] name failslab, interval 1, probability 0, space 0, times 0 [ 845.510351] CPU: 0 PID: 12510 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 845.518272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.527633] Call Trace: [ 845.530236] dump_stack+0x1b2/0x283 [ 845.533881] should_fail.cold+0x10a/0x154 [ 845.538045] should_failslab+0xd6/0x130 [ 845.542117] kmem_cache_alloc_node_trace+0x25a/0x400 [ 845.555918] __kmalloc_node_track_caller+0x38/0x70 [ 845.560866] __kmalloc_reserve.isra.0+0x35/0xd0 [ 845.565545] __alloc_skb+0xca/0x4c0 [ 845.569185] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 845.574035] ? netlink_autobind.isra.0+0xa9/0x290 [ 845.578890] ? netlink_autobind.isra.0+0x1c5/0x290 [ 845.583828] netlink_sendmsg+0x921/0xbb0 [ 845.587904] ? nlmsg_notify+0x160/0x160 [ 845.591878] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 845.596903] ? security_socket_sendmsg+0x83/0xb0 [ 845.601661] ? nlmsg_notify+0x160/0x160 [ 845.605653] sock_sendmsg+0xb5/0x100 [ 845.609372] ___sys_sendmsg+0x70a/0x840 [ 845.613351] ? copy_msghdr_from_user+0x380/0x380 [ 845.618114] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 845.623048] ? HARDIRQ_verbose+0x10/0x10 [ 845.627126] ? lock_acquire+0x170/0x3f0 [ 845.631106] ? lock_downgrade+0x6e0/0x6e0 [ 845.635262] ? __fget+0x226/0x360 [ 845.638722] ? __fget_light+0x199/0x1f0 [ 845.642702] ? sockfd_lookup_light+0xb2/0x160 [ 845.647204] __sys_sendmsg+0xa3/0x120 [ 845.653009] ? SyS_shutdown+0x160/0x160 [ 845.656986] ? wait_for_completion_io+0x10/0x10 [ 845.661669] ? SyS_read+0x210/0x210 [ 845.665303] ? SyS_clock_settime+0x1a0/0x1a0 [ 845.669719] SyS_sendmsg+0x27/0x40 [ 845.673262] ? __sys_sendmsg+0x120/0x120 [ 845.677327] do_syscall_64+0x1d5/0x640 [ 845.681228] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 845.686414] RIP: 0033:0x45c1d9 [ 845.689598] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.697308] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 845.704590] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 845.711862] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 845.719132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.726408] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:52 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81ac00183200fe8000000000000000000000000000aaff0200000000000000000000000000010000000000000000"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x2000, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x1, 0x2, 0x303, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44000805) 15:42:52 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x105000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r6, 0x8004500b, &(0x7f0000000300)=0x9d3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r7, 0x31}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:52 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 845.950619] FAULT_INJECTION: forcing a failure. [ 845.950619] name failslab, interval 1, probability 0, space 0, times 0 [ 845.966648] CPU: 0 PID: 12525 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 845.974560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.983920] Call Trace: [ 845.986517] dump_stack+0x1b2/0x283 [ 845.990156] should_fail.cold+0x10a/0x154 [ 845.994312] ? lock_downgrade+0x6e0/0x6e0 [ 845.998708] should_failslab+0xd6/0x130 [ 846.002691] kmem_cache_alloc+0x40/0x3c0 [ 846.006756] skb_clone+0x126/0x320 [ 846.010302] netlink_deliver_tap+0x65b/0x860 [ 846.014726] netlink_unicast+0x485/0x610 [ 846.018801] ? netlink_sendskb+0x50/0x50 [ 846.022874] netlink_sendmsg+0x64a/0xbb0 [ 846.026942] ? nlmsg_notify+0x160/0x160 [ 846.030919] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 846.035944] ? security_socket_sendmsg+0x83/0xb0 [ 846.040705] ? nlmsg_notify+0x160/0x160 [ 846.044685] sock_sendmsg+0xb5/0x100 [ 846.048407] ___sys_sendmsg+0x70a/0x840 [ 846.052392] ? copy_msghdr_from_user+0x380/0x380 [ 846.057327] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 846.062258] ? HARDIRQ_verbose+0x10/0x10 [ 846.066323] ? lock_acquire+0x170/0x3f0 [ 846.070295] ? lock_downgrade+0x6e0/0x6e0 [ 846.074457] ? __fget+0x226/0x360 [ 846.078034] ? __fget_light+0x199/0x1f0 [ 846.082020] ? sockfd_lookup_light+0xb2/0x160 [ 846.086525] __sys_sendmsg+0xa3/0x120 [ 846.090336] ? SyS_shutdown+0x160/0x160 [ 846.094317] ? wait_for_completion_io+0x10/0x10 [ 846.099002] ? SyS_read+0x210/0x210 [ 846.102633] ? SyS_clock_settime+0x1a0/0x1a0 [ 846.107046] SyS_sendmsg+0x27/0x40 [ 846.110589] ? __sys_sendmsg+0x120/0x120 [ 846.114658] do_syscall_64+0x1d5/0x640 [ 846.118568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 846.123757] RIP: 0033:0x45c1d9 [ 846.127059] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.134768] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 846.142041] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 846.149311] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 846.156580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 846.163859] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:53 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 846.313900] FAULT_INJECTION: forcing a failure. [ 846.313900] name failslab, interval 1, probability 0, space 0, times 0 [ 846.325164] CPU: 0 PID: 12529 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 846.333050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.342415] Call Trace: [ 846.345015] dump_stack+0x1b2/0x283 [ 846.348655] should_fail.cold+0x10a/0x154 [ 846.352818] should_failslab+0xd6/0x130 [ 846.356821] kmem_cache_alloc+0x40/0x3c0 [ 846.360893] skb_clone+0x126/0x320 [ 846.364444] dev_queue_xmit_nit+0x2ee/0x950 [ 846.368776] ? sock_sendmsg+0xb5/0x100 [ 846.372672] ? __skb_gso_segment+0x640/0x640 [ 846.378393] dev_hard_start_xmit+0xa8/0x880 [ 846.382813] ? validate_xmit_skb+0x635/0x9b0 [ 846.387234] __dev_queue_xmit+0x1dce/0x25a0 [ 846.391570] ? netdev_pick_tx+0x2e0/0x2e0 [ 846.395718] ? HARDIRQ_verbose+0x10/0x10 [ 846.399786] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 846.404719] ? memcpy+0x35/0x50 [ 846.408003] ? memcpy+0x35/0x50 [ 846.411281] ? __skb_clone+0x25e/0x720 [ 846.415180] ? netlink_deliver_tap+0x604/0x860 [ 846.419775] netlink_deliver_tap+0x604/0x860 [ 846.424195] netlink_unicast+0x485/0x610 [ 846.428267] ? netlink_sendskb+0x50/0x50 [ 846.432340] netlink_sendmsg+0x64a/0xbb0 [ 846.436522] ? nlmsg_notify+0x160/0x160 [ 846.440499] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 846.445536] ? security_socket_sendmsg+0x83/0xb0 [ 846.450301] ? nlmsg_notify+0x160/0x160 [ 846.454286] sock_sendmsg+0xb5/0x100 [ 846.458012] ___sys_sendmsg+0x70a/0x840 15:42:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003140), 0x5e3) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) write(r3, &(0x7f0000000340), 0x4139554b) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x1fb978507dcbbbde) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x10802, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f00000002c0)) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x2}, 0xf) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 846.462000] ? copy_msghdr_from_user+0x380/0x380 [ 846.466773] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 846.471716] ? HARDIRQ_verbose+0x10/0x10 [ 846.475799] ? lock_acquire+0x170/0x3f0 [ 846.479782] ? lock_downgrade+0x6e0/0x6e0 [ 846.483938] ? __fget+0x226/0x360 [ 846.487397] ? __fget_light+0x199/0x1f0 [ 846.491371] ? sockfd_lookup_light+0xb2/0x160 [ 846.495872] __sys_sendmsg+0xa3/0x120 [ 846.499691] ? SyS_shutdown+0x160/0x160 [ 846.503675] ? wait_for_completion_io+0x10/0x10 [ 846.508358] ? SyS_read+0x210/0x210 [ 846.511986] ? SyS_clock_settime+0x1a0/0x1a0 [ 846.516402] SyS_sendmsg+0x27/0x40 [ 846.519948] ? __sys_sendmsg+0x120/0x120 [ 846.524015] do_syscall_64+0x1d5/0x640 [ 846.527911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 846.533101] RIP: 0033:0x45c1d9 [ 846.536286] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.544082] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 846.551356] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 846.558632] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 846.565904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 846.573175] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:53 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:53 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1}, 0x8, 0x0, 0x0, 0x4000}, 0x20040800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) [ 846.737110] FAULT_INJECTION: forcing a failure. [ 846.737110] name failslab, interval 1, probability 0, space 0, times 0 [ 846.750194] CPU: 0 PID: 12537 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 846.758097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.767458] Call Trace: [ 846.770063] dump_stack+0x1b2/0x283 [ 846.773705] should_fail.cold+0x10a/0x154 [ 846.777873] should_failslab+0xd6/0x130 [ 846.781861] kmem_cache_alloc_trace+0x2b7/0x3f0 15:42:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) write$tun(r4, &(0x7f0000000180)={@void, @val={0x1, 0x1, 0x3f, 0x8, 0x3ff, 0x9}, @ipx={0xffff, 0x48, 0x7, 0x1, {@current, @current, 0x9}, {@random=0x80000000, @current, 0x25}, "a41f3e7bca74ae10b9d09101dfdd0905934b3e6a7c12153c93e40a3b60f9acb795e57a5f101604e1693a"}}, 0x52) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x20}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 846.786546] ip_set_create+0x421/0xf22 [ 846.790443] ? __find_set_type_get+0x340/0x340 [ 846.795021] ? nfnetlink_rcv_msg+0x799/0xc00 [ 846.799458] ? lock_downgrade+0x6e0/0x6e0 [ 846.803616] ? __find_set_type_get+0x340/0x340 [ 846.808203] nfnetlink_rcv_msg+0x9e1/0xc00 [ 846.812467] netlink_rcv_skb+0x127/0x370 [ 846.816532] ? nfnetlink_net_exit_batch+0x150/0x150 [ 846.821553] ? netlink_ack+0x970/0x970 [ 846.825451] ? ns_capable_common+0x127/0x150 [ 846.829866] nfnetlink_rcv+0x1ab/0x1650 [ 846.833848] ? check_preemption_disabled+0x35/0x240 [ 846.838865] ? perf_trace_lock+0x109/0x4b0 [ 846.843102] ? HARDIRQ_verbose+0x10/0x10 [ 846.847168] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 846.852105] ? nfnl_err_del+0x150/0x150 [ 846.856086] ? netlink_deliver_tap+0x90/0x860 [ 846.860586] ? rcu_is_watching+0x11/0xb0 [ 846.864650] ? lock_downgrade+0x6e0/0x6e0 [ 846.868807] netlink_unicast+0x437/0x610 [ 846.872875] ? netlink_sendskb+0x50/0x50 [ 846.876947] netlink_sendmsg+0x64a/0xbb0 [ 846.881015] ? nlmsg_notify+0x160/0x160 [ 846.884989] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 846.890011] ? security_socket_sendmsg+0x83/0xb0 [ 846.894882] ? nlmsg_notify+0x160/0x160 [ 846.898857] sock_sendmsg+0xb5/0x100 [ 846.902577] ___sys_sendmsg+0x70a/0x840 [ 846.906562] ? copy_msghdr_from_user+0x380/0x380 [ 846.911323] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 846.916261] ? HARDIRQ_verbose+0x10/0x10 [ 846.920340] ? lock_acquire+0x170/0x3f0 [ 846.924319] ? lock_downgrade+0x6e0/0x6e0 [ 846.928476] ? __fget+0x226/0x360 [ 846.931937] ? __fget_light+0x199/0x1f0 [ 846.935920] ? sockfd_lookup_light+0xb2/0x160 [ 846.940425] __sys_sendmsg+0xa3/0x120 [ 846.944231] ? SyS_shutdown+0x160/0x160 [ 846.948211] ? wait_for_completion_io+0x10/0x10 [ 846.952895] ? SyS_read+0x210/0x210 [ 846.956525] ? SyS_clock_settime+0x1a0/0x1a0 [ 846.960943] SyS_sendmsg+0x27/0x40 [ 846.964486] ? __sys_sendmsg+0x120/0x120 [ 846.968554] do_syscall_64+0x1d5/0x640 [ 846.972452] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 846.977645] RIP: 0033:0x45c1d9 [ 846.980835] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.988550] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 846.995825] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 847.003099] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 847.010373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 847.017646] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:54 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x1}, 0x8}, 0x48084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000180)={0x4, 0x5, "3a43b4", 0x0, 0x80}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:54 executing program 3 (fault-call:4 fault-nth:5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 847.135178] FAULT_INJECTION: forcing a failure. [ 847.135178] name failslab, interval 1, probability 0, space 0, times 0 [ 847.146570] CPU: 0 PID: 12550 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 847.154466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.163830] Call Trace: [ 847.166428] dump_stack+0x1b2/0x283 [ 847.170074] should_fail.cold+0x10a/0x154 [ 847.174245] should_failslab+0xd6/0x130 [ 847.178229] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 847.182910] hash_mac_create+0x2f3/0x7c7 [ 847.186984] ip_set_create+0x5eb/0xf22 [ 847.190886] ? __find_set_type_get+0x340/0x340 [ 847.195471] ? nfnetlink_rcv_msg+0x799/0xc00 [ 847.199919] ? lock_downgrade+0x6e0/0x6e0 [ 847.204080] ? __find_set_type_get+0x340/0x340 [ 847.208670] nfnetlink_rcv_msg+0x9e1/0xc00 [ 847.212931] netlink_rcv_skb+0x127/0x370 [ 847.216994] ? nfnetlink_net_exit_batch+0x150/0x150 [ 847.222013] ? netlink_ack+0x970/0x970 [ 847.225910] ? ns_capable_common+0x127/0x150 [ 847.230322] nfnetlink_rcv+0x1ab/0x1650 [ 847.234300] ? check_preemption_disabled+0x35/0x240 [ 847.239343] ? perf_trace_lock+0x109/0x4b0 [ 847.243579] ? HARDIRQ_verbose+0x10/0x10 [ 847.247653] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 847.252590] ? nfnl_err_del+0x150/0x150 [ 847.256575] ? netlink_deliver_tap+0x90/0x860 [ 847.261085] ? rcu_is_watching+0x11/0xb0 [ 847.265156] ? lock_downgrade+0x6e0/0x6e0 [ 847.269317] netlink_unicast+0x437/0x610 [ 847.273391] ? netlink_sendskb+0x50/0x50 [ 847.277466] netlink_sendmsg+0x64a/0xbb0 [ 847.281533] ? nlmsg_notify+0x160/0x160 [ 847.285507] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 847.290533] ? security_socket_sendmsg+0x83/0xb0 [ 847.295296] ? nlmsg_notify+0x160/0x160 [ 847.299275] sock_sendmsg+0xb5/0x100 [ 847.302995] ___sys_sendmsg+0x70a/0x840 [ 847.306977] ? copy_msghdr_from_user+0x380/0x380 [ 847.311738] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 847.316668] ? HARDIRQ_verbose+0x10/0x10 [ 847.320846] ? lock_acquire+0x170/0x3f0 [ 847.324824] ? lock_downgrade+0x6e0/0x6e0 [ 847.329049] ? __fget+0x226/0x360 [ 847.332509] ? __fget_light+0x199/0x1f0 [ 847.336486] ? sockfd_lookup_light+0xb2/0x160 [ 847.341004] __sys_sendmsg+0xa3/0x120 [ 847.344903] ? SyS_shutdown+0x160/0x160 [ 847.348884] ? wait_for_completion_io+0x10/0x10 [ 847.353572] ? SyS_read+0x210/0x210 [ 847.357211] ? SyS_clock_settime+0x1a0/0x1a0 [ 847.361628] SyS_sendmsg+0x27/0x40 [ 847.365170] ? __sys_sendmsg+0x120/0x120 [ 847.369238] do_syscall_64+0x1d5/0x640 [ 847.373140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 847.378331] RIP: 0033:0x45c1d9 [ 847.381520] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.389228] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 847.396500] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 847.403770] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 847.411049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 847.418326] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:54 executing program 3 (fault-call:4 fault-nth:6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 847.550641] FAULT_INJECTION: forcing a failure. [ 847.550641] name failslab, interval 1, probability 0, space 0, times 0 [ 847.580135] CPU: 0 PID: 12557 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 847.588054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.597544] Call Trace: [ 847.600148] dump_stack+0x1b2/0x283 [ 847.603790] should_fail.cold+0x10a/0x154 [ 847.607950] should_failslab+0xd6/0x130 [ 847.611932] __kmalloc+0x2c1/0x400 [ 847.615474] ? ip_set_alloc+0x26/0x60 [ 847.619277] ? rcu_read_lock_sched_held+0x10a/0x130 [ 847.624297] ip_set_alloc+0x26/0x60 [ 847.627925] hash_mac_create+0x36f/0x7c7 [ 847.631994] ip_set_create+0x5eb/0xf22 [ 847.635892] ? __find_set_type_get+0x340/0x340 [ 847.640475] ? nfnetlink_rcv_msg+0x799/0xc00 [ 847.644914] ? lock_downgrade+0x6e0/0x6e0 [ 847.649066] ? __find_set_type_get+0x340/0x340 [ 847.653653] nfnetlink_rcv_msg+0x9e1/0xc00 [ 847.657923] netlink_rcv_skb+0x127/0x370 [ 847.661989] ? nfnetlink_net_exit_batch+0x150/0x150 [ 847.667010] ? netlink_ack+0x970/0x970 [ 847.670909] ? ns_capable_common+0x127/0x150 [ 847.675320] nfnetlink_rcv+0x1ab/0x1650 [ 847.679298] ? check_preemption_disabled+0x35/0x240 [ 847.684322] ? perf_trace_lock+0x109/0x4b0 [ 847.688565] ? HARDIRQ_verbose+0x10/0x10 [ 847.692631] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 847.697568] ? nfnl_err_del+0x150/0x150 [ 847.701559] ? netlink_deliver_tap+0x90/0x860 [ 847.706063] ? rcu_is_watching+0x11/0xb0 [ 847.710130] ? lock_downgrade+0x6e0/0x6e0 [ 847.715248] netlink_unicast+0x437/0x610 [ 847.719316] ? netlink_sendskb+0x50/0x50 [ 847.723385] netlink_sendmsg+0x64a/0xbb0 [ 847.727457] ? nlmsg_notify+0x160/0x160 [ 847.731435] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 847.736459] ? security_socket_sendmsg+0x83/0xb0 [ 847.741222] ? nlmsg_notify+0x160/0x160 [ 847.745205] sock_sendmsg+0xb5/0x100 15:42:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) syz_mount_image$nfs(&(0x7f0000000380)='nfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3, 0x5, &(0x7f0000001840)=[{&(0x7f0000001700)="670dfed59ad1dd2e86ecb52a3191cd8e79e179aa3e94b840cd125d12817750226d0fe87500db9e72484f79783c93bf65bd49f9f9330ed87fd970347807853866f7d4299519d78db826597b97d6da50d409759bbb9c8e", 0x56, 0xe5f}, {&(0x7f00000004c0)="0f8fceab96d5ffff048e00c170a604455fbace524d082cbbbc8e", 0x1a, 0x7}, {&(0x7f0000000680), 0x0, 0x8000}, {&(0x7f0000001780)="21111203a28cbf30858dbbd09e1a2798e9f0d017f8cebc4413ffe7235dc95e8a827b52dc34fb1eeb2c270aa0d3a54209982aeb5cdbf91664d4e62c76302e969c37eca6792718ed8fb40d992c7172f26ece6943ea2232d3c79f1b9cf5a9a26c3a5d5d29885aff21a7", 0x68, 0x1}, {&(0x7f0000001800)="ef8e4a1bec1fc62f86d6d01cb47be495947bde570350ee76c9f9a420feb14536094d384a8c9c86f62c03e790e88d7123e4534bcba9582389e86af5", 0x3b, 0x2}], 0x1000, &(0x7f00000018c0)='!\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r3) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000700)) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe2000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x105900) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="98010000", @ANYRES16=r7, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4008060}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/dev/kvm\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xd0, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x262a}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8000}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0xc000) [ 847.748926] ___sys_sendmsg+0x70a/0x840 [ 847.752909] ? copy_msghdr_from_user+0x380/0x380 [ 847.757676] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 847.762614] ? HARDIRQ_verbose+0x10/0x10 [ 847.766692] ? lock_acquire+0x170/0x3f0 [ 847.770672] ? lock_downgrade+0x6e0/0x6e0 [ 847.774833] ? __fget+0x226/0x360 [ 847.778294] ? __fget_light+0x199/0x1f0 [ 847.782274] ? sockfd_lookup_light+0xb2/0x160 [ 847.786774] __sys_sendmsg+0xa3/0x120 [ 847.790588] ? SyS_shutdown+0x160/0x160 [ 847.794564] ? wait_for_completion_io+0x10/0x10 [ 847.799244] ? SyS_read+0x210/0x210 [ 847.802873] ? SyS_clock_settime+0x1a0/0x1a0 [ 847.807284] SyS_sendmsg+0x27/0x40 [ 847.810831] ? __sys_sendmsg+0x120/0x120 [ 847.814897] do_syscall_64+0x1d5/0x640 [ 847.818814] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 847.824005] RIP: 0033:0x45c1d9 [ 847.827191] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.834906] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 847.842194] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 847.849472] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 847.856747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 847.864022] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:54 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:54 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200040, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) 15:42:55 executing program 3 (fault-call:4 fault-nth:7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 848.050766] FAULT_INJECTION: forcing a failure. [ 848.050766] name failslab, interval 1, probability 0, space 0, times 0 [ 848.071473] CPU: 0 PID: 12573 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 848.079397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.088762] Call Trace: [ 848.091365] dump_stack+0x1b2/0x283 [ 848.095010] should_fail.cold+0x10a/0x154 [ 848.099170] should_failslab+0xd6/0x130 [ 848.103153] kmem_cache_alloc_node+0x25f/0x400 [ 848.107833] __alloc_skb+0x9a/0x4c0 [ 848.111465] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 848.116330] netlink_ack+0x218/0x970 [ 848.120053] ? netlink_sendmsg+0xbb0/0xbb0 [ 848.124299] netlink_rcv_skb+0x2ba/0x370 [ 848.128367] ? nfnetlink_net_exit_batch+0x150/0x150 [ 848.133389] ? netlink_ack+0x970/0x970 [ 848.137287] ? ns_capable_common+0x127/0x150 [ 848.141704] nfnetlink_rcv+0x1ab/0x1650 [ 848.145682] ? check_preemption_disabled+0x35/0x240 [ 848.150704] ? perf_trace_lock+0x109/0x4b0 [ 848.154937] ? HARDIRQ_verbose+0x10/0x10 [ 848.159001] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 848.163950] ? nfnl_err_del+0x150/0x150 [ 848.167929] ? netlink_deliver_tap+0x90/0x860 [ 848.172429] ? rcu_is_watching+0x11/0xb0 [ 848.176494] ? lock_downgrade+0x6e0/0x6e0 [ 848.180766] netlink_unicast+0x437/0x610 [ 848.184839] ? netlink_sendskb+0x50/0x50 [ 848.188911] netlink_sendmsg+0x64a/0xbb0 [ 848.192984] ? nlmsg_notify+0x160/0x160 [ 848.196961] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 848.201985] ? security_socket_sendmsg+0x83/0xb0 [ 848.206746] ? nlmsg_notify+0x160/0x160 [ 848.210726] sock_sendmsg+0xb5/0x100 [ 848.214447] ___sys_sendmsg+0x70a/0x840 [ 848.218433] ? copy_msghdr_from_user+0x380/0x380 [ 848.223190] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 848.228131] ? HARDIRQ_verbose+0x10/0x10 [ 848.232211] ? lock_acquire+0x170/0x3f0 [ 848.236194] ? lock_downgrade+0x6e0/0x6e0 [ 848.240351] ? __fget+0x226/0x360 [ 848.243811] ? __fget_light+0x199/0x1f0 [ 848.247791] ? sockfd_lookup_light+0xb2/0x160 [ 848.252293] __sys_sendmsg+0xa3/0x120 [ 848.256099] ? SyS_shutdown+0x160/0x160 [ 848.260072] ? wait_for_completion_io+0x10/0x10 [ 848.264755] ? SyS_read+0x210/0x210 [ 848.268395] ? SyS_clock_settime+0x1a0/0x1a0 [ 848.272811] SyS_sendmsg+0x27/0x40 [ 848.276439] ? __sys_sendmsg+0x120/0x120 [ 848.280508] do_syscall_64+0x1d5/0x640 [ 848.284410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 848.289598] RIP: 0033:0x45c1d9 [ 848.292898] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.300613] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 848.307887] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 848.315162] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 848.322442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 848.329728] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:55 executing program 3 (fault-call:4 fault-nth:8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:55 executing program 1: mq_unlink(&(0x7f0000000080)='syzkaller\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="b3dc859d6412922c8f9bbf", 0xb}], 0x1}, 0x4018) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/908], &(0x7f0000000340)='syzkaller\x00'}, 0x48) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value, 0x8) [ 848.482504] FAULT_INJECTION: forcing a failure. [ 848.482504] name failslab, interval 1, probability 0, space 0, times 0 [ 848.517060] CPU: 1 PID: 12583 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 848.524992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.534447] Call Trace: [ 848.537048] dump_stack+0x1b2/0x283 [ 848.540688] should_fail.cold+0x10a/0x154 [ 848.544865] should_failslab+0xd6/0x130 [ 848.548853] kmem_cache_alloc_node_trace+0x25a/0x400 [ 848.553969] __kmalloc_node_track_caller+0x38/0x70 [ 848.558906] __kmalloc_reserve.isra.0+0x35/0xd0 [ 848.563582] __alloc_skb+0xca/0x4c0 [ 848.567219] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 848.572070] netlink_ack+0x218/0x970 [ 848.575791] ? netlink_sendmsg+0xbb0/0xbb0 [ 848.580042] netlink_rcv_skb+0x2ba/0x370 [ 848.584112] ? nfnetlink_net_exit_batch+0x150/0x150 [ 848.589138] ? netlink_ack+0x970/0x970 [ 848.593042] ? ns_capable_common+0x127/0x150 [ 848.597466] nfnetlink_rcv+0x1ab/0x1650 [ 848.601449] ? check_preemption_disabled+0x35/0x240 [ 848.606477] ? perf_trace_lock+0x109/0x4b0 [ 848.610722] ? HARDIRQ_verbose+0x10/0x10 [ 848.614790] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 848.619730] ? nfnl_err_del+0x150/0x150 [ 848.623714] ? netlink_deliver_tap+0x90/0x860 [ 848.628221] ? rcu_is_watching+0x11/0xb0 [ 848.632286] ? lock_downgrade+0x6e0/0x6e0 [ 848.636438] netlink_unicast+0x437/0x610 [ 848.640508] ? netlink_sendskb+0x50/0x50 [ 848.644579] netlink_sendmsg+0x64a/0xbb0 [ 848.648650] ? nlmsg_notify+0x160/0x160 [ 848.652629] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 848.657652] ? security_socket_sendmsg+0x83/0xb0 [ 848.662406] ? nlmsg_notify+0x160/0x160 [ 848.666383] sock_sendmsg+0xb5/0x100 [ 848.670100] ___sys_sendmsg+0x70a/0x840 [ 848.674079] ? copy_msghdr_from_user+0x380/0x380 [ 848.678836] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 848.683769] ? HARDIRQ_verbose+0x10/0x10 [ 848.688798] ? lock_acquire+0x170/0x3f0 [ 848.692775] ? lock_downgrade+0x6e0/0x6e0 [ 848.696933] ? __fget+0x226/0x360 [ 848.700390] ? __fget_light+0x199/0x1f0 [ 848.704366] ? sockfd_lookup_light+0xb2/0x160 [ 848.708868] __sys_sendmsg+0xa3/0x120 [ 848.712673] ? SyS_shutdown+0x160/0x160 [ 848.716649] ? wait_for_completion_io+0x10/0x10 [ 848.721337] ? SyS_read+0x210/0x210 [ 848.724974] ? SyS_clock_settime+0x1a0/0x1a0 [ 848.729390] SyS_sendmsg+0x27/0x40 [ 848.732936] ? __sys_sendmsg+0x120/0x120 [ 848.736997] do_syscall_64+0x1d5/0x640 [ 848.740899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 848.746085] RIP: 0033:0x45c1d9 [ 848.749289] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.757013] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 848.764285] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 848.771559] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 15:42:55 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000040)={0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1}, 0x8, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 848.778831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 848.786113] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f00000001c0)={r8}) read$eventfd(r1, &(0x7f0000000200), 0x8) 15:42:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbd5bbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000001c0)={0x10, 0x31, &(0x7f0000000180), {0x1, 0x6d7c4c4b, 0x30314247, 0x2, 0x3f, 0x8001, 0x4, 0x7}}) r7 = dup(r4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x10, [], "dba80948d760578dbd3ab2d933ba2bfb"}) 15:42:56 executing program 3 (fault-call:4 fault-nth:9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 849.295168] FAULT_INJECTION: forcing a failure. [ 849.295168] name failslab, interval 1, probability 0, space 0, times 0 [ 849.321775] CPU: 0 PID: 12606 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 849.329713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.339176] Call Trace: [ 849.341837] dump_stack+0x1b2/0x283 [ 849.345485] should_fail.cold+0x10a/0x154 [ 849.349650] should_failslab+0xd6/0x130 [ 849.353631] kmem_cache_alloc+0x40/0x3c0 [ 849.357705] skb_clone+0x126/0x320 [ 849.361251] netlink_deliver_tap+0x65b/0x860 [ 849.365672] __netlink_sendskb+0x42/0x90 [ 849.369736] netlink_sendskb+0x19/0x50 [ 849.373641] netlink_unicast+0x50a/0x610 [ 849.377716] ? netlink_sendskb+0x50/0x50 [ 849.381786] ? __nlmsg_put+0x14b/0x1b0 [ 849.385682] netlink_ack+0x513/0x970 [ 849.389405] ? netlink_sendmsg+0xbb0/0xbb0 [ 849.393655] netlink_rcv_skb+0x2ba/0x370 [ 849.397722] ? nfnetlink_net_exit_batch+0x150/0x150 [ 849.402746] ? netlink_ack+0x970/0x970 [ 849.406646] ? ns_capable_common+0x127/0x150 [ 849.411060] nfnetlink_rcv+0x1ab/0x1650 [ 849.415037] ? check_preemption_disabled+0x35/0x240 [ 849.420059] ? perf_trace_lock+0x109/0x4b0 [ 849.424298] ? HARDIRQ_verbose+0x10/0x10 [ 849.428375] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 849.433313] ? nfnl_err_del+0x150/0x150 [ 849.437297] ? netlink_deliver_tap+0x90/0x860 [ 849.441810] ? rcu_is_watching+0x11/0xb0 [ 849.445876] ? lock_downgrade+0x6e0/0x6e0 [ 849.450041] netlink_unicast+0x437/0x610 [ 849.454110] ? netlink_sendskb+0x50/0x50 [ 849.458181] netlink_sendmsg+0x64a/0xbb0 [ 849.462251] ? nlmsg_notify+0x160/0x160 [ 849.466227] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 849.471253] ? security_socket_sendmsg+0x83/0xb0 [ 849.476013] ? nlmsg_notify+0x160/0x160 [ 849.479993] sock_sendmsg+0xb5/0x100 [ 849.483711] ___sys_sendmsg+0x70a/0x840 [ 849.487689] ? copy_msghdr_from_user+0x380/0x380 [ 849.492447] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 849.497375] ? HARDIRQ_verbose+0x10/0x10 [ 849.501443] ? lock_acquire+0x170/0x3f0 [ 849.505415] ? lock_downgrade+0x6e0/0x6e0 [ 849.509563] ? __fget+0x226/0x360 [ 849.513021] ? __fget_light+0x199/0x1f0 [ 849.516999] ? sockfd_lookup_light+0xb2/0x160 [ 849.521503] __sys_sendmsg+0xa3/0x120 [ 849.525311] ? SyS_shutdown+0x160/0x160 [ 849.529289] ? wait_for_completion_io+0x10/0x10 [ 849.533971] ? SyS_read+0x210/0x210 [ 849.537602] ? SyS_clock_settime+0x1a0/0x1a0 [ 849.542017] SyS_sendmsg+0x27/0x40 15:42:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', r8, 0x8000, 0x0, 0x3, 0x800, {{0x24, 0x4, 0x1, 0x7, 0x90, 0x64, 0x0, 0x5, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0xc4, 0x0, 0x0, [0x1, 0x80, 0x7, 0x8, 0xe00c, 0x80]}, @timestamp_addr={0x44, 0x24, 0x74, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x399}, {@multicast2, 0x8}, {@multicast1, 0x7f}, {@remote, 0x9}]}, @rr={0x7, 0xf, 0x78, [@multicast2, @multicast1, @empty]}, @rr={0x7, 0x1f, 0xf0, [@multicast1, @multicast1, @empty, @empty, @loopback, @empty, @private=0xa010102]}, @end, @ra={0x94, 0x4, 0x1}, @end, @generic={0x88, 0x5, "f0cfda"}, @noop]}}}}}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000280)={0x8000}) [ 849.545559] ? __sys_sendmsg+0x120/0x120 [ 849.549621] do_syscall_64+0x1d5/0x640 [ 849.553518] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 849.558719] RIP: 0033:0x45c1d9 [ 849.561910] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.569620] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 849.576888] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 849.584161] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 849.591451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 849.598723] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:56 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x12, 0x0, "dd7d5c1f5efcf16d28f6e5a58c799daec56a5474e47292ce6c4d49d1c04189fbf4a6e2339657ab8b022b225751a6dd34000cb4aefc3c0bb98bffb9a7e2036def705856f754825f000cfa58490080dc85"}, 0xd8) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:56 executing program 3 (fault-call:4 fault-nth:10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 849.650301] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 849.735978] FAULT_INJECTION: forcing a failure. [ 849.735978] name failslab, interval 1, probability 0, space 0, times 0 [ 849.764714] CPU: 0 PID: 12650 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 849.772640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.781999] Call Trace: [ 849.784596] dump_stack+0x1b2/0x283 [ 849.788236] should_fail.cold+0x10a/0x154 [ 849.792394] should_failslab+0xd6/0x130 [ 849.796897] kmem_cache_alloc+0x40/0x3c0 [ 849.800963] skb_clone+0x126/0x320 [ 849.804511] netlink_deliver_tap+0x65b/0x860 [ 849.808928] __netlink_sendskb+0x42/0x90 [ 849.812991] netlink_sendskb+0x19/0x50 [ 849.816883] netlink_unicast+0x50a/0x610 [ 849.820946] ? netlink_sendskb+0x50/0x50 [ 849.825006] ? __nlmsg_put+0x14b/0x1b0 [ 849.828899] netlink_ack+0x513/0x970 [ 849.832617] ? netlink_sendmsg+0xbb0/0xbb0 [ 849.836854] netlink_rcv_skb+0x2ba/0x370 [ 849.840923] ? nfnetlink_net_exit_batch+0x150/0x150 [ 849.845951] ? netlink_ack+0x970/0x970 [ 849.849847] ? ns_capable_common+0x127/0x150 [ 849.854280] nfnetlink_rcv+0x1ab/0x1650 [ 849.858266] ? check_preemption_disabled+0x35/0x240 [ 849.863289] ? perf_trace_lock+0x109/0x4b0 [ 849.867529] ? HARDIRQ_verbose+0x10/0x10 [ 849.871597] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 849.876532] ? nfnl_err_del+0x150/0x150 [ 849.880512] ? netlink_deliver_tap+0x90/0x860 [ 849.885887] ? rcu_is_watching+0x11/0xb0 [ 849.889951] ? lock_downgrade+0x6e0/0x6e0 [ 849.894111] netlink_unicast+0x437/0x610 [ 849.898175] ? netlink_sendskb+0x50/0x50 [ 849.902238] netlink_sendmsg+0x64a/0xbb0 [ 849.906304] ? nlmsg_notify+0x160/0x160 [ 849.910276] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 849.915297] ? security_socket_sendmsg+0x83/0xb0 [ 849.920049] ? nlmsg_notify+0x160/0x160 [ 849.924157] sock_sendmsg+0xb5/0x100 [ 849.927958] ___sys_sendmsg+0x70a/0x840 [ 849.931934] ? copy_msghdr_from_user+0x380/0x380 [ 849.936694] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 849.941624] ? HARDIRQ_verbose+0x10/0x10 [ 849.945694] ? lock_acquire+0x170/0x3f0 [ 849.949677] ? lock_downgrade+0x6e0/0x6e0 [ 849.953835] ? __fget+0x226/0x360 [ 849.957296] ? __fget_light+0x199/0x1f0 [ 849.961270] ? sockfd_lookup_light+0xb2/0x160 [ 849.965769] __sys_sendmsg+0xa3/0x120 [ 849.969565] ? SyS_shutdown+0x160/0x160 [ 849.973529] ? wait_for_completion_io+0x10/0x10 [ 849.978210] ? SyS_read+0x210/0x210 [ 849.981837] ? SyS_clock_settime+0x1a0/0x1a0 [ 849.986253] SyS_sendmsg+0x27/0x40 [ 849.989796] ? __sys_sendmsg+0x120/0x120 [ 849.993865] do_syscall_64+0x1d5/0x640 [ 849.997764] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 850.002950] RIP: 0033:0x45c1d9 [ 850.006136] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.013843] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 850.023983] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 850.031256] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 850.038527] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 850.045804] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:57 executing program 3 (fault-call:4 fault-nth:11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) read$FUSE(r3, &(0x7f0000003140), 0x5e3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x660020}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fedbdf2509000000080005003bf200002f00060008000000080006001000000030000380080003000000000008ea000001000000060007004e2400001400060000000000001c000000000000000000010800060005000000"], 0x64}, 0x1, 0x0, 0x0, 0x20008817}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003140), 0x5e3) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000400)=""/22) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x19) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60ac00183200fe8000000000000000000000000000aaff02000000000000000000000000000100003cef168cf146b106b0c8326f594a20941c11f1656265a0866ebeab4fb6d368624f9da26e90bc256514f8f7101635a43d1e"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000003c0)) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 850.168867] FAULT_INJECTION: forcing a failure. [ 850.168867] name failslab, interval 1, probability 0, space 0, times 0 [ 850.180223] CPU: 1 PID: 12696 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 850.188107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.197462] Call Trace: [ 850.200056] dump_stack+0x1b2/0x283 [ 850.203693] should_fail.cold+0x10a/0x154 [ 850.207876] should_failslab+0xd6/0x130 [ 850.211862] kmem_cache_alloc+0x40/0x3c0 15:42:57 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macsec0\x00', 0x1000}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r5, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={r5, 0x0, 0x7e, "08cb4db8948df58a908ca8a671b99010e5407868e5a5fa04e1b6d3cc96f12384f9c0d2f88627d9b9e3c4ef2e8beb180aa75d3eef8284f77398438255072e95b40fb002bffb3ce8c424e3603eed4f2e113e2674ce17a494fa4318ba3dac449c3ee0c6dd20cd5122b58d4ba2bbc6ad369c3b233ce443cc6502478dc2b39447"}, 0x86) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 850.215930] skb_clone+0x126/0x320 [ 850.219479] dev_queue_xmit_nit+0x2ee/0x950 [ 850.223816] ? netlink_ack+0x513/0x970 [ 850.227777] ? __skb_gso_segment+0x640/0x640 [ 850.232194] dev_hard_start_xmit+0xa8/0x880 [ 850.236521] ? validate_xmit_skb+0x635/0x9b0 [ 850.240940] __dev_queue_xmit+0x1dce/0x25a0 [ 850.245276] ? netdev_pick_tx+0x2e0/0x2e0 [ 850.249428] ? HARDIRQ_verbose+0x10/0x10 [ 850.253610] ? perf_trace_lock+0x109/0x4b0 [ 850.257854] ? memcpy+0x35/0x50 [ 850.261138] ? memcpy+0x35/0x50 [ 850.264419] ? __skb_clone+0x25e/0x720 [ 850.268301] ? netlink_deliver_tap+0x604/0x860 [ 850.272867] netlink_deliver_tap+0x604/0x860 [ 850.277271] __netlink_sendskb+0x42/0x90 [ 850.281340] netlink_sendskb+0x19/0x50 [ 850.285232] netlink_unicast+0x50a/0x610 [ 850.289299] ? netlink_sendskb+0x50/0x50 [ 850.293352] ? __nlmsg_put+0x14b/0x1b0 [ 850.297222] netlink_ack+0x513/0x970 [ 850.300920] ? netlink_sendmsg+0xbb0/0xbb0 [ 850.305140] netlink_rcv_skb+0x2ba/0x370 [ 850.309196] ? nfnetlink_net_exit_batch+0x150/0x150 [ 850.314205] ? netlink_ack+0x970/0x970 [ 850.318092] ? ns_capable_common+0x127/0x150 [ 850.322501] nfnetlink_rcv+0x1ab/0x1650 [ 850.326479] ? check_preemption_disabled+0x35/0x240 [ 850.331502] ? perf_trace_lock+0x109/0x4b0 [ 850.335732] ? HARDIRQ_verbose+0x10/0x10 [ 850.339780] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 850.344707] ? nfnl_err_del+0x150/0x150 [ 850.348674] ? netlink_deliver_tap+0x90/0x860 [ 850.353152] ? rcu_is_watching+0x11/0xb0 [ 850.357205] ? lock_downgrade+0x6e0/0x6e0 [ 850.361359] netlink_unicast+0x437/0x610 [ 850.365414] ? netlink_sendskb+0x50/0x50 [ 850.369479] netlink_sendmsg+0x64a/0xbb0 [ 850.373540] ? nlmsg_notify+0x160/0x160 [ 850.377514] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 850.382533] ? security_socket_sendmsg+0x83/0xb0 [ 850.387295] ? nlmsg_notify+0x160/0x160 [ 850.391265] sock_sendmsg+0xb5/0x100 [ 850.394973] ___sys_sendmsg+0x70a/0x840 [ 850.398945] ? copy_msghdr_from_user+0x380/0x380 [ 850.403689] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 850.408700] ? HARDIRQ_verbose+0x10/0x10 [ 850.412769] ? lock_acquire+0x170/0x3f0 [ 850.416746] ? lock_downgrade+0x6e0/0x6e0 [ 850.421005] ? __fget+0x226/0x360 [ 850.424445] ? __fget_light+0x199/0x1f0 [ 850.428418] ? sockfd_lookup_light+0xb2/0x160 [ 850.432914] __sys_sendmsg+0xa3/0x120 [ 850.436708] ? SyS_shutdown+0x160/0x160 [ 850.440677] ? wait_for_completion_io+0x10/0x10 [ 850.445349] ? SyS_read+0x210/0x210 [ 850.448984] ? SyS_clock_settime+0x1a0/0x1a0 [ 850.453389] SyS_sendmsg+0x27/0x40 [ 850.456915] ? __sys_sendmsg+0x120/0x120 [ 850.460971] do_syscall_64+0x1d5/0x640 [ 850.464877] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 850.470064] RIP: 0033:0x45c1d9 [ 850.473249] RSP: 002b:00007ff7cbd45c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.480975] RAX: ffffffffffffffda RBX: 0000000000027680 RCX: 000000000045c1d9 [ 850.488243] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 850.495514] RBP: 00007ff7cbd45ca0 R08: 0000000000000000 R09: 0000000000000000 [ 850.502954] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 850.510222] R13: 00007ffce15da43f R14: 00007ff7cbd469c0 R15: 000000000078bf0c 15:42:57 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1}, 0x8}, 0x24040885) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES16], 0x14}}, 0x4004) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000580)=[{0x10, 0xff}, {0x40, 0x114, 0x0, "311edc47fbc79a990857cffede4fb0d828b7c730b78ec9e2401b0e3027060110ce7052ac1473aa681dc82bc883"}], 0x50}, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x80300) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r2) write$selinux_attr(0xffffffffffffffff, &(0x7f00000001c0)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0xf7902, 0x0) socket$unix(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[]) 15:42:57 executing program 3 (fault-call:4 fault-nth:12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:57 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a69700000000500040040000000090002002b9df6fe9a14deb71f712e797a3000000000240007800c00028008000140000000000c000180080001400000000008a8000640000000050500"], 0x1}, 0x8}, 0x4000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x8, {0x80, 0xfff, 0x6, 0x77, 0x401}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x180, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5467}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x20000006) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xbfe7a1dec4f7e672}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x18c, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f5c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3247, @loopback, 0xb27}}, {0x20, 0x2, @in6={0xa, 0xff, 0x9, @private0, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x10001}}, {0x20, 0x2, @in6={0xa, 0xfd24, 0x3, @dev={0xfe, 0x80, [], 0x22}}}}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x810}, 0x90) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e23, 0x5, @loopback, 0x2}, {0xa, 0x4e21, 0x8d07, @mcast2, 0x1}, 0x8, [0x80, 0x1, 0x0, 0x5, 0x36bb, 0x7fffffff, 0x2, 0x7ff]}, 0x5c) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 850.637321] hub 9-0:1.0: USB hub found [ 850.646072] hub 9-0:1.0: 8 ports detected 15:42:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) flistxattr(0xffffffffffffffff, &(0x7f00000013c0)=""/243, 0xffffffffffffff88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/autofs\x00', 0x400000, 0x0) mq_timedsend(r5, &(0x7f0000000240)="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", 0x1000, 0x89, &(0x7f0000001240)={0x0, 0x3938700}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x4e) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000180)={'nr0\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff02000000000000000000000000000141be9ac66f67d9f88eaae9b21b2ccc7ee664be0b40abcfbd966ca37c040804de18d758cc0db42ceebfa1e97849d6e5c53442c60cb8aba858dcde5cce9f95a5795858eb5adadf7d9e58f1f9f89318c3a8be610c325e89d06d9e2bb93968fb31536b2fef98260a56942746cf83f2853049582b778824762d2e53a267856ce114e9615dc6f3fbfb524594ea30ae40276efc5b8072dda5c73384"], 0x52) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x440, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x18100, 0x0) 15:42:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="95c4000000000000000001000000000000000b400000004c00180000000073797a300000000000ecffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c48f8825c6b76fb78814a47009e3e5f9de6e1891b386d87895bcd4d60fb3fba2e3e785aa7c9bbc41ee52054fcac523cc04ee94b1de5601d812af213c7d49c4dbd8f2026b70216b7dbe1818b1366667e973103027c"], 0x68}}, 0x0) 15:42:57 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r0, 0x35, &(0x7f00000000c0)={0x34, 0xfffffff7, 0x1000}) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x2) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="f00000000000000002000000000000000000070000000000000001000000020000002c000200000000000400000000f9ffff010000000000000001000000000009005d000000000000000000000000010000a51b50287b1e54810000000000000004000000008007005b267b250000000005000000000000000700000000000000000000001e0e0000060000000000000000010000000000000b000000020000005d7b2927252c2d2d5d2f2b0000000000000000000000000001000000000000002600"/216], 0xf0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x1ff}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200447e9, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 15:42:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xfffffffffffffff6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x54}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x20, 0x6, 0xff, 0x6, 0x0, 0x2, 0x86001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0xffffffffffffd8cd, 0xffffffff}, 0x411, 0xffffffffffff7477, 0x8, 0x5, 0x5, 0x101, 0x1000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000004f90000000000000000007300"/32], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r6}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r6}, 0x41) 15:42:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x10) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) [ 850.835722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 850.852062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) recvmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000000200)=""/108, 0x6c}], 0x2, &(0x7f00000002c0)=""/8, 0x8}, 0x21c2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f00000000c0)) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54160000020600000d050004000000000042474760b4acd755c8e20900020073797a30000000000c000780ba080006400000000305040000002e000500000000000500000000af85905470bf151f171d824ba78a018eb84962777f0ae688956b772c607b2149325e925465d67264040ca83959cd02a0382b22e8c2846c51541ed51ed8bb6a4c37700b6dc57740a618fddc6874478ef6403f7e3ce7336ba6112f407e0c4bead1bdc30af9d216afc8090757c8c86606d13c03d8adba32d9060954e117d2dc468d055601c4ad33a51acb8891cf37e05992af4b"], 0x54}}, 0x0) 15:42:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x200, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003140), 0x5e3) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000040)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000001c0)=""/154) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000000015000000000000000d000300686173683a6d61630000000005000400000000100900020073797a30000000000c000780080006307db96503050005000000000005000100060000001a256ae911d2910744522b882434c76efd32cc1189db1595eae4fad42568a1638f3b78384458ea024bc497dc3a071f56e0433e6c1022cded41d7c40ebca00ab4c841e405d8f86f8cfc3708db9017768df1b73701819a81179ab80edb42eb03ecd256499913fe9a9a4a78b2adf7da3d37a4d92e98718bd3a0471948446f67"], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 15:42:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x480020, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000002c00270d000000b515b5531e0d5bc8e6080094ddfc655016f60000000000", @ANYRES32=r7, @ANYBLOB="e0ff000000000000f2ff000009000100727376700000000004000200"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000012}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x58, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044005}, 0x80) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000180)={0x5, 0x0, [], {0x0, @reserved}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x21c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1fc, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xaa}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3f}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x190, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x52, 0x1, "33da6fa3875f4355afd6a6c81ca49b481fb9f1a1ed66d498fc7e5ede37f2c69edae9c62b933a75df6fef37548805082643038b1e246493c851520c04a2be66be3bbd761ac092fa9738b5add88c0e"}, @NFTA_DATA_VALUE={0x60, 0x1, "286f4a18e585ac0d981f5d72d94be6fc23c142a27a1eba9cf17ed901d08f34448c6d89a4bc8c82bfaaecf941d08caa68239a610c6be2e66e1b6da420fdcaf2fa444b0e94df4a12dc7639d33c47d8f8c9aeaff4c41570a2cb76a05f1f"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "4969d12f9112e0fd0b7a4eebaade01dad72f57469b4ce405640e5ee9f4a9373c76ab6e6728fd2c936bb57bfc620b80b29ad3dccc06a3411b5f17c6ced1d23884437199a2851356eb3c4a99b703"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x394}, 0x1, 0x0, 0x0, 0x4000}, 0x4008014) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'ip6tnl0\x00', 0x200}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000640)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="045aecfd5bc38e84f3a7907fe418cc810fd18ecfc5fda29ee77d636fe27a6e7100dce14aaf9cd34e4311cef692dae610e68adc4b4baf58eb41f214009e9dccc4e3ee5910736ad4c2b6cc7ba9d8c50248a3bb8c1430ca664821f268f852567e2cf660db2476c4cea615e0314a1d6ed99d2426351ef976abbece3db5cc1c23d9ca"], 0x54}, 0x1, 0x0, 0x0, 0x14044010}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r7 = dup3(r6, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x5, @remote}, @in={0x2, 0x4e20, @private=0xa010100}], 0x2c) 15:42:58 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = socket(0x25, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="2067c5189cddf1d85fbffd414f85ffdae852c7e061636000000000000000aae0942013ba1d434c89cf451028a4a09e8027a1a419560300947186f826be", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r7, 0x3}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000000206012d000000000000000000000000010000006269746d61703a6970001af175000005000400000000000900020073797a3000000000240007800c00028008d5000140dd0d0aff0c000180080001400000000040982b6501080006400000000505000500020000000500010018cf074ecba8bb80ae31238425b37a3cd26a60d2b1ac1ac7200b1e6117ea6d30e9ecb0a26eea28363bd3ca9f0ce019314a099fe7a301a2013281c37b0cf8b7e9c2ddc1a6cea514e9e4f4d46774eb4138b1cd44cb6747fd02"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:58 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000480)={0x6, 0x401, 0x4, 0x2, 0x8000}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000206441347a475da6e47ab012d0000000000000000000000000e000300620600000200000000000900020073797a3000000000240007800c00028008000140000000000c000180080001400002000008000640000000050500050002000000050001000600"/114], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000004c0), &(0x7f0000000440)=0xe) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0x7387, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="8f1091372ace8560259e8daaca3babb0ff68dbc7d5ecfcb107ab405af3b332bf28f50ae6ccbe2b85606cdf8bbdaf30ba4397f1cae8304f0f3b13269285ce02aa1b1b8ccf7d1d4babf3e1b5e87df429a26c2049aeef3fb086bb488708d21e3da7e890a225f94e87f09c5cd6ab87b68ba009196e668b39e498972b9d692a3221296b24f3800a781afaccf97a903b5de8095fa5b9c0a88beef444ca74106140660824ceec1dfc97a03c41b0c55304768ec9ba2c364757e269507ea911fda3f3fae0b706f65cc7c5537c432999a81fc0dcb0e9", 0xd1}, {&(0x7f0000000300)="60b2e582684f3bc67be0654dff4f711716e254c902452a07414f9c1e352ba3d81a5ec1b04e99b47052d35442aded982c004bbdbeebc5311d3ff6bc410174ac1ad971130ff029bf7cc96965a9cb572e698f26164e404a4029467f0446c021a1703fcb776664a6789d979bc36940295c6862c96db7d1462b1b48ce18bb7a2faed6f59fbae5fb8b53f5e389dec81e615c47374cf7b99b16f8f628f4", 0x9a, 0x1}], 0x81, &(0x7f0000000400)={[{@flock_local='flock=local'}, {@flock_strict='flock=strict'}], [{@appraise_type='appraise_type=imasig'}]}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 851.490423] Unknown ioctl 35092 15:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xffffffffffffff00, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040032) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x5, @loopback, 0x8}, 0x1c, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@hopopts={{0x90, 0x29, 0x36, {0x32, 0xe, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x84, 0x58, "aab8fa44f17a66c6f2d9ba4863f91c4a921b94e68ee103e7b91521785660702ab0ce9da3e0d0fe1ee75c740540101465ef08933dd1723630746e09ee1f24a97d114493388f59c9df99c12a2d1eaaf39c6d4909ef005d8994"}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1d}}]}}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="2a6c73325f60bb01b3a85c6c4a71119ec734bfd4ec269d310f438f3a8e9dcbdfdffab07d3cc343e4adf62d50aad8ad756978c53b512b1a500764375bee7c84151023139b0b8547c6b39a656503275b67dcbfc2a9b751b429171978211db038613ded5f7eb6dffd43cd2af3669d232d371d3884c5604128f4096f437f81a512a209b66ec32fc7", 0x86}, {&(0x7f00000002c0)="d46866eeb878e1026e0829750303525b6c28473b63bd4bff86fb1fe94a3ed5efce384bec2facff1bf452d2c3250612fde5db6f7d315d382f9eae3a75d9a8fe1ac4bd1b13c409611153b42eccb1ddbf8444f1f767eec507b7682b96d47273d9549b58d26a3123d286c15eed9f2f0b6b120387baa59d3b6208f8738ab36fd5", 0x7e}], 0x2, &(0x7f00000004c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdrdstopts={{0x1b0, 0x29, 0x37, {0x2f, 0x32, [], [@generic={0x1f, 0xd4, "44793b9d516b899a744c095fedb897beaed3ce754a4cbc82d87f694e9ae42455cd90ee4fd89f8299fbc3fd3746a1fa038850914c6c0ac4ebeb23feeb4e5b6a92115628bcdaabdf9d120780a27fae091e6d0846a8b74a06e1a1266832ada97c68244389817863b88241b748e0e966c856c56ce1744a7df47a700307055de7fe3cbc14a07af51f6530e8abad98b7370925ca435ed95741df3da044a424097ed335bebff2f0a29910a15c4170f8e61b74430eecab735347a6d19094322cb881dbfa10c3a93936677872be128b5bafcbb94ae1c5180f"}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x50, {0x1, 0x12, 0x3, 0xfffc, [0x8, 0x1, 0x8, 0x6, 0x9, 0x4, 0x6b, 0x5, 0xffffffffffffffe1]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x8, 0xffff, [0x3a0, 0x7, 0x3, 0x200, 0x633f9f57, 0x401, 0x8, 0xfffffffffffff800, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80}, @ra={0x5, 0x2, 0xfff7}, @jumbo={0xc2, 0x4, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts_2292={{0x160, 0x29, 0x4, {0x32, 0x28, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo, @enc_lim={0x4, 0x1, 0x40}, @generic={0x80, 0xc4, "c3bdfe65ccf22e1e377ea80ac85ed01875f68449f93dd69a0e093007e2c852409b0bba8320341997a27fe5dbc2150a89252bb1d11b73fd0dc67b39f683eba49a834a023a38ac3d88c2e49b054eef19fbca404600ae634dc9baeccb99cc79f8d01309fe13cce6edce778262166747fae1b4942664e5a39322b54a0518e937b1d72bb400ec016ddbc8b5e2a97308b3058382653873080bd32023182600180d86fb5313b6d67b2183d5f9bd8d466e1c023b38d516830dd63a042a51e9029b4b09a317fbe165"}, @generic={0x1, 0x60, "159e08f89ac068188d8294bae3a62f7035ac83d6041d3cd69d609056a81ed17c78406b250478e0851dae6d531e6265e0b7d3eb666002003cfbade47180fc1cb3dec0558bcb57d4132721a79d0ebb498529ac480dd936e2ffcbf2b088dd7cb030"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x340}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="049897d119e3362dbcab7cd3dfea98934665f0f287367e41fbe0d2a2d63f5fa3b42dcca2b8aa90499e052722219583a4d905a42d075b306fbed6f8cc05d1c8f1036f80", 0x43}, {&(0x7f0000000880)="c3d20f4e626e24c280d2d839ea39f445df3744a1b88cd23c77a92637d4533b73f535ceb87fbfce632b5182fcd7f1b271f8704de9059ba7941d78bd379b215ca0a8a2e217a1f8b36146df6d3171c04c27285caa11666aefd52f9d63b9ab3f6fd2c2255619d3f5a79d9cb1eec96338b1d4dc4c98d450285d0518c815ca7610aeaa99fc3f189b02a7703aeb823a3772758d882f4688b832c77abbecedb5522eec4474204ebd41af6aaab957767bb35831e7961b461aa79bdd05cd44d5de4d80da8ba100da19b285c4d820e3f7a06101efd37fdbf222", 0xd4}, {&(0x7f0000000980)="494c10fa01762182680b86715ca59660d5a52b96e34b032161b558a76f1e9c18a6df7de2b0a0b33738631237101693d7bf55e8251d07227d55af86e81ad7879ad5949c46d546b1b52e3c6223e93c3cd7d576af5663c09637d6794325e7b349ff1463d9b4d0c692dd7d0bc4ea45ba19a5a6a8ea5fab0513a4beb70feadcf8558dd9c52c820154260b513f11945be9911ef0c2310a3e8260221946cbd95c9d555be010a4bdc2ea8750d7d5f45a1ecfa43c13dc93ea99a070cd3bf007184254d3", 0xbf}], 0x3}}], 0x3, 0x200481d0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:58 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000100000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002400074e17a860279003ae7869d8aa090c0001800800014000ebffff070006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f00000001c0)) 15:42:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x200) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:58 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="000000000000ffff0000000009000100677265640000000914000000000000000000327a1c7ebcef5a5c9ac15fec6f3ca98dcb63dfc3bfc32e8adb3953d8739844cb12074a6f95b287e4"], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) epoll_pwait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, &(0x7f00000000c0)={[0x80000001]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x10) 15:42:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x180, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x3, 0xfffff45a}, 0x7, 0x8ad3, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0x5, 0x20, 0xfff}) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r7, 0x800443d3, &(0x7f0000000000)={@none, 0x101, 0xc, 0x3f}) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0025004b00002c0000000000009078ac1e0001ac1e00018303384414050300"/58], 0x0) 15:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYRES64=r2, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x40895) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81c4}, 0x54) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:58 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20282, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = socket(0x10, 0x80002, 0x0) socket$rxrpc(0x21, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2014, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 15:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r2, 0xd2, 0x8, 0x9}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x20400, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1402, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:42:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8283, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x4e22, @private=0xa0100ff}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb3d571b3906a69a40c845c6faaa353d6baaaaaaaaaaaa8101000086dd60163dac00183208fe8000000000000000000000000200aaff02000000007c7e99993aa035ea135a95d3004500000000000000000001"], 0x52) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0xd5ab, 0x1282) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r7) write$binfmt_misc(r7, &(0x7f0000000140)={'syz1', "9a918744859594b42f11015250ab6431c54c9940fa00fde2ed1c856a4803371ae96db306d043f5ea81d08d2c6464d994ce6c628162c560774b7f"}, 0x3e) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:42:59 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e000300360b546269746d61703a697000000005000400000000000900029c73797a3000000000240007800c000280e8000140000000000c000180080001400000f0ff070006400000000505000500020000000500"], 0x1}, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xa, 0x16, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e400314d16e84e6f93cb3256b303f0566baf641bf1c1800", [0x1, 0x7]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 15:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 15:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x6, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x891) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) r5 = dup(r4) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) read$FUSE(r5, &(0x7f0000003140), 0x5e3) accept4$x25(r5, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d00e557c5bff1d8bb0561630000000005000400000000ed0800020073797a30000000000c0007800800064000000003050005000000000005000100060000004d025179b9a6c7e614a63a9c04000000fe663fae0970a2e63ce92f3d9d31e974bf9af59fdd6d74"], 0x54}}, 0x0) 15:42:59 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) r1 = socket(0x25, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r3, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r3, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r4, 0x100}, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) 15:42:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'gre0\x00', 0x1000}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x52) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000100)) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6, @ANYRES16=r0, @ANYRES16=r2], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x18100, 0x0) 15:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206030000000000005e000000000000000d000300686173683a6d61630000000005000400000000000900020073797a30000000000c0007800800064000000003050005000000000005000100060000"], 0x54}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000002060745964a51856a710000000000000d000300686173687f6d61630000000005000400000000000900020073797a30000000000c000780080006400000000305000500000000000500010006000000"], 0x54}}, 0x0) [ 852.587485] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 852.612258] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x1e8, 0x280, 0x98, 0x1e8, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, '\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x200, @loopback}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r2, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) 15:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400a10000000000000000000d00030000000000000000000000000088c6609d74de0b55208e00000e9b831972c6f85d0000050004000c0007800000000000000000"], 0x54}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@private}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) [ 852.684499] ip_tables: iptables: counters copy to user failed while replacing table 15:42:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000100)=0x1) read$usbmon(r4, &(0x7f00000013c0)=""/4096, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x10) 15:43:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) fcntl$setpipe(r3, 0x407, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4001, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000002c0)=0x6, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x60}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000300)=0x15, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:00 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x428000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000200)={{0x1, 0x1, 0xfffff3aa, 0x0, 0x2}, 0x1000000000, 0x2}) r7 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f00000001c0)) 15:43:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003640)={'syztnl1\x00', &(0x7f00000035c0)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x2, 0xc8, {{0x16, 0x4, 0x0, 0x37, 0x58, 0x65, 0x0, 0x20, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0x13, 0x75, [@local, @empty, @rand_addr=0x64010100, @multicast1]}, @generic={0x83, 0x5, "ac2d3a"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x6a, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp_addr={0x44, 0xc, 0x30, 0x1, 0xc, [{@local, 0xc00000}]}, @rr={0x7, 0xb, 0x40, [@private=0xa010100, @remote]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000004740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004700)={&(0x7f0000003680)={0x1050, 0x12, 0x200, 0x70bd27, 0x25dfdbfe, {0x25, 0x0, 0x28, 0x0, {0x4e20, 0x4e21, [0x7, 0x401, 0x10000, 0x8001], [0x40, 0x3c2, 0x14d6, 0x2], r4, [0x401, 0x40]}, 0x770, 0x4c6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 853.487105] ip_tables: iptables: counters copy to user failed while replacing table 15:43:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES16], 0x14}}, 0x4004) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = dup(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000580)=[{0x10, 0xff}, {0x70, 0x114, 0x1000, "311edc47fbc79a990857cffede4fb0d828b7c730b78ec9e2401b0e3027060110ce7052ac1473aa681dc82bc883b26746ba7174593bf47f65c5a38d111d9635f9216662b522ace7cdf7445673d652a4b29c56bda5d6d5e7cb1080"}], 0x80}, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x80300) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0xf7902, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc8, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8804}, 0x4000) socket$unix(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/66, 0x42}, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="6d7470742c00289ae08e3a097c8822f84d252465a21f4e1888e4754ad373cd991ce230216d5c542c3e135b063d847cf3fffb1d0bcea48692c454bcf5f75db2b84e2e683521ca806a7dd91d9a5d7d4e1fb467276faede6629feb87a9605665cd281404fa89fa61a6f4fa28794b8ab469cfffb4630ff5271550b937223ff48fdc56b50ae20e11d7e952f9bb6a90982075347a41469b3429ee3"]) 15:43:00 executing program 3: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0400"/20]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r2) r3 = dup2(r1, r2) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0x9) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) [ 853.621655] hub 9-0:1.0: USB hub found [ 853.626858] hub 9-0:1.0: 8 ports detected 15:43:00 executing program 1: mlockall(0x3) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x1000, "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"}, &(0x7f00000010c0)=0x1024) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x5000) shmdt(0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) shmat(0x0, &(0x7f0000ff8000/0x2000)=nil, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2}) 15:43:00 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = semget$private(0x0, 0x3, 0x20c) semtimedop(r3, &(0x7f0000000040)=[{0x2, 0x3}, {0x1, 0x2, 0x1800}, {0x3, 0x200, 0x800}, {0x2, 0x7, 0x1000}, {0x1, 0x1, 0x800}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000140)={@null, @null, @null, 0x7, 0x8, 0x4, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 15:43:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a30000000000c000780080006400000000305000500000000000500010006000000c7d52a0c401a2953b4d0755eed60911c82f5ee1c911992955cb0181ee63c15d4"], 0x54}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r3, &(0x7f00000017c0), 0x1000000000000277, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) r5 = socket(0x25, 0x1, 0x0) close(r5) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x4000, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000000580)=[{&(0x7f0000000200)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="6d37537f3cc62a98a85cee", 0xb}, {&(0x7f0000000480)="a0fd381e47d8f07c54a4d6b53113eb746546e98db485dca443233feb2e3d3eec5404c348b440b542b93606ad72e716755d45aa69a915f4ab9d5d8fafba9c4f86b605dd7c5c87b203ebb857e457e05a3df57aa6ab92dbfdfac66a854c7b3cc092df00"/118, 0x76}], 0x2, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x20}}], 0x30, 0x80}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)={r7, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r7, 0x64}, 0xc) 15:43:00 executing program 1: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x20000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340)='NLBL_CALIPSO\x00') r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) getdents(r3, &(0x7f0000000280)=""/125, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000440)={0x0, 0x5, 0x0, 'queue0\x00'}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x7fffffff, 0x1, 0x101, 0x5}) 15:43:01 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f00000001c0)={0x3, [0x4, 0x7, 0x7], [{0xfffffff9, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0x69cc5d19, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7, 0xa10, 0x0, 0x1}, {0x3, 0x4a4, 0x0, 0x0, 0x0, 0x1}, {0xefa3, 0x1}, {0x5, 0x3ff, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x3, 0xfc, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x45, 0x0, 0x1, 0x0, 0x1}, {0xb5, 0x800, 0x1, 0x1, 0x1, 0x1}, {0x9, 0xeaf9, 0x1, 0x1, 0x0, 0x1}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040), &(0x7f00000002c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:01 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8, 0x0, 0x0, 0x8040004}, 0x2000000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:01 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = dup2(r2, r0) ftruncate(r4, 0x10000) close(r3) r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffa) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000a, 0x9) 15:43:01 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_map={0x4, 0x2, 0x87, 0xff, 0x8, 0x7}}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0xf, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:01 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003140), 0x5e3) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000000)=0x7d0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@srh], @ndisc_ra}}}}}, 0x0) 15:43:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80003, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000300)="7f9b76e76b5ba6b606943936c8f43788432c7fbbf0ac53ff395a756eb1f51cb58f269f8dd7d789ce875a236d8c25809c5a4a7ae6aa5075b64f8a36471f15be7986d5036cbf1f676c5ec1625701989dc9", 0x50) sendmmsg$alg(r6, &(0x7f0000000100), 0x492492492492711, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) [ 854.541882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 854.597265] bond2: Enslaving bridge3 as an active interface with an up link [ 854.615973] bond2: Enslaving bridge4 as an active interface with an up link [ 854.628555] bond2 (unregistering): Releasing backup interface bridge3 [ 854.676373] bond2 (unregistering): Releasing backup interface bridge4 [ 854.735447] bond2 (unregistering): Released all slaves 15:43:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x6000, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000000c0)={0x5b38}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686177683a4d61630000000005000400000000000900020073797a30000000000c000780080006400300000305000500000000000500010006000000467708131f3c22498a5a6ef6b9a13ab5f98d638286280a9bc0576a1fcdd84313232c4853463f527abb31648db641abf710fb4edc933da204e6c5ca317aaaf2fb5a10eefcac2e150e331a615ff6ee2ac92b087d531f099b988809e9c2612d78f89bf3fd080de7afc42b3f5e67c1f2f5779da245239ff7695a7e0c5471183437f7ec17c4c9bdbc7db4722e0d63671129dcc4edac8986f9650ff89acde55b458e7046c42ddb101e30a09c7592711986f9a70f2e7eb4a318c656516353bc45607e369581040b0dc2e5a9d0d15cfa"], 0x54}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) 15:43:01 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) getrandom(&(0x7f00000001c0)=""/240, 0xf0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 854.893716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 15:43:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0)={0x2, 'caif0\x00', {0x2}, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000100)) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 854.963688] bond2: Enslaving bridge5 as an active interface with an up link [ 854.994644] bond2: Enslaving bridge6 as an active interface with an up link 15:43:02 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) munlockall() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a69700000798c496298f803f4a5e72dd827742d9f7a3000000000240007800c00028008000140000000000c000180080001400000000008000640000000050528050002000000050001000682ef41d04662fa3197e6ea218f36c3fcddefe976d02a295204002ae66be3bead59165922f6d0c94570f3dc01ae3be6465d38a5789ba9e645fc370000000000"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000640)={0x6, 0xb5c, &(0x7f0000000bc0)="67e673218b445a68708c0db1d570da4648519285b159ca50617281e32fd5b293743d2d8ca4bf7888456cd4d785a78137cb44dcd928ecd10872e556483ade0583359c7c386699c8798d25e59fc0641a6c5ca7eea545fcbb3e226d80b6ccf5ca14a63dd587a492040f8e39933a5ca8370947b6daa47346b6dadbdc4fa5fd13a74eda784aadfb3879430c1d9a58a2e1c29bb8a2a8db0ea5e7cf6ebf0fc8566a288155ebb2ce7c3fa71cc964167a79a63a2ba247783ea90d96742fdb9fc51be1d34a834adcbac591edfa7ca5bac38ade9912c13594f00ae4cc809d6cde931d0ee3ef0b9e96fa4e30086aed4663c5e680bd", &(0x7f0000000cc0)="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", 0xef, 0xfb}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@private1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0xaaaaaaaaaaaac7f, &(0x7f0000000340)=[{&(0x7f0000000140)="38277c9d374ecc95dd04260ff2b78bacf7a5b9fa572b7606229e13836d118c5a7aeb5a6665e17206447486563efae652a534e8d15cc914261455ec9ffeb9b9fb8e486368c207e88819e09f6d4a5f4fc02cfa8b5eab875cb488a55c31ab4264dff6694b4e5c23f693c484e037031399e7904dbf048dea8ce9f381bf1264502bd756b63b85b3659462f39862a40e65df79c3d69da9d5c1adc6fd1abee12878a72cd78d4e000e1e8122c1d7c5cc13d149c8f7d12e70ef12169c", 0xb8, 0x6}, {&(0x7f00000002c0)="50148a263993950344e73ce5a5d87e5471fb8c8afdd111d59cb740017751d54c11ebb7fbe56257bd8635ff0137", 0x2d, 0x20}, {&(0x7f0000000300)="cc4c5db9b17e008d6acf0898daf9a09ec373523f00d3a670744d8a6aa670b56b0eae43d5cd36cf1e6811", 0x2a, 0x1f}], 0x8000, &(0x7f0000000700)={[{@creator={'creator', 0x3d, "e5bcb111"}}], [{@dont_measure='dont_measure'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r3}}, {@euid_gt={'euid>', r5}}, {@uid_lt={'uid<', r7}}, {@subj_role={'subj_role', 0x3d, '\xd3,/]k+.\'[&$-}-C\xdb^*+\\&[#({:#,'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\-{*&)@-'}}]}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 15:43:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x5, 0x2}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2b8) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000180)) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000000)) 15:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="f70e75f7b18649085e5b668d4647a91e606270d7c452c53161f00dc47083568319fad51e96"], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xe, {0xa, 0x7, 0x7, 0xca, "c32259bec21038240fd2eab7eee7aee40013a07e8fcff9caae4bb32f3d75d115f97833421af623233def002ec602bfabc1e3ec240517659c6b6bf97c4063ec078fe4e6451a3c5715dd1321486724257e2c3d86b24c5de3621b2132c6cfd192f033586fef7a0241925b098b30a5db9c569394ac4ffc75b2512c39ab7773a11ce2f848f7e7fb71b02c0120b5fbbd7dc840342133b755ef8f5e854ee69ad3f063f27755330421bfe46537aa97a662dc488a83dff902f9dc177eb0c49b94c4011c2f84df6d96bb735bcbe7f6"}}, 0xd6) 15:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) read$FUSE(r10, &(0x7f0000003140), 0x1000) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8c402, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18103, 0x0) 15:43:02 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000028001b0d20deff000000000000000000", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000a00010072737670360000001800020014000200fe880000000000000000000000000001"], 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 855.325217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 855.403766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:43:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x58}}, 0x0) 15:43:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)=0x100, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xc000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x5}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x32, 0x118) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0084cc589279f973230012000000000076655468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', r7, 0x2f, 0x3f, 0xcf, 0x7, 0x41, @private2, @private1={0xfc, 0x1, [], 0x1}, 0x1, 0x80, 0x1, 0x80}}) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 855.890946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 855.910268] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4000, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="7d2a6e028b724b67853d3554f25be1032601c5f9202588e112afd7996c01addf15d56e16cd5b158bb1b7f85408e234110d1f95accfb9e2a924213382fe069459de1e8db4f442dd4c7cc53e7e13f48834371896b03bcd8c44feb3e3fc3d222eb078847959e6542ff64fd59188c862b0645692804b849d", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250700000014000200fe88000000000000000000000000010114000300fc0000000000000000000000000000011400060073797a6b616c6c65723100000000000008000400ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x404c844) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x19c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000006) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setfsuid(0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r7) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)={0xec, 0x3f, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x49, 0x26, 0x0, 0x1, [@generic="db2fd91a15a523fd1eb74c737af653e4ad637b703780aaf5b5478f7390b106999713e58053d6e51dd3291be92ed136e9bb24cc902317d9dcca", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x1}, @typed={0x4, 0x46}]}, @typed={0x8, 0x50, 0x0, 0x0, @pid}, @generic="b3dc804446522e1bd5583cff82d492d057ab856fb827f3ed35c1f1b1ff77bea3ac32e81dbe7c9863ba9ab0cdbeaa5879f765970c6990143255f04e73f75b98f310f665865518d2d2077cf37a3ec029fa7fb87dec1008fccf9b1d6536f811f113ab6813d5136f6e5f414876eaeca8fe07e7eb60a904ab14a9133f2db54e3059", @typed={0x8, 0x18e6, 0x0, 0x0, @fd}]}, 0xec}, {&(0x7f00000002c0)={0x370, 0x3a, 0x888, 0x70bd29, 0x25dfdbfc, "", [@generic="e650861a8cf935d5db9d0bce87d3bf97a215b41f8c247854ad40d0e6aaa3a3ca41b37969bd83f7e610a53bfe5e1bb980dbdc47855ac7c96844c05fe5d375ff71c73f76d89f7d50570f5c2d2debe28e4e92795372a706503163f85ec82b061185bcd1a57ae9f02a0c90408e1a36eb606e5ac4707e202c26c8b207914828bb2bedb69f30d09b77bdc14a3ccea1d672cc64", @generic="6ccba61eb54c49e71c8a34381a797875ba5f248961bfff90b7ed196f13839c4e846815407ec833130690be27392d3fb042a583d8b1381261cf279caeed045ef5607fe9d49b6ac4dfba33967770411e1ac429edb295670e55acb8e14dbbc8b9e0d3a75cf65c90fe44e5a01bf4db7b42c13526c906629eab66d27c35346d96a2f8a447cb9ff7fd52eb121ebdd939", @typed={0x8, 0x42, 0x0, 0x0, @uid}, @generic="b47dc2726b4f8649804eaf3a34d987bd7190d2de26a028944015f863ba226fdd9785952969c29039ef001a2a5eb43096807ad2cffa4bc7444b4a254107dc912a04cf19292045d7cc7e878289a0f5df7d2c94cb40712019de8ad358bdd15b4fab5c62e04f3b327302528c78b9c59680a2c55036f531836fced22130878c7e824352258f31c29f7cb92d9d704e", @nested={0x1ac, 0x13, 0x0, 0x1, [@generic="d65e9dd7f5357528d0e2d1200f5826b20c1707aa69928a73d8535b779b8654d2ab29b1521204920ffd80edac25b3217a5d3f481fb1c0fe79bfab4968c2336e6a5f815578d9d52b964f90242804", @typed={0xc4, 0x1c, 0x0, 0x0, @binary="a1de013819dc972745a05195128abdb22cc81f34f3a8259f1a00cb1a0bf6bdc7b6a91d52e647c76e93ae22dc0b7debf7f690fbad198dcba701e06f6c3875d93929bcec927c05bb501f75bb1c237bb646279a4f33fb1eae6b5a077d7fa6e52623be6678fbe4fb857008ca5e9439dd6936ce94bdb089013a5db9f314192d77e28c09c23d3426c6913db7f0afad10b13a787d2349f22725d0ef5ee6c082f2e4282f63784679dbefd3d23d477f5c3ce1a17a808229b514a1ca7b28ec438b34fa3d6d"}, @generic="d8675eb0c86139dc6ccdbfbd4a2bc77ed513053970fb90c04efa2cb442cee248b9877d76b9f493b017443e00ec4e6255ffd52ab898f6945e936700175ff24b98035521216fd170b898e39243e39635945438500774a931b019f276a14065d7de00fcae5db23f6480fc44def0e30367b1f7f7531c56e52d7a9433950adf8dfc0b5cd989029f4745c9cbf4ebb3e191523149224c8b6f24b5"]}]}, 0x370}, {&(0x7f0000000640)={0x1054, 0x18, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x1044, 0x60, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @pid}, @typed={0x21, 0x2d, 0x0, 0x0, @binary="b0235329f441b0e90d8b0609ead77a5bffb6bbcfd474f27e546d4c93ea"}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0x53e}, @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="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"]}]}, 0x1054}], 0x3, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x28, 0x1, 0x1, [r2, r1, r5, r1, r6, r7]}}], 0x48, 0x10}, 0x811) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) write$tun(r4, &(0x7f0000000140)=ANY=[], 0x52) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000100)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) dup(0xffffffffffffffff) r6 = socket$inet(0x2, 0x4, 0x9) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x18100, 0x0) 15:43:03 executing program 3: socket$netlink(0x10, 0x3, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 856.209272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 856.231423] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x5, 0xb, 0x4, 0xe000, 0x7, {}, {0x4, 0x8, 0x1, 0xa8, 0x9, 0x8, "6de56de6"}, 0x1f, 0x3, @offset=0x1, 0x93a, 0x0, r2}) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000, 0x800) splice(r3, &(0x7f0000000040)=0xc00000000000, r4, &(0x7f0000000180)=0x16dc, 0x3b55, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x8000) 15:43:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x58}}, 0x0) 15:43:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) fchownat(r2, &(0x7f0000000040)='./file0\x00', r4, 0x0, 0x1000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15:43:03 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x102740, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x47, 0x2, 0x9, "39ad3df350b1d7f3a9cfb2b6e81057eb", "fddbd713c57f896d2529dc8a3666c35c118c06e7f639fafe201f7846ef0a2c1b5dd635b2f9174c77249899e717ec96999567"}, 0x47, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x7eb4, @private=0xa010101}, @in6={0xa, 0x4e22, 0x9, @local, 0x6d}, @in6={0xa, 0x4e22, 0x8001, @local, 0x3ff}], 0x58) truncate(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x3, 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) 15:43:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f0000000040)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) setsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000100)=0x1, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:03 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x0, &(0x7f0000000000)="2093d6ea697c666a5871bd1e6c1a0faa16cd252bacf7b6dcc3409bbe96cd34918e14550ebb57935395dbd5b02220d8516646d73c68121d2c2fcca7c2c3072c3ee4eb8b0fd1e0038bf493455e4e5dbd7ce74a47172ce06ed082f2462c225d372f40c6b1dd70fc996482d9e411edee") 15:43:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:04 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000000100000080ff0300000040000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="727bb231d1afa01d73ca16841f4952c9c57756a8971eaf2f2e9b15aa2e00136418bf54ddb74719535359e9d11b842ceb1e7fc8c8af9d0fdadb57f3b01f5814f59b24cd0bff840d8f2187291572dbc87891718d6e9eee00aea2d6cec39f01bfe021ec11f70a90e788dd97a85cc79807c46ff29b442e5aa46003ed0cde85d0934b7d35d7e8fb905859570df54a61d6002570943e99e08372a85865912ceb2ad34700704b552fd20bec858eb1ab1916ab8e0e", @ANYRESOCT=r4, @ANYRES32=r0], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) connect$ax25(r0, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 15:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x58}}, 0x0) 15:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) dup(r5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000280)='\xc8\x00', 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)=0x1, 0x2) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) 15:43:04 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = socket(0x25, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x3ff, 0x8, 0x100, 0x3, 0x400, 0x3, 0x5, {r6, @in={{0x2, 0x4e20, @empty}}, 0x7b9f, 0x1, 0x7b11, 0x2, 0x8}}, &(0x7f00000000c0)=0xb0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r5 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) [ 857.367986] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 15:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2000}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {}, {0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x2f8, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "0ae60f2f88d01153d67341de46ce16a9a5ad11af607bb492c791b26526470c52e97254bd3dbf7217f35b3944767eb908b5b26112ff93d1b5fa9e7e3d04ef7a70b7ac54ff5ee9a8eeb22c29f803afdef98d548a71b339d8a3476908759cd4e6c50bd9be0c152fb4ffb3376b57cca52fb4efda3aabbd4fddd8e7085f1b64027f1b724449dbe4574291fc58fae7443e8296dc685318ab02e9ccce37f12e12fb2b2a2398d106e9d868c29c8ed9dd726ebf0a9427500b882a6b87e90dcc34bf1338"}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcc89}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "8317d71ef1cc1570d51f52a3c2d1ae072dd4d40454a6f63f4eab95b01353c00a2eaa4dc2aea0c1a5d32596bba2afb289cdaceb05059c6ebc31d019c973c839c812056c6b1ce13dea6876"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "e2749f094b2f1f623ee7c10e59"}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "cf6b15ec"}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "6c378c5ea3d4e7837811ad2396cb1a89722e66979bdcd4634887200bbd88ec07de3474a6c93e596544ad9d44ac8cbe5401ad76d08edfc5728b01ea10ec9a9bfa7a500e4b957217ca00516e06d784726e1c1cfe4d21516ecba3ec0d70"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 15:43:04 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 857.870643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:43:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x58}}, 0x0) 15:43:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setsig(0x4203, r3, 0x4670, &(0x7f0000000140)={0x34, 0xffff2a19, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a30000000000c00078008000640000000030500050000d0b5e06b135c32170c74a144d16208710000000500010006000000a5d7bbc13383"], 0x54}}, 0x0) 15:43:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x3f, 0x8207, 0x2, 0x7, r4}, 0x10) [ 858.216044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:43:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 15:43:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000040)) 15:43:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) move_pages(0x0, 0xa, &(0x7f0000000180)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000200)=[0x5, 0x100], &(0x7f0000000240)=[0x0, 0x0], 0x4) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f00000000c0)) 15:43:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="07000000020603000000000000000000000000000d0003006861730005000100070040000000030500050000000000050001000600000000000000000000800000000000000400"], 0x50}}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x204482, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r4, &(0x7f00000017c0), 0x1000000000000277, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) r6 = socket(0x25, 0x1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1}, &(0x7f000095dffc)=0x1) syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') sendmmsg$inet_sctp(r6, &(0x7f0000000140), 0x4924a8f, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r8, 0x434}, &(0x7f0000000100)=0x8) 15:43:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028408000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff, 0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) 15:43:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000002c0)={0x2, 0x2, @stop_pts=0x80000001}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x3, 0x1, 0x4, 0x0, 0xfffffffc, {0x0, 0x2710}, {0x5, 0x8, 0xda, 0x40, 0x71, 0x0, "2947d2ed"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0x9, 0xa7, @mem_offset=0x6de91d07, 0x80}, 0x5, 0x0, r1}) signalfd4(r4, &(0x7f0000000280)={[0x80000000]}, 0x8, 0x80000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syz_tun\x00', {0x7, 0x3, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) write$P9_RREADDIR(r7, &(0x7f0000000180)={0x49, 0x29, 0x2, {0x76d2, [{{0x724aa0e76fe39f26, 0x1}, 0x7, 0x5, 0x7, './file0'}, {{0x80, 0x2, 0x5}, 0x8001, 0x7, 0x7, './file0'}]}}, 0x49) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x18100, 0x0) 15:43:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', {0x7, 0x0, @multicast2}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) accept$phonet_pipe(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x10) 15:43:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040), 0x98, 0x3) 15:43:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000001c0)) 15:43:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6d616300000000050004000000000009000200d6b07a30000000000c00075cd30006400000000305000500000000000500010006000000e5c6791849550dc28679998c65621a038bde1b9b6355c365935da4b5ad81ffadb197f6afa2f76556670e71c6820fdd05a18721"], 0x54}}, 0x0) 15:43:06 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:07 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r4 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c) recvfrom$inet6(r4, &(0x7f00000001c0)=""/206, 0xce, 0x0, &(0x7f00000002c0)={0xa, 0x4e24, 0x405, @remote, 0x7fff}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:07 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:07 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f00000000c0)={0x2, 0x5}, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:43:07 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x225ce332) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) setfsuid(0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x1201c04, &(0x7f0000000400)={[{@index_off='index=off'}, {@default_permissions='default_permissions'}, {@metacopy_off='metacopy=off'}, {@nfs_export_off='nfs_export=off'}, {@index_off='index=off'}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, ':,}'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/.'}}, {@uid_eq={'uid'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snapshot\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_lt={'uid<', r6}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snapshot\x00'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$rxrpc(r4, &(0x7f00000002c0)="d77dd30100000085a66bddc0d3af5d3e0078747e1da89c5a767b2eb578357d65589c6aac0468580b748e85eaf30b93c2bf130824962459a8742049e79c3ad2acf5088106380dbfc1ee140d626f555e15e3d2ffa7db5f56fd3510", 0xfffffffffffffdb0, 0x40011, 0x0, 0xfffffffffffffd4d) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x440800, 0x0) splice(r9, 0x0, r2, 0x0, 0x0, 0xf) 15:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) fallocate(r1, 0xa, 0x8, 0xfd7e) 15:43:07 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003140), 0x5e3) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x59c3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3fc}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x70}}, 0x0) 15:43:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:43:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xc, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:43:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:43:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r5, 0x2cd2, 0x3, 0x7ff}) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0x7, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240), &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000007800)=@sack_info={0x0, 0x92, 0xda0}, 0xc) 15:43:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x8, 0x0, 0x77db, 0x6, 'syz1\x00', 0x3}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:43:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) 15:43:08 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0xe, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x48810) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40003, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xca}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:43:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000001c0)) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x13, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x90) 15:43:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:43:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:43:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8051) 15:43:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:43:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x18100, 0x0) 15:43:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:43:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x440802, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x1ff) r3 = dup(r1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x1, 0x0) setns(r4, 0x20000) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0200000002067fc279907dc1a5dd03ab78000000000000000000000086de26e83863e143d262f70d000300686173683a05000400000000000900020073797a30000000000c00078008000640000000030500cc795b"], 0x8d}}, 0x0) 15:43:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r3, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) 15:43:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) set_tid_address(&(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x1, 'vlan0\x00', {}, 0xfb5}) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) mkdirat$cgroup(r6, &(0x7f0000000280)='syz1\x00', 0x1ff) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r7, 0x80304d65, &(0x7f00000001c0)) 15:43:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = semget$private(0x0, 0x2, 0xe) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000040)=""/46) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') 15:43:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375bc0d3144ea98706530bf54f2650151d26775c6a8bdf934a5e834dae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'team0\x00', {0x2, 0x4e23, @loopback}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 15:43:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xf3}]}]}, 0x80}}, 0x0) 15:43:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) splice(r3, 0x0, r4, 0x0, 0x40, 0x0) 15:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) 15:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_FPEXC(0xc, 0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a30000000000c000780080063076dc918a02c7c7bfdc4331106400000000305000500000000000500010006000000"], 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x2c}}, 0x2040054) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8960, 0x91) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000720cc5c1e5259cb7f44ef5f7461ac76c389452ad8502bfefd67d2b093ea35cd394d2ae27b76a07cea5832a554902e43eb4070000006eb4db0e1c28a0b768b653d5d4302a791e015224206cacb699efca3f66dac49024c3b238f2d1640bbccfa6123080389fb354ea22903808755a5f010100008cb6a36e9fa6b88406982a5fdc36021f53b27d129e4f81e5676a203c1e7e0001fb297edb23fbc8b21d67608bbd4b68b997", @ANYRES16=r9, @ANYBLOB="04002dbd7000fddbdf2505000000050006000000000005000200080000000800050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x97028ba970669957}, 0x20000001) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x8a4, r9, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x36c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\\'\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']}^$\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.$/)!*\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "31104af34ace29d82ebafe6a231fab53"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "eeafb5bff83a77a6b4613803dbee9d772f324ba304582606b93b22437bf8dc308b771b30f558c7d4a9db159c5422700d353a32c4723e2ae289b21621fa8bd773d47fb0eda1e4b00d068240a804a3d3973df20be960eb9807858dce5b6f8d9600655cafd541a7c0fb658f7be8b0239d5f181becf720d4fe5a913f7f3d80b15f364e4f8e57d652a66835120338a86791d1902e700ff502a96ab4d4d781b09e6c3db7e617b7e5661cb4d834ee07cdfd58018c"}, @ETHTOOL_A_BITSET_MASK={0x24, 0x5, "ca0262b09200650414d5839479b38f21cc6d6eb0b46f0531a1296e81bf58b4b5"}, @ETHTOOL_A_BITSET_BITS={0x1cc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x144, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x135, 0x2, '\x00\xc1\b\xeeQ\xd2\x15\x8dM\x85#GF\xabot\x06x\xc1\xffm\x16S\x8a\x89\xe1h3\x84*\x99\x0es\xbc\xe2\xd9\x0e\x1e2\xa3\x84\xc2\xbc\x95\xd06\xcd\xab\xbc\xfd5\xe8\x92uK\xaa*T\xfbK\x88\xa3z\x8a\x13\xb7\xe2\x8e\n\xf2\xa2\xa4FQq\xf8e\x17\xc1\x17cl33\x8f\xe5\xad-\xb2K\x05\xf7x\xc4\xfa^\xc7\xa9\x15\xc1Z\x01\x12b\xf1\x98W\xa9\xe9#;\xc1\x86\x13!bc\x00!)\x97U\x80j\xa2\x92|6\xf2\xb3\x83P\x82T\xebb\xc1F\xb6\v\xeb\x05\xb6\x82\xddOlK{ML\f\xf0\xfe=O\xd7\a\xd0\x9fk\x18\xadnFF\xa5)P\xb2\x02e\xbc.\xc5\xc4?K\x19\xd4\xa9\xecfK\xcbC\x93%eN\x82e\xba\xdbo\x89\x84P\xfa\xb8\x8a\xee\xb4+j\xed\xdd\x03\x85\xb5\xb6>2\"\xc1\x98s\xed{\xa6$\x16\x12Lk\xcd\xf5\x81Rk\xcb\x86\xbc\xb3\x14qZ\xbd\r\x8f\xd2\xc7\x83\xda\xddY9\xa4\x87\xd7\xc7V\xbb\x00\xf2\xa9\x99Y\xd4\xabhJG`x\xb53\xcc;\xf6kA\x86\x8b\xdas\xea\xd7\xef\xcd\xde\x99\xae\x85\x18\x87}S&-\xf4\x89\x19\xac_\xa5\xb3O\xc1[\xe6\xebw\xe2*'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x500, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "39917b1462cbca2a6fdf5137cba5a05a932ddd1792f708fc74dd1066c95c892b3f74e2fb9030fd305cc47a93add2000ff118e37ba508f941f44c06d16fbe41c565e2ab780cba61806ad4d12e1fcc1056c91d889c4533170cc4158c8c29cd6c9d5a10111de2afcf65990bdbc668a6b51949282e5ddbe6778c95bba798d2eba2722cf8dcfcf63c0c3c61d6181843a2233119ef6e786a5edcf74495c266fc0e1dafbec466beebf8e8b74941be2b2d1cfdb7abaa723cd39150cdfd7f559a222ed51ec73dabe5d8053f331c028ae3c7eb19c8188778fb9a8b46eccae5ca556f8d1c4ff5b705c8a775cf"}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "640311e70e88fbe06ce73556c19f1f93f8b86d2c7eaba6f5ab"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '--$#+&]&.:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '+:$(!\\)\x01]-[^-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',n\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf8bf}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{][-]+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{*,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8fb}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',^,!\',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-[,($,\'\\\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "716528eeb59488e86200ad6fd3d2daa4814911dcfa0967d43e55d2a09ff2e7474826fdc0bebcb9442746237f3fecedd2987acac717cdaad1e90d7c7ea1edc041ab1c5e40af6194585c06a7f5574d30111de8f3c14192cde66fe43f5948737a5576bfdd4e88bf99be8d03cd05ef6a63a4fc10d806453537d64d3e4e6f4cf4436e0334cb120c52efb29cb182aa5c925a654e267d8698cfcaf379ed7defb3764d2664b4a88733293a7f9fc57de510d96aff37442c2088b6b3e829099ed3"}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe95}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'+/\xf5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '--&%}\b}#,^,@^~,**\v#\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^^!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}]}]}]}, 0x8a4}}, 0x40000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800ff00", @ANYRES16=r10, @ANYBLOB="000329bd7000fedbdf25010000000000000008410000004c00180000000365746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 15:43:10 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073e4af3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x1}, 0x460}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000040)=[0x9a, 0x3, 0xffffff01], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0x8d4, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000200)={{0x0, 0x1, 0x8, 0x0, 0x7}, 0x80000001, 0x100000001, 0x6}) [ 863.307619] nla_parse: 1 callbacks suppressed [ 863.307626] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 15:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, [], 0x34}, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x3aa, 0x2, 0x80, 0x0, 0x2e, 0x0, r7}, {0xfffffffffffff001, 0x0, 0x8, 0x1, 0x50f, 0x6, 0x1, 0x2}, {0xfffffffffffffffd, 0x3, 0xfffffffffffffffd, 0x800}, 0x5, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x32}, 0x4d4, 0x33}, 0xa, @in=@broadcast, 0x0, 0x1, 0x3, 0x1, 0x576, 0x1f, 0x330}}, 0xe8) r8 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) socket(0x11, 0x800000003, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 863.441806] [ 863.443478] ====================================================== [ 863.449798] WARNING: possible circular locking dependency detected [ 863.456120] 4.14.184-syzkaller #0 Not tainted [ 863.460613] ------------------------------------------------------ [ 863.466929] syz-executor.5/13528 is trying to acquire lock: [ 863.472635] (&event->child_mutex){+.+.}, at: [] perf_read+0x2a1/0x7c0 [ 863.481013] [ 863.481013] but task is already holding lock: 15:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) sync_file_range(r1, 0x10001, 0x6, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6d616300000062a1e2e183d61f87000900020073797a30000000020c000780080006400000000305000500000000000500010006000000"], 0x54}}, 0x0) 15:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}]}]}, 0x78}}, 0x0) [ 863.486986] (&cpuctx_mutex){+.+.}, at: [] perf_event_ctx_lock_nested+0x14d/0x2c0 [ 863.496275] [ 863.496275] which lock already depends on the new lock. [ 863.496275] [ 863.504686] [ 863.504686] the existing dependency chain (in reverse order) is: [ 863.512312] [ 863.512312] -> #5 (&cpuctx_mutex){+.+.}: [ 863.518211] __mutex_lock+0xe8/0x1430 [ 863.522542] perf_event_init_cpu+0xb7/0x170 [ 863.527394] perf_event_init+0x2cc/0x308 [ 863.531982] start_kernel+0x46b/0x771 15:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x70}}, 0x0) [ 863.535363] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 863.536306] secondary_startup_64+0xa5/0xb0 [ 863.536310] [ 863.536310] -> #4 (pmus_lock){+.+.}: [ 863.536326] __mutex_lock+0xe8/0x1430 [ 863.536337] perf_event_init_cpu+0x2c/0x170 [ 863.564089] cpuhp_invoke_callback+0x1e6/0x1a90 [ 863.568878] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 863.569281] _cpu_up+0x21a/0x520 [ 863.569292] do_cpu_up+0x9a/0x160 [ 863.585848] smp_init+0x197/0x1ac [ 863.589831] kernel_init_freeable+0x3f4/0x615 [ 863.594850] kernel_init+0xd/0x15b [ 863.598908] ret_from_fork+0x24/0x30 [ 863.603142] [ 863.603142] -> #3 (cpu_hotplug_lock.rw_sem){++++}: [ 863.609740] cpus_read_lock+0x39/0xc0 [ 863.614071] static_key_slow_inc+0xe/0x20 [ 863.618751] tracepoint_probe_register_prio+0x4dc/0x6d0 [ 863.624643] trace_event_reg+0x272/0x330 [ 863.629320] perf_trace_init+0x424/0xa50 [ 863.633964] perf_tp_event_init+0x79/0xf0 [ 863.638637] perf_try_init_event+0x15b/0x1f0 [ 863.643576] perf_event_alloc.part.0+0xdd4/0x25c0 [ 863.648948] SyS_perf_event_open+0x68c/0x24b0 [ 863.653969] do_syscall_64+0x1d5/0x640 [ 863.658378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 863.664143] [ 863.664143] -> #2 (tracepoints_mutex){+.+.}: [ 863.670026] __mutex_lock+0xe8/0x1430 [ 863.674345] tracepoint_probe_register_prio+0x36/0x6d0 [ 863.680140] trace_event_reg+0x272/0x330 [ 863.684711] perf_trace_init+0x424/0xa50 [ 863.689386] perf_tp_event_init+0x79/0xf0 [ 863.694049] perf_try_init_event+0x15b/0x1f0 [ 863.698978] perf_event_alloc.part.0+0xdd4/0x25c0 [ 863.704461] SyS_perf_event_open+0x68c/0x24b0 [ 863.709468] do_syscall_64+0x1d5/0x640 [ 863.713875] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 863.719577] [ 863.719577] -> #1 (event_mutex){+.+.}: [ 863.724936] __mutex_lock+0xe8/0x1430 [ 863.729371] perf_trace_destroy+0x23/0xf0 [ 863.734036] _free_event+0x328/0xe50 [ 863.738263] free_event+0x32/0x40 [ 863.742227] perf_event_release_kernel+0x35c/0x870 [ 863.747811] perf_release+0x33/0x40 [ 863.751951] __fput+0x25f/0x7a0 [ 863.755750] task_work_run+0x113/0x190 [ 863.760151] exit_to_usermode_loop+0x1ad/0x200 [ 863.765249] do_syscall_64+0x4a3/0x640 [ 863.769650] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 863.775347] [ 863.775347] -> #0 (&event->child_mutex){+.+.}: [ 863.781411] lock_acquire+0x170/0x3f0 [ 863.785738] __mutex_lock+0xe8/0x1430 [ 863.790043] perf_read+0x2a1/0x7c0 [ 863.794099] __vfs_read+0xe4/0x610 [ 863.798263] vfs_read+0x131/0x330 [ 863.802426] SyS_read+0xf2/0x210 [ 863.806299] do_syscall_64+0x1d5/0x640 [ 863.810695] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 863.816390] [ 863.816390] other info that might help us debug this: [ 863.816390] [ 863.824520] Chain exists of: [ 863.824520] &event->child_mutex --> pmus_lock --> &cpuctx_mutex [ 863.824520] [ 863.835091] Possible unsafe locking scenario: [ 863.835091] [ 863.841303] CPU0 CPU1 [ 863.845955] ---- ---- [ 863.850608] lock(&cpuctx_mutex); [ 863.854138] lock(pmus_lock); [ 863.859845] lock(&cpuctx_mutex); [ 863.866022] lock(&event->child_mutex); [ 863.870073] [ 863.870073] *** DEADLOCK *** [ 863.870073] [ 863.876118] 1 lock held by syz-executor.5/13528: [ 863.880854] #0: (&cpuctx_mutex){+.+.}, at: [] perf_event_ctx_lock_nested+0x14d/0x2c0 [ 863.890468] [ 863.890468] stack backtrace: [ 863.894957] CPU: 1 PID: 13528 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 863.902826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.912171] Call Trace: [ 863.914764] dump_stack+0x1b2/0x283 [ 863.918386] print_circular_bug.isra.0.cold+0x2dc/0x425 [ 863.923735] __lock_acquire+0x3057/0x42a0 [ 863.927869] ? trace_hardirqs_on+0x10/0x10 [ 863.932223] ? check_preemption_disabled+0x35/0x240 [ 863.937237] ? __kmalloc+0x15a/0x400 [ 863.940935] ? __vfs_read+0xe4/0x610 [ 863.944639] ? vfs_read+0x131/0x330 [ 863.948250] ? SyS_read+0xf2/0x210 [ 863.951775] ? do_syscall_64+0x1d5/0x640 [ 863.955823] lock_acquire+0x170/0x3f0 [ 863.959612] ? perf_read+0x2a1/0x7c0 [ 863.963315] ? perf_read+0x2a1/0x7c0 [ 863.967013] __mutex_lock+0xe8/0x1430 [ 863.970801] ? perf_read+0x2a1/0x7c0 [ 863.974661] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 863.979583] ? perf_read+0x2a1/0x7c0 [ 863.983286] ? HARDIRQ_verbose+0x10/0x10 [ 863.987336] ? lock_downgrade+0x6e0/0x6e0 [ 863.991475] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 863.996927] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 864.002381] ? rcu_read_lock_sched_held+0x10a/0x130 [ 864.007389] ? __kmalloc+0x3a4/0x400 [ 864.011222] ? perf_read+0x2a1/0x7c0 [ 864.014927] perf_read+0x2a1/0x7c0 [ 864.018548] ? cpu_clock_event_init+0xe0/0xe0 [ 864.023030] ? perf_trace_lock+0x109/0x4b0 [ 864.027249] ? fsnotify+0x897/0x1110 [ 864.030947] ? selinux_is_enabled+0x5/0x50 [ 864.035173] ? creds_are_invalid+0x44/0x100 [ 864.039656] ? inode_has_perm.isra.0+0x153/0x1d0 [ 864.044404] __vfs_read+0xe4/0x610 [ 864.047947] ? cpu_clock_event_init+0xe0/0xe0 [ 864.052555] ? inode_has_perm.isra.0+0x1d0/0x1d0 [ 864.057309] ? vfs_copy_file_range+0x990/0x990 [ 864.061891] ? selinux_file_permission+0x7a/0x440 [ 864.066970] ? security_file_permission+0x82/0x1e0 [ 864.071892] ? rw_verify_area+0xe1/0x290 [ 864.075946] vfs_read+0x131/0x330 [ 864.079477] SyS_read+0xf2/0x210 [ 864.082837] ? kernel_write+0x110/0x110 [ 864.086930] ? SyS_clock_settime+0x1a0/0x1a0 [ 864.091328] ? do_syscall_64+0x4c/0x640 [ 864.095297] ? kernel_write+0x110/0x110 [ 864.099354] do_syscall_64+0x1d5/0x640 [ 864.103320] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 864.108710] RIP: 0033:0x45c1d9 [ 864.111900] RSP: 002b:00007fcc5b490c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 864.119733] RAX: ffffffffffffffda RBX: 0000000000024100 RCX: 000000000045c1d9 [ 864.126994] RDX: 00000000000005e3 RSI: 0000000020003140 RDI: 0000000000000007 [ 864.134264] RBP: 000000000078c080 R08: 0000000000000000 R09: 0000000000000000 [ 864.141622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 864.148887] R13: 00007ffdfc64687f R14: 00007fcc5b4919c0 R15: 000000000078c04c 15:43:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaad21efb6b8101000086dd60163dac00183200fe80000000000000000000000001000001239d12bf8126762a0342c58b17447d93e17657f87a608a2e9a13fcf83030e1b378e50426f35e90132f198c88d11c79fb9d39ec7e148a1c02b8f7ba4648b1ef890ebfcfed911b19c641570c6c4eadf29a6948c4acdd163db7e3509c2267f674f148ce039cd392e3989ac985b34e11ed2c934805e36ab3009df45596f10489b78b42a93c8e63938c487d5c1ca9c812c1223cd89be39900"/207], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x68}}, 0x0) 15:43:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x68}}, 0x0) 15:43:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) socket(0x11, 0x800000003, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x68}}, 0x0) 15:43:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) socket(0x11, 0x800000003, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000033c0)='net/sco\x00') r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) getsockopt$sock_int(r6, 0x1, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) dup(r5) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000003400)={r5, r2}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:11 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x0, 0x9, 0xffffff81, 0x100}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x68}}, 0x0) 15:43:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) socket(0x11, 0x800000003, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x7fff, 0x800, 0x5, 0x2}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) 15:43:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x70}}, 0x0) 15:43:12 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x1) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r2, 0x48280) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r5, &(0x7f0000000000)={0x14}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="07000000480f000000fb2bb4e40059a412e2cc3a593d3d57fa5553d9ca985b76956085c6b04a6f523424a3f49b3c4f0926ded9f4fa2b04f375004faa6327adc61416256eb2f26b003d3290d7466d51c18e6659c8445e3b8263ff65da4cd22085353fc16f43b6d8b90d341daf6e068cf7de241a7db553ef3af5aeee1d00a9ff8188efb501f408b989e5008f7d"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff82) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x46) 15:43:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x68}}, 0x0) 15:43:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00', {0x7, 0x4, @rand_addr=0x64010102}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240), &(0x7f00000008c0)=0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x794f, @remote, 0x2}}}, 0x84) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000440)=""/214, 0xd6}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/79, 0x4f}], 0x8, &(0x7f0000000780)=""/2, 0x2}, 0x2001) write$binfmt_misc(r1, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESDEC=r0], 0x1000000c8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000540)=0x3, 0x10001) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) getsockname$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = dup(0xffffffffffffffff) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000280)={0x0, 0x128, 0x3}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000020000000001"], 0x52) r6 = semget$private(0x0, 0x3, 0x0) semctl$GETPID(r6, 0x3, 0xb, 0x0) semctl$SETVAL(r6, 0x2, 0x10, &(0x7f00000000c0)=0x7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) getdents(r1, &(0x7f0000000200)=""/69, 0x45) splice(r0, 0x0, r3, 0x0, 0x18100, 0x0) 15:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) [ 865.160084] audit: type=1804 audit(1595086992.146:215): pid=13599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1747/bus" dev="sda1" ino=16696 res=1 15:43:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 865.210660] audit: type=1804 audit(1595086992.146:216): pid=13599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1747/bus" dev="sda1" ino=16696 res=1 [ 865.250165] audit: type=1804 audit(1595086992.236:217): pid=13599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1747/bus" dev="sda1" ino=16696 res=1 [ 865.286672] audit: type=1804 audit(1595086992.276:218): pid=13599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1747/bus" dev="sda1" ino=16696 res=1 15:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010025bd7000ffdbdf2507000000868a18e0d4c57faa8b2b6b752b3c000380080003005c330000080003000f00000008000180a225aa2467ab174c6a093b40ff32c4bc4faef9aea081ed610bacf9adfd8d1ed143d5a62719827d105b218038b2752aafa0e6f7e7a8af70497654b7438f2e098cb617802e57d7d83164c58e925c04860ac2c9e3e1059c55632a6971dde3988086122ab34fbe03e09300c68d1faf"], 0x9c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:12 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x39, "f5afb880a6f88f94e4fdfcf331cdf6b4f05ef6aee9918a6f1717723eb90c9c1b654f80a0fd85769350ff56af7394b7dc46ff16bed402959e6b"}, &(0x7f00000000c0)=0x5d) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000003140), 0x5e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x2, 0x2, 0x4, 0x2, 0x70, {0x0, 0xea60}, {0x5, 0x1, 0xb6, 0x0, 0x7, 0x7, "a5ca1476"}, 0x6, 0x1, @fd=r9, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x8c8d, 0x1, 0x4, 0x4000, 0x9, {r4, r5/1000+10000}, {0x3, 0x2, 0xea, 0x8, 0xf9, 0xff, "7f04c5dd"}, 0x100, 0x1, @fd=r7, 0x2, 0x0, r10}) [ 865.312947] audit: type=1804 audit(1595086992.306:219): pid=13607 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1747/bus" dev="sda1" ino=16696 res=1 15:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x68}}, 0x0) [ 865.341050] audit: type=1804 audit(1595086992.306:220): pid=13599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir302173189/syzkaller.7UBMUZ/1747/bus" dev="sda1" ino=16696 res=1 15:43:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x7a200, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x2, 0x400, 0x89, &(0x7f00000000c0)="428358f922286a314996b744ad6857677906d7ae30484d7b9fdae3084179e7330790a3a5759825dc70d58fae62b0527e979d9d3c4a37f75b1cf1b25c1f506eaaca4ba4b2344f3f61975419441ab18300df406e30b5bd37877cf85e641760c80bba67aecad22506c917ba9c6a53b9ec49b802f8035d152a187a6e993389b1d066cab41fe878116e41ac"}) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540040000206030000000000000200000000000000000300686173683a6d61630000000005000400000000000900020073797a30000000000c000780080006400000000385000500000000000500010006cc000047964b2be7a7a1abb663db38d3201ec4b7e22d573efc58f3c881b466a09eb3eeeef3e72395fa5eabc0be10848fd9e8a582a9ce5664e7f926be2dc0d8c22240f154cf6957641da1"], 0x54}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio1\x00', 0x200603, 0x0) 15:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) getcwd(&(0x7f0000000180)=""/4096, 0x1000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x4, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x55}, 0x6d842e6a13080cd7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x1000) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:13 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x1}, 0x8, 0x0, 0x0, 0x80}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r4) r5 = fcntl$dupfd(r3, 0x406, r4) write$P9_RSETATTR(r5, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x7, 0x4}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x80, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x03'}}, {@cache_fscache='cache=fscache'}, {@afid={'afid', 0x3d, 0x4}}, {@debug={'debug', 0x3d, 0x3f}}], [{@context={'context', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r7}}]}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:13 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x800) 15:43:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003140), 0x5e3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000005000000000000000d000300686173683a6d61630000000005000400000000000900020073797a30000000000c000780080006400000000305000500000000000500010006000000"], 0x54}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 15:43:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 15:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000100)=""/236, &(0x7f0000000200)=0xec) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r3) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000000c0)={'veth1_to_bridge\x00', {0x2, 0x4e21, @broadcast}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'bond0\x00', 0xf2c8}) 15:43:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x77c50003d793db9a, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe80000000000000000000000000000000000000000000000001"], 0x52) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x8, 0x5, 0x80000, 0x9, 0x6, 0x1}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x990000, 0x8, 0x7ff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909c8, 0x3, [], @ptr=0xbdf}}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x18090}, 0x20000000) 15:43:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:13 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffcca, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}}, 0x0) 15:43:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f0000000140)=@caif=@dgm, &(0x7f00000001c0)=0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) r7 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0xffffffff00000001, 0x0, 0xa, 0x1e, 0x13, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd1309e54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef7100", "4e3483140010844d337d11adbaf641bf1c18000000000000000000002d067904", [0x1, 0x8]}) write$tun(0xffffffffffffffff, &(0x7f0000001940)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r7, @ANYRES16=r4, @ANYRESHEX=0x0, @ANYRESDEC=r5, @ANYRES64, @ANYBLOB="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", @ANYRESDEC=r6], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x20000, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x0, 0x9, 0xfff, 0x101, 0xa, "545457550a3e4b4a285fd1b192712dfdeac8b0"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) 15:43:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) 15:43:14 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0xfffffffffffffef4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 15:43:14 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) 15:43:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 15:43:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf0, 0x1f, 0x0, 0x1, 0x0, 0x8, 0x831, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0xd}, 0x100, 0x80, 0x394, 0x3, 0x7ff, 0x9b, 0xff}, r2, 0xd, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000240)=0x2) read$fb(r1, &(0x7f0000000180)=""/177, 0xb1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000280)={0xf}) r6 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x9, 0x8000) splice(r0, 0x0, r6, 0x0, 0x18100, 0x0) 15:43:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) 15:43:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:14 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x108, 0x1, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ff}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb2}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @ipv4={[], [], @multicast2}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={[], [], @multicast1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c844}, 0x4010) 15:43:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) 15:43:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1a8, 0xffffffff, 0x1a8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'hsr0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xa8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @local, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\x00', 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x3, @local, 0x1f}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) getsockname$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x20) 15:43:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) 15:43:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 15:43:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbb163dac00183200fe8000000000000000000000000000aaff0200000000000000000000000000011ddd2344ebcf3600"/65], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:15 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008020}, 0x8000) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:15 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) getsockopt$netlink(r3, 0x10e, 0x6, &(0x7f0000000280)=""/188, &(0x7f0000000340)=0xbc) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0)="3cf70fd5a50091917d3f2e5c31be23aa9e9b6a658583e244f4af3b46046004166773ba0b23d668abbbee94171a49c5c92e8b37bf5062b1b2", 0x38, r2}, 0x68) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) splice(r4, &(0x7f0000000040)=0x4, r5, &(0x7f00000000c0), 0x21ca, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:15 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r3, &(0x7f0000000380)=""/87, 0x1f7) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00', {0x7, 0x0, @remote}}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r6) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000100)) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB="accad9005855c865e2d01bdd1e9d0e885db69ff25adce3fa26a24edf196b23575a2e316d55bbf2078d000000000000000074d46f18497849fd1b42195eb926ed4676e9fbfb7b3c551cb46022aad8d87e1c0846617e86d2f0998d3f71cce586caa712b158eab9cb5c726a83b052e8b91a7613ef5a97d375fabba9bd93cc15d878497414c29dd8c61968850ab0f0f0ede4e6400ef64b4b07e3340e153a3474acd28cc59b0f40b5b86449572dca3e9732ef0120"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 15:43:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 15:43:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 15:43:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x1000) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a30000000000c0007030500050000000000050001000600"/84], 0x54}}, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003140), 0x5e3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4100200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) 15:43:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0x40044103, &(0x7f00000000c0)=0x3ff) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa551095ca8101000075dc60163dac00183200fe8000000000000000000080000000aaff02000021000000d34ed8ecc75f25c2646550fb00000000000000018e731d506ee6730d624cf2f51024bd135458645f2724237f421957c8"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 869.561986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 869.578328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:43:16 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000003140), 0x5e3) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18100, 0x0) 15:43:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x50}}, 0x0) 15:43:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 15:43:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x1000) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000004000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a300000000010d258f49599acc53184ef0c00078008100740000000140305000500000000000500010006f8ff"], 0x54}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r11) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x4, r3}], {0x4, 0x6}, [{0x8, 0x5, r5}, {0x8, 0x0, r7}, {0x8, 0x2, r9}, {0x8, 0x2, r11}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x1) 15:43:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:43:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:43:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000140)={0xf08, [0x9, 0x8915, 0xfffc, 0x3, 0x0, 0xff00, 0x4, 0x2, 0x3, 0x4, 0x8001, 0x8, 0x8001, 0xfff, 0x100, 0x1ff, 0x7, 0x8, 0x3, 0x8, 0xd534, 0x3, 0x951, 0x10, 0xffe1, 0x2, 0x6, 0x2, 0x60, 0x749, 0x4, 0x4, 0x0, 0x9, 0x68b, 0x61a2, 0x5, 0x3, 0x2, 0x1, 0xfffd, 0x5, 0xff00, 0xb2f, 0x7, 0x80, 0xfff8, 0x7f], 0x2}) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d0003006861734c3a6d61630000000005000400000000000900020073797a30000000000c0007800800064000000003050005000000000005000100060000009a4317f056954747543214767cbd362c2899c71e92f5e331"], 0x54}}, 0x0) [ 869.784238] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 869.797433] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 15:43:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:43:17 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000206012d0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000006400000000505000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:43:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbb9baaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff0200000000000000ff010000020001eea5cc7c5941ffecebf9301fc8a9ea31d4417a57c6ad58f56a88d938646708b12deb41f31e95b8d3793225544ca30b6d8b88334219926c6beeaab1fc84e5056eb667ca6752e7a99a2cdb40336cbfa6eece07ad431e16cdcd8183e46633ef61a9c728e2abc8f60c2647a1685f0b40b5d3609e5677fd"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r4, 0xae9a) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003140), 0x5e3) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'ip6gre0\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000020000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYBLOB="c1f2559c5e2ba1b3f99608acf07b9d58fbcc54ba213d7d83c285f5eedf7277c42ba3140e8000d518c861d50635"], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f00000000c0)="ccc735978f7d168b3b4ac1c218f426ae408f297c46220815cee2b5f42a83cbd297ef95043aafc6b83fc5bbfab6824dff032bbaa39a35942e03ade84bc491d940c2437fcb2f201b17cd376a756769caa3ef24d463ff71271eb4c761b67d60fb5151e147ef49c6aa69f5e5db2ff721905b0f4ad1cbd4", 0x75) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x49c000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x105900) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) read$FUSE(r8, &(0x7f0000003140), 0x5e3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r8, 0x4008af23, &(0x7f00000002c0)={0x3, 0x5}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="98010000", @ANYRES16=r6, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4008060}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x85) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r9 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x1282) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000001, 0x0, 0xa, 0x13, 0x10, "6ab9b5adcb2f4782e03ac272049b60ce1ebb0edf91cce3da66e581c26ee54a67a9f32b3a31a5d2d60adbe79fea79ac2c817cac9638118f200dbefd60ec66bfaf", "bb29657375fa48405a10eecfd130bf54f2650151d26775c6a8bdf934a5e81bdae689fb68f2e0766ef834abc0e8323d540fa3b8dd0ba9ef90a6175d27df2a4071", "4e340314d16e844d3ff1cdaa194e5646e6bb25b3256b303f0966baf641bf1c18", [0x1, 0x8]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 15:43:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:43:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:43:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003140), 0x5e3) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x1000) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8101000086dd60163dac00183200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:43:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:43:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 15:43:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 15:43:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x